This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
File:                     8434BF9DA91DE0828DA937403DB8B94230696BE8.mft (raw, json)
Hash identifier:          MTd49Wh2+c9La74y9vkoPGMp2i4QE7i5s8uqFPkLWrc=
Subject key identifier:   F5:2A:DE:30:19:BA:0B:EC:93:8C:39:91:C1:E5:F1:18:B7:1B:79:04
Authority key identifier: 84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8
Certificate issuer:       /CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
Certificate serial:       501E946E034A78ADC2828ABA41A92EED2851CDF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
Manifest number:          0147
Signing time:             Sun 25 Jan 2026 06:23:59 +0000
Manifest this update:     Sun 25 Jan 2026 06:18:59 +0000
Manifest next update:     Mon 26 Jan 2026 08:06:59 +0000
Files and hashes:         1: 3134332e302e3234302e302f32342d3234203d3e20323731323137.roa (hash: wJN76ufROtTddlk4slpumH8mLU1sH4O03h4M06Wd1Rg=)
                          2: 8434BF9DA91DE0828DA937403DB8B94230696BE8.crl (hash: rkjiPnLL0BDrdZBdgBPXnfjRaGhbFXI/gH3P4qIIRDI=)
                          3: 3134332e302e3234322e302f32342d3234203d3e20323731323137.roa (hash: LnmvvZzQ9lJai8D9OG+g8sbNtW9nybtn5FCuY9XcaAs=)
                          4: 3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (hash: Qu0+QQT74FIMzrfTSMR/FBALc0ImisOyFJzHeTi3dyA=)
                          5: 3134332e302e3234332e302f32342d3234203d3e20323731323137.roa (hash: 739+AbVMn3jpd575EXG3HN+2K2VD6FD3sIFEe3h3DNk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1e:94:6e:03:4a:78:ad:c2:82:8a:ba:41:a9:2e:ed:28:51:cd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
        Validity
            Not Before: Jan 25 06:18:59 2026 GMT
            Not After : Jan 26 08:06:59 2026 GMT
        Subject: CN=F52ADE3019BA0BEC938C3991C1E5F118B71B7904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:da:24:36:a7:ca:39:3a:61:3e:3e:1b:f2:
                    f6:58:25:c6:4d:71:7b:62:12:39:67:ca:ad:63:2d:
                    82:f6:94:ef:87:c5:57:d3:ce:73:04:fc:6a:b1:8c:
                    cf:2b:6b:b5:e9:b1:63:21:7b:42:b6:cb:59:17:3f:
                    80:87:0d:c5:a7:51:bd:01:9f:fa:b5:29:38:ac:7b:
                    ba:1d:47:07:b0:29:06:97:6a:a5:59:21:54:f2:5d:
                    dd:d6:92:90:fe:64:8f:67:e9:a7:c6:df:45:05:55:
                    01:b3:85:10:d3:27:f5:f4:c7:32:d6:8f:3e:ac:ab:
                    0f:a6:97:f1:5d:11:62:07:02:53:3b:24:2a:b8:0d:
                    1a:77:e6:9d:60:89:4f:af:3d:53:5d:83:91:78:5f:
                    87:63:a8:b6:54:61:92:1a:f0:42:6e:61:73:df:af:
                    dd:64:c3:2e:f7:fb:69:94:b0:bb:1a:a4:91:32:d3:
                    d9:85:b1:f4:17:4c:1e:e6:8c:11:79:93:3f:d5:aa:
                    ed:f0:d6:16:a3:3b:3d:7d:f6:8c:92:f0:9d:f5:e6:
                    26:16:01:07:51:6a:06:72:48:20:6b:6b:b2:14:e9:
                    dd:34:a0:c4:4a:f3:ed:ac:0a:58:d3:06:45:bd:51:
                    ef:51:22:3d:46:cf:3f:fe:e5:1c:95:7a:05:53:10:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:DE:30:19:BA:0B:EC:93:8C:39:91:C1:E5:F1:18:B7:1B:79:04
            X509v3 Authority Key Identifier:
                keyid:84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:a0:38:79:d6:1d:0f:6d:8f:ef:bf:8b:bf:40:c3:f1:90:
         bb:fb:98:df:32:bb:27:9a:23:b5:3f:a6:3d:55:5d:9e:b2:37:
         52:62:e3:54:68:e6:6b:b4:a9:bb:3b:8d:06:cf:17:8b:b2:e6:
         aa:81:cd:2b:9d:a6:6c:4c:d9:39:bf:8f:ed:f7:7d:45:4c:26:
         48:36:50:1b:f2:68:aa:61:59:ed:70:7b:e3:34:b6:8b:43:89:
         18:2a:ba:66:17:97:9a:29:06:ae:3b:d1:b4:ee:96:c5:62:46:
         9c:1d:8c:bd:02:8a:48:fe:5b:17:93:51:a4:10:37:83:e4:3b:
         b1:ab:04:09:1f:bc:55:b3:a7:04:6e:0a:9e:ec:fa:f8:a6:53:
         ab:43:a4:16:b8:c2:3e:32:80:0e:d7:98:6f:e7:af:ee:92:8b:
         5f:0d:89:c0:a8:f2:c6:a4:03:42:6d:56:8a:31:95:4c:8a:ae:
         4c:6b:fb:09:0b:dc:19:0e:06:7c:14:8e:d9:dd:80:0d:3a:69:
         20:66:d2:6a:f1:1f:e6:e5:b9:4a:40:02:b1:5f:0d:ee:fa:3c:
         a3:70:64:cf:99:a2:89:a4:0c:8f:4e:bb:88:72:9a:31:b5:8d:
         8d:f2:a0:33:ec:00:58:91:fd:03:91:b4:f2:0d:51:c9:1e:d4:
         ec:ca:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:03:35 2026 by rpki-client