This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
File:                     028CDE0E764AA87F51C83E2608B8562B72B4E204.mft (raw, json)
Hash identifier:          0W6IRi864lJg9WGISfYTowDu9zLmZ3r1a8e3KKxZnYQ=
Subject key identifier:   43:19:1A:EF:61:AA:B3:8E:AE:C4:F6:99:C0:B0:55:BB:6A:40:08:5F
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       463ACE83B11C875A1B06B3BD448E70206A68CAAF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
Manifest number:          02C1
Signing time:             Sun 25 Jan 2026 10:02:05 +0000
Manifest this update:     Sun 25 Jan 2026 09:57:05 +0000
Manifest next update:     Mon 26 Jan 2026 12:27:05 +0000
Files and hashes:         1: 3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa (hash: AYURMyXShVOqbks6tjgXM8FtP0D6lCrYdJy++cM1+DA=)
                          2: 3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa (hash: xSRAxxuIs62Au1lb9VrP826H7g9Pl81bdvaLd0aVrdo=)
                          3: 323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa (hash: exrVGzFM4PQs3Ow7UrlVVMgucqy67jpegHReK+dCAAI=)
                          4: 3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa (hash: XCAkYOJ8mCO8rAcNOs9kne64qsoHpJBd5hRd92N0SvQ=)
                          5: 3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa (hash: r3FM8dpCQcbz5YPF+OOcKyh6+rMJdzK4dOZag4Q7paU=)
                          6: 323830343a313266633a353030303a3a2f33362d3336203d3e20323633353038.roa (hash: MsNobDxjgM8uFtnLIqZXQ6u7PVpojTGmdSzTxa+tNgM=)
                          7: 3139312e3234332e3136382e302f32332d3233203d3e20323633353038.roa (hash: RQctsRVoOJxezau6GswgunQIVxMf6pzan4QHxyLdUTw=)
                          8: 3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa (hash: /8dX/9qIbUhB7WeEyxl4FPwQjB4MBog/rXqTeB+QshQ=)
                          9: 3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa (hash: 3nWEyNYegFi2A5JDkM1e7auC1lPrhU9yQ61MNUzTmFM=)
                          10: 3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa (hash: /Z7gCO0TtE+zd5S/jnyZOycGx6dui5YjFRQEXjFhoko=)
                          11: 323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa (hash: NzbI+wuTB+WJxl1rXdvM/CXR+N6Sbf/PTfEnhKr2DZk=)
                          12: 3139312e3234332e3137342e302f32342d3234203d3e20323633353038.roa (hash: kp2FFajxMXUe07fT0q4OqZQyDZ9Ekhqb2i39gzqFlTw=)
                          13: 028CDE0E764AA87F51C83E2608B8562B72B4E204.crl (hash: qXp2QNEyKVySElBnAuiMPY36eTTaB3N1O7yPp4Z/d0Y=)
                          14: 3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa (hash: wgDhzKotIdO8DJI/8JwXeAvB5vebL+GCI4BueTObvbk=)
                          15: 3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa (hash: qBfXOg+r/YQnFmRCN1vXOwdzzU1lIYgU+b9DCN2rbtU=)
                          16: 3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa (hash: Jm6RPTjMbKjcCpksX9/Vghi4t3v/7Mbli9AOmcwcDKs=)
                          17: 3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa (hash: Y26mSbhdZV5hA4TVKXezd3nwZMtVkiF0zAvynXcZT5A=)
                          18: 3139312e3234332e3136372e302f32342d3234203d3e20323633353038.roa (hash: 531xRxG7iGNQplSlgu6+IGgLWfO9GMpQQ79HefdA5lw=)
                          19: 323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa (hash: tx8nXVMlsWh7soi0Uuh876uliOoNjFVU3cLmEeaxYCg=)
                          20: 323830343a313266633a3a2f33362d3336203d3e20323633353038.roa (hash: E4ycx1I5k0soOGJEBLwLr3Sxmfoq3IfSyho777Q3Pmk=)
                          21: 3139312e3234332e3136352e302f32342d3234203d3e20323633353038.roa (hash: gzpN/v3Fkg6EiRD2tHZAPCqLWX964t9F14vPipEnzHQ=)
                          22: 3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa (hash: Bp0AyrEOsI5SQgXVei3LpuEYByGFT1WR4GpGQXm+ZIs=)
                          23: 3139312e3234332e3137302e302f32342d3234203d3e20323633353038.roa (hash: Gde+7BJX6WpFb0AshZjxz1Yy3eZCxZJuyr1WwfMhFvc=)
                          24: 323830343a313266633a333030303a3a2f34302d3430203d3e20323633353038.roa (hash: 2M1BXFkRz7oBMJiw0H3JA7zTsKKZTLThpbxdrLRSRtE=)
                          25: 3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa (hash: fPlSnZGwlk45NgQUcJOvHLwKFlJLuMkPDoK/9sGQ86I=)
                          26: 323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa (hash: 2s8cx4yE3ePCw4vkIvHqBeoZU2/iWiup+ihLnIVjosk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3a:ce:83:b1:1c:87:5a:1b:06:b3:bd:44:8e:70:20:6a:68:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 25 09:57:05 2026 GMT
            Not After : Jan 26 12:27:05 2026 GMT
        Subject: CN=43191AEF61AAB38EAEC4F699C0B055BB6A40085F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:a5:45:4e:6f:77:2b:55:09:af:3d:04:46:
                    43:a2:93:96:eb:9d:f2:0e:9b:b6:bf:53:e3:88:7b:
                    90:06:b2:4d:ee:e3:82:08:92:53:6a:9a:b5:ae:15:
                    68:19:6f:9f:e3:2b:01:b3:b0:13:65:1b:4c:d0:67:
                    e0:37:b3:67:a0:79:f7:65:9d:0a:40:23:92:1d:02:
                    b8:c0:a8:93:93:68:e5:c3:ba:50:e4:11:f2:9c:07:
                    b6:84:fc:fc:b2:4c:3e:0d:e3:f9:df:38:e0:60:73:
                    14:59:92:d4:42:3a:ce:f7:25:a9:05:46:ab:e8:fe:
                    99:24:3e:7d:53:43:a0:1f:9e:b4:b7:91:7f:21:8f:
                    c8:00:c7:a7:1d:94:82:33:49:2f:2c:ba:e6:97:c0:
                    f4:29:ba:f0:84:29:d9:9a:f5:1f:15:57:d2:51:21:
                    c7:1d:e8:fe:b4:86:fb:9b:c8:8e:42:2c:aa:e2:c3:
                    ff:7a:ed:93:0c:03:49:a6:19:1e:8a:b9:94:cc:2b:
                    3c:ae:7d:8d:de:86:10:c8:28:00:8b:72:fe:39:03:
                    38:51:eb:a7:aa:36:3f:df:2b:b0:04:60:43:69:85:
                    ad:6c:ee:af:33:b7:11:b5:58:0c:e9:bf:f1:d4:8a:
                    79:f1:b6:ae:67:d8:fb:ca:70:82:a4:14:fb:35:32:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:1A:EF:61:AA:B3:8E:AE:C4:F6:99:C0:B0:55:BB:6A:40:08:5F
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:08:9d:68:71:79:10:74:17:08:55:b3:c7:87:83:32:81:cc:
         43:00:0e:e1:26:de:7a:13:d9:ad:a8:de:45:0f:0f:c6:09:11:
         3d:49:48:a5:3a:ad:d8:92:aa:bc:0e:e2:4d:5a:1d:05:8f:39:
         99:18:d5:2c:06:64:56:77:dd:04:74:c0:88:e9:9f:02:56:a5:
         d4:1a:2f:7f:5e:52:a3:b0:76:9b:8a:15:8a:17:70:cd:33:95:
         13:ab:bf:8d:20:40:0c:5a:92:d1:d4:aa:ca:60:2d:05:c8:c5:
         47:d4:62:fc:e6:34:fd:b1:bb:01:9c:72:30:f8:aa:b5:16:40:
         ef:af:2c:49:7d:7a:c7:63:56:5b:9e:bd:cc:10:79:5e:32:d1:
         c0:e8:7c:d6:df:a8:ac:1a:df:4a:62:c1:01:dc:9d:85:ca:d9:
         64:cb:88:f5:3e:bb:8c:7b:d0:44:a9:20:af:88:1b:d4:a5:e5:
         1d:e7:a2:ef:18:24:2c:7d:a1:e3:9f:b6:e5:af:95:40:04:94:
         d5:a6:0c:9f:ca:c8:79:b9:f6:19:b4:a9:d5:c1:95:de:e7:3c:
         fa:f3:b8:6d:c1:e2:af:9b:ba:85:fd:d3:60:6a:5a:94:27:1d:
         05:db:25:c8:a4:e5:86:72:60:5d:50:f6:8a:12:bd:f1:e3:a8:
         da:62:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:52 2026 by rpki-client