This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
File:                     8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft (raw, json)
Hash identifier:          +WGbIoUS7bxvx12GW41hQUokbs+pU+08DVWA4eaM078=
Subject key identifier:   88:C4:4D:75:35:92:E4:2D:C2:73:98:F0:AE:DA:6A:2B:11:BC:6F:9E
Authority key identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16
Certificate issuer:       /CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
Certificate serial:       3F99655591855906B9059E19EBF414B459F8EC1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
Manifest number:          D2
Signing time:             Sun 25 Jan 2026 10:00:04 +0000
Manifest this update:     Sun 25 Jan 2026 09:55:04 +0000
Manifest next update:     Mon 26 Jan 2026 13:20:04 +0000
Files and hashes:         1: 3137372e382e3232342e302f32302d3234203d3e203238313836.roa (hash: 4QCJme3Qx1fd8teGEAhurM/e2BkTiyAVEkbenftYOvI=)
                          2: 323830343a3230343a3a2f33322d3438203d3e203238313836.roa (hash: zoeb0MX4R1wuY9O+Pg5CswmX9rcvPNA7goeSP8VMaps=)
                          3: 3138372e34342e3132382e302f31372d3234203d3e203238313836.roa (hash: lC5HtA8pYksxocklhbuUzjpcT5tyy683QBUWEvMuNhk=)
                          4: 323830343a323464633a3a2f33322d3438203d3e203238313836.roa (hash: QlMR5qeRkZEZRVw7Pm+WGfMUBUyTQd/9EmOi1ZXHxOo=)
                          5: 8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl (hash: MzzI2Rid67DYIYrVflKs1m+PKEjF+rvyKgb6izq8jc0=)
                          6: 3137372e32312e302e302f31392d3234203d3e203238313836.roa (hash: /RsUbUqvd+N5onZwjamu78Va5mI3hnGgQREotPt2t9g=)
                          7: 3138392e38392e3132382e302f31382d3234203d3e203238313836.roa (hash: iPWK2zve6tMRZWg4SInKs8sLG/DROWUaUFfucK0MhVo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:65:55:91:85:59:06:b9:05:9e:19:eb:f4:14:b4:59:f8:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
        Validity
            Not Before: Jan 25 09:55:04 2026 GMT
            Not After : Jan 26 13:20:04 2026 GMT
        Subject: CN=88C44D753592E42DC27398F0AEDA6A2B11BC6F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:33:a5:82:a8:b6:a2:d0:3e:9e:49:da:d9:
                    78:7f:4a:d3:63:1b:32:be:e2:6a:90:31:4b:e6:7f:
                    f1:95:48:cf:29:2f:13:99:6a:39:d8:27:49:e7:86:
                    11:38:f0:c3:ee:5e:3d:df:eb:a0:95:c4:59:80:d9:
                    28:ea:54:e3:06:f5:52:b5:f0:55:a9:63:fd:c2:4e:
                    c3:00:1c:1d:cf:a2:2f:c4:c5:30:74:5f:de:ed:87:
                    ae:75:de:ac:e6:15:6f:ef:c7:98:8d:2e:bc:3c:ec:
                    18:bb:90:c2:20:01:74:69:df:3b:1d:12:fc:1b:41:
                    a4:30:a2:2a:5e:bc:43:7f:83:c1:38:98:15:49:37:
                    7a:08:c6:df:77:c2:79:d0:b1:90:bc:dd:a2:ba:f7:
                    53:5a:2d:c2:ae:61:d5:34:37:6f:9e:9b:7b:da:f6:
                    8f:e6:18:1e:cb:cc:1a:e9:c1:60:42:22:f2:38:6d:
                    63:a1:88:b7:07:40:a2:79:5f:78:61:49:3d:a7:c5:
                    ff:56:40:52:74:c3:ae:44:b3:6a:f1:6b:c1:bc:62:
                    2c:4e:47:3f:4d:c0:a7:3b:0e:57:7c:fc:16:75:96:
                    43:0e:d3:ea:28:12:82:9d:ab:11:c2:bc:c0:50:48:
                    6c:08:67:d6:56:55:4e:1f:65:27:f8:fc:23:80:e6:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C4:4D:75:35:92:E4:2D:C2:73:98:F0:AE:DA:6A:2B:11:BC:6F:9E
            X509v3 Authority Key Identifier:
                keyid:8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:05:2e:3b:d9:1c:24:7f:0f:95:a2:50:4d:6e:24:21:6a:
         f9:60:b9:7f:53:b4:87:44:a2:ba:56:92:8c:9d:ba:fe:de:28:
         22:2b:7c:ef:77:11:8d:c4:ef:76:a7:82:12:ae:4b:17:47:a9:
         ba:0c:01:a9:01:e9:27:ee:b1:ff:43:a7:80:d2:9d:06:b6:41:
         79:f6:a1:78:82:52:f9:b4:c6:d9:23:95:1b:d5:d9:9f:c5:0d:
         f0:71:6b:e9:4a:a0:b2:35:54:04:f1:7b:94:e6:ba:2b:cb:a6:
         18:0f:55:24:98:09:89:3c:8b:71:5e:58:4b:29:ce:c8:26:a7:
         bc:f4:11:72:c6:91:1b:42:23:9d:80:1f:cb:ba:32:08:69:33:
         19:93:02:4a:26:71:40:f6:c9:d9:94:f1:e2:eb:a0:54:4b:76:
         64:5d:c8:00:a7:57:9d:e7:fc:69:3e:a1:f1:34:d0:ab:ba:6d:
         2a:c9:58:8f:cf:5b:fb:ce:b9:8f:4a:25:dd:c0:96:bc:d0:b8:
         d4:a7:9c:35:e9:a8:d1:ba:64:5a:8a:98:bb:df:1e:a2:3f:47:
         ea:9f:03:db:4c:c7:ac:e0:a9:65:1b:58:3c:71:be:42:56:b0:
         9a:36:3c:2a:ab:8b:6f:fa:8b:d2:55:d3:a5:ff:bc:d0:35:23:
         ef:fa:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:35 2026 by rpki-client