This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
File:                     1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft (raw, json)
Hash identifier:          JyW3LNoNLRJ9Hkwqu2A88t/Mbwg7CgAci9Gc+RRYz3Y=
Subject key identifier:   3F:0B:86:4C:57:9D:75:AC:8D:0B:CF:A7:9F:F5:86:AA:FD:4D:52:69
Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
Certificate issuer:       /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
Certificate serial:       539D818F439A8815075904D211ED72E1E8FE2D61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
Manifest number:          67
Signing time:             Sat 24 Jan 2026 21:53:26 +0000
Manifest this update:     Sat 24 Jan 2026 21:48:26 +0000
Manifest next update:     Mon 26 Jan 2026 00:12:26 +0000
Files and hashes:         1: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: JyZfkIOLq33nnCJFS0DfBN/aauusqE3Y9f6Bn1ZJobI=)
                          2: 1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl (hash: JO5x4T+CtsT1+dIeUxVw5GBtnxGSM6NyOviSh9yht/c=)
                          3: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: cHMEH3okxWfwROJpehpqXokpVfIavyGmq4FX80L1Gbw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl
                          rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 00:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9d:81:8f:43:9a:88:15:07:59:04:d2:11:ed:72:e1:e8:fe:2d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
        Validity
            Not Before: Jan 24 21:48:26 2026 GMT
            Not After : Jan 26 00:12:26 2026 GMT
        Subject: CN=3F0B864C579D75AC8D0BCFA79FF586AAFD4D5269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:8f:e1:9c:2c:6d:fe:c6:69:00:e1:87:c9:
                    54:82:42:17:6e:cd:2f:54:90:c3:9e:76:77:7c:80:
                    c9:44:a8:e9:00:69:61:bc:f7:1e:f9:31:9c:ac:6f:
                    bd:b8:e2:f1:78:6d:7e:1c:ce:f9:19:f8:d3:3e:c7:
                    36:cf:57:95:da:5d:bd:55:30:60:55:07:c3:95:bf:
                    9f:19:ac:2f:52:ed:02:6e:bc:7a:06:cb:f4:33:5d:
                    de:c8:8a:f9:24:ca:8a:ec:9b:e5:5b:45:be:75:75:
                    26:29:85:05:4b:27:06:38:b6:99:41:a3:92:b5:36:
                    5c:5e:62:a8:b2:fa:63:80:f9:3a:f6:e2:a6:25:55:
                    52:fd:96:3d:bd:fc:10:ae:1d:de:57:e3:83:83:9c:
                    f8:a9:47:d7:35:1c:77:39:1c:cd:66:b3:92:10:75:
                    d7:e7:f0:c4:b4:3d:c5:9e:2c:ae:d2:3b:85:51:63:
                    26:77:11:27:ed:0a:59:06:21:fd:bb:29:6b:b5:23:
                    ec:bc:bf:d3:b4:f9:96:54:4c:b9:b8:fa:e3:5c:2f:
                    1b:3d:c4:f3:47:8d:d7:28:0c:14:4a:2b:9d:98:f7:
                    81:5b:fe:1b:dd:d8:99:51:f7:56:23:4a:83:70:96:
                    c5:0b:2c:52:aa:28:58:f1:35:15:1f:a0:ff:0f:92:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:86:4C:57:9D:75:AC:8D:0B:CF:A7:9F:F5:86:AA:FD:4D:52:69
            X509v3 Authority Key Identifier:
                keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0a:5f:19:c6:ec:fa:b8:1e:ab:49:c6:38:3d:d4:d7:ab:76:
         1b:8c:82:3f:b8:b5:f1:32:09:97:78:6a:4e:f0:79:cb:cc:9d:
         93:fb:01:8d:07:da:61:bd:70:c7:3d:ad:f7:26:0c:78:cf:5c:
         75:6a:8b:9f:2a:1e:ed:92:a9:7d:c6:f0:7e:99:fa:bc:97:5b:
         3e:e1:90:3f:39:6b:81:bb:19:97:c2:3a:5e:9c:72:b3:07:bc:
         00:e2:b6:98:17:ac:cc:9a:e5:d6:ba:ff:85:93:e5:e1:2d:aa:
         69:a0:17:91:16:b3:07:06:ba:bf:9a:1b:1f:89:9f:9a:43:67:
         8c:03:e6:1b:46:af:ec:02:4a:ac:d6:aa:21:8f:ac:69:c7:88:
         2c:a5:aa:77:04:91:7a:29:97:48:4e:13:da:f5:16:dc:8d:0b:
         e6:73:c6:a4:a2:60:94:2b:a6:27:be:b0:32:02:3a:db:4e:cb:
         d6:a6:39:00:53:8e:55:d0:c2:00:f9:c4:e2:1e:f1:b7:45:6b:
         d5:bd:26:8c:dc:2b:ae:80:b5:f5:1c:cf:eb:b7:9d:20:c5:9d:
         88:61:b3:4b:7d:9c:fa:e3:81:73:10:fd:d1:af:dc:8a:2d:b4:
         f7:d0:a3:2e:ac:d4:34:6c:66:53:45:d8:ee:e3:48:b6:31:62:
         66:b8:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----