This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
File:                     CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft (raw, json)
Hash identifier:          v+M2zBHLN1gPNPF92U/3kZt2ZDzYjLSH3IPx72j+X/E=
Subject key identifier:   7B:2A:7E:8A:A4:C3:9B:AF:9D:B8:3A:60:FB:FC:FC:DE:F4:07:74:91
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       65826550087EF1EC839D56FC69C239069B839C9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
Manifest number:          EB
Signing time:             Sun 25 Jan 2026 07:10:26 +0000
Manifest this update:     Sun 25 Jan 2026 07:05:26 +0000
Manifest next update:     Mon 26 Jan 2026 09:51:26 +0000
Files and hashes:         1: 3137372e36372e3132382e302f32312d3234203d3e20323632353139.roa (hash: fYY0WES9YoeoCKQ/AV0YzDdZUnBg9K2Sc6Z9kqWN/Sg=)
                          2: 323830343a3939633a3a2f33322d3336203d3e20323632353139.roa (hash: gTiVAYf6/KXw1jjv/9yejWK3xD+mYu/04AQI9+Lo66Q=)
                          3: 3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (hash: u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c=)
                          4: 3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa (hash: mP9+5bqfsDm/dmjMQXVlmyWNr6uSZK6tCq5xBi+Kc8Q=)
                          5: CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl (hash: BBWa20QMoPkvsovIY0YsolFyiV+FdEe4qdEhbkZy2ds=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:82:65:50:08:7e:f1:ec:83:9d:56:fc:69:c2:39:06:9b:83:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Jan 25 07:05:26 2026 GMT
            Not After : Jan 26 09:51:26 2026 GMT
        Subject: CN=7B2A7E8AA4C39BAF9DB83A60FBFCFCDEF4077491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:18:35:26:0e:74:9b:64:15:e9:5e:cf:53:
                    60:3f:f0:c5:a2:6c:f0:f6:eb:b9:6e:85:65:0b:33:
                    89:33:73:c7:5d:6e:ef:db:70:14:da:78:15:59:03:
                    aa:52:c7:a0:19:51:d8:e7:b1:96:a4:b7:54:f9:9e:
                    e1:53:78:6b:cd:0d:1f:02:ab:d0:42:42:71:83:0b:
                    c5:df:5c:ee:d5:d4:7c:40:3c:c9:c9:07:23:99:da:
                    95:44:ee:30:aa:11:cc:64:9d:1d:37:a0:b4:a4:05:
                    0a:8e:b3:2f:74:2d:ae:78:c0:cc:ac:c0:10:b4:b6:
                    4d:f2:9e:15:90:0c:42:cb:80:7f:46:b5:ff:6a:8f:
                    ca:17:0b:d6:90:a9:ff:b1:d3:0c:d5:02:31:36:a4:
                    ee:76:9c:c7:07:d2:20:da:8a:f4:5d:c8:ed:13:f3:
                    d8:86:df:86:78:ec:1a:4a:bc:28:cf:99:c2:9b:18:
                    ec:3b:92:2a:f7:d9:62:84:32:57:aa:07:c9:0b:bf:
                    ff:d0:a2:14:3c:5c:5d:ac:5e:fb:09:28:f2:06:9d:
                    37:45:f7:32:48:b5:4a:be:32:47:36:09:f8:b7:df:
                    14:bc:b2:bd:97:6b:b9:e9:52:0c:f2:fa:89:60:69:
                    e4:9d:39:78:4e:e7:bb:5a:8d:6e:04:da:46:53:a0:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:7E:8A:A4:C3:9B:AF:9D:B8:3A:60:FB:FC:FC:DE:F4:07:74:91
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:28:4b:04:cf:88:c5:7e:7c:c8:05:ee:f0:5b:62:51:fb:
         29:a3:cf:57:dd:ba:ed:ec:8b:67:b8:74:1d:56:73:26:84:9b:
         ec:5b:9b:c2:3e:64:be:b9:75:cd:84:09:f1:d0:a2:98:27:f7:
         3a:54:92:f0:db:ce:a6:a0:72:4f:a2:03:9b:34:dc:4d:7c:41:
         04:5a:a9:82:a5:7b:02:ad:bb:35:fa:2e:c0:d5:03:a0:92:20:
         2b:86:24:9f:71:2f:37:8c:a1:51:1b:7d:dc:14:dd:9c:11:ee:
         cd:09:e5:df:12:95:29:b2:a1:0a:7e:3b:04:3c:ca:80:ab:22:
         56:04:92:93:84:d0:ab:e7:ac:c9:af:dd:89:72:78:ef:77:19:
         d2:b7:ca:48:3f:a8:46:60:81:0a:62:19:6f:12:15:b3:8b:a8:
         40:c3:08:7f:3d:ca:9c:15:0e:5c:8f:67:04:73:54:59:63:76:
         8b:a2:4e:c7:f0:ee:7c:5f:d9:40:ca:6e:61:82:9d:00:a2:22:
         28:0e:73:f5:cb:53:bf:9c:42:7f:00:b2:ca:89:84:94:f6:b6:
         cb:97:8b:ae:f4:e4:5c:b9:72:79:9f:c7:36:d6:e8:d9:05:66:
         21:e5:eb:ce:78:7a:07:16:5c:a3:56:7d:f2:3b:c5:89:fa:6e:
         31:25:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:22:51 2026 by rpki-client