This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
File:                     D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft (raw, json)
Hash identifier:          dRZ5k86pIQqXOh9+EqDw63IIOYjvyN6yAomZWDLGa1Q=
Subject key identifier:   ED:D4:4C:16:74:5A:A0:8E:F1:31:69:54:85:A3:CB:BB:CE:90:B1:16
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       61E798D92A5DAB6789F948FDF21B3AD31C48932B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
Manifest number:          02FF
Signing time:             Sun 25 Jan 2026 16:12:47 +0000
Manifest this update:     Sun 25 Jan 2026 16:07:47 +0000
Manifest next update:     Mon 26 Jan 2026 18:51:47 +0000
Files and hashes:         1: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: MR9+C9Vbj4DW0fjbrhaHdxlM9MYBw8GvChkpXZQO0NQ=)
                          2: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: setdnDShPa42Ra+RXIZpHVG0CzWF+L5w7rUhm1wlW8k=)
                          3: D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl (hash: lCixVYeQgKCxfsB2Z83uOoo8M0wNyeQu/6fPksByR8I=)
                          4: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: KphRvq+dCCmDbBoP7ufV4MKiDXMdvSDN8C3wBkEp6PM=)
                          5: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: 43+lZx6yNw3chQQ3rdDi6xVUZ10HWty/7VWRdAmFCbE=)
                          6: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: u0yBhdVDaevQliiP9KZynPBTVxkPOzeII4JFo6jbcps=)
                          7: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: oJLoy2NZCiaqPT9x6QxmbYcpcBviV4fUZPCEvZlY+DQ=)
                          8: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: kO8OLhHyjvxRm550hVdG/t9GWhhQJ4GEhEFGrZC4ASw=)
                          9: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cQgCm5AeQyHg8f9cKg4MaKk7kmavzWr0FzG/BiQmCtM=)
                          10: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: Qd2D3y5pr4+0LQIHpmwfLMqhy3/c+GkvC9zwHOCrCmA=)
                          11: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: KiVRpQW/Y+LL0uzJv77rQmbRpw245rFC96CRqItR2Mg=)
                          12: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: yypoDy5bSn77qxeuXVndQniHgm9nMysCWdFI9074rt0=)
                          13: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: DGRUdUDDCZl4HidihTbYThwrnuoIe3p27meH73uZnqY=)
                          14: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: buEzhxsd3JgTQkvixY100+A2Z281EJiftmIetEl7FQw=)
                          15: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: obuvpg2KT9lbvxhrozHpb1Q8wEpCA+P8uCNmuLETzm4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:98:d9:2a:5d:ab:67:89:f9:48:fd:f2:1b:3a:d3:1c:48:93:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jan 25 16:07:47 2026 GMT
            Not After : Jan 26 18:51:47 2026 GMT
        Subject: CN=EDD44C16745AA08EF131695485A3CBBBCE90B116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:13:ae:7e:9a:25:c1:d6:74:08:52:f6:24:
                    31:6a:4b:9f:d5:cb:7a:00:a9:bc:b6:0a:b9:1e:7a:
                    c9:80:82:68:e6:00:a5:96:73:2f:9d:7d:79:c4:ce:
                    d6:5d:32:16:fc:07:3a:9d:43:c3:84:02:17:d1:6b:
                    bc:c8:57:dc:da:9d:87:c1:a1:e7:7d:d5:1c:85:f0:
                    17:f0:fe:66:b6:14:a4:f7:09:a2:c6:0e:25:30:84:
                    04:28:75:4a:2f:cd:cb:25:e7:1a:de:8d:49:96:1d:
                    c8:fe:67:64:10:86:c7:62:2f:5c:55:74:ab:40:70:
                    dd:62:f5:cb:e5:f7:fd:3c:c2:e0:00:9e:78:03:d3:
                    56:ac:59:88:55:c9:40:6b:4b:07:06:e2:e2:90:6c:
                    9a:94:e9:25:c9:fb:eb:ab:01:e8:e1:ad:b4:2b:93:
                    ca:36:85:79:81:34:cf:a2:66:25:ed:74:d9:a2:fc:
                    99:28:a2:43:0a:46:c7:4f:c6:b6:88:26:ec:8e:e7:
                    ac:6a:47:2b:f1:4f:75:c0:a5:e3:04:8b:f2:e6:fa:
                    2f:4b:63:12:6c:d7:6d:f7:46:9c:df:09:88:7b:4e:
                    9d:6a:1b:31:1b:08:33:20:64:42:11:fc:18:d8:57:
                    f5:57:03:2d:b3:f9:c9:98:ad:f8:1f:de:7b:58:ee:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:4C:16:74:5A:A0:8E:F1:31:69:54:85:A3:CB:BB:CE:90:B1:16
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:aa:01:68:a6:d1:41:81:e7:0c:48:5f:2c:e9:2c:89:09:
         02:27:f9:08:4f:1f:9b:e7:e8:54:a5:7f:88:9a:59:87:7c:00:
         7f:13:ef:f3:3e:8f:af:86:b7:f0:82:5f:41:1a:2c:2f:2d:f4:
         8c:99:fa:35:fe:97:3a:b6:84:f5:0c:3f:1a:84:ab:13:a9:cf:
         f4:33:8a:60:fd:4f:0e:8d:90:db:70:74:76:f8:3d:f7:9c:1c:
         3e:0e:81:cf:af:0c:7c:d1:e0:91:d0:0f:c0:3b:83:df:d2:28:
         2e:70:62:48:6e:7c:46:fd:26:73:b6:ce:c4:12:7a:99:b4:63:
         fd:6d:22:38:f8:08:49:67:63:ff:f5:c6:f1:3c:0c:55:f8:87:
         35:ab:4d:42:91:97:0b:66:6e:4a:30:75:d8:f3:b1:96:ec:57:
         6c:43:58:07:5c:c4:7a:f1:cf:a2:e7:2e:29:7c:33:49:30:08:
         80:de:b0:eb:06:60:96:f8:f5:13:ca:83:9d:df:fd:0b:e2:09:
         9f:79:e2:69:ef:89:ff:47:84:6b:a1:d4:2e:57:ca:7e:5e:2d:
         4b:f7:e1:0a:3d:ba:88:8d:08:1d:3a:c6:5a:66:cb:a6:fc:8f:
         a7:c1:31:2b:55:d0:11:ea:9c:ed:df:a8:dd:35:5e:7a:ef:f4:
         21:ad:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:24:18 2026 by rpki-client