This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
File:                     2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft (raw, json)
Hash identifier:          kKptsOEW9+4FZQE1YmPGzzeuIL/PsT6LSmOQFe49wvE=
Subject key identifier:   C5:09:3F:C5:40:3E:AC:7D:46:55:1A:64:A2:6C:5F:8C:22:08:30:04
Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C
Certificate issuer:       /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
Certificate serial:       34C419CE24CEC081406337C4541E0FDF9FCEEF8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
Manifest number:          24
Signing time:             Sun 25 Jan 2026 16:05:58 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 17:22:58 +0000
Files and hashes:         1: 3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa (hash: 5pUyDLsvdfwdf1xjCqCad9vMEk8WnXH6wEKaQXbgEwg=)
                          2: 3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa (hash: k6YFTCiuNfTvFEzVpatvnukAN5pWYnz7q4yneOsGwEk=)
                          3: 2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl (hash: +UJcEerCuBLkTJCpzfsWZ6bIGCysJXTBCo0ksfyo1hg=)
                          4: 3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa (hash: EGWFFskX1peJybMFEzLZZ43MWjsy15b5RQ3lVUZGbEk=)
                          5: 323830343a333430383a3a2f33322d313238203d3e20323635343332.roa (hash: z9EmqTntC48ZpR2ElyQgOuTAzYri5BNOm+6rB9SSKsQ=)
                          6: 34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa (hash: DVzAmraahgcEvu17CMdBBLT8NB0hvpJJfNB0kmBA5G0=)
                          7: 34352e3138302e3131352e302f32342d3332203d3e20323635343332.roa (hash: yF9Rr0jEUqRwJY5HEZlFWjNs/e6xXbOJHEs4ehwWoNY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c4:19:ce:24:ce:c0:81:40:63:37:c4:54:1e:0f:df:9f:ce:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
        Validity
            Not Before: Jan 25 16:00:58 2026 GMT
            Not After : Jan 26 17:22:58 2026 GMT
        Subject: CN=C5093FC5403EAC7D46551A64A26C5F8C22083004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:ed:f3:fb:8a:e8:0f:d9:7d:92:8a:c0:0b:
                    5f:a7:f5:58:2f:ba:79:f8:22:d0:50:9d:14:1b:aa:
                    77:9d:b5:c2:61:ef:f4:0b:b2:ff:34:93:6f:a3:27:
                    68:e1:d1:66:88:9f:59:5a:91:9f:a0:53:23:6a:1d:
                    1d:17:b0:6a:3c:25:60:b6:7a:e1:14:80:9a:c5:87:
                    75:9a:b9:93:01:ea:57:a7:43:b1:11:f8:a1:6a:be:
                    99:a0:68:44:ca:94:d0:01:3c:bd:2c:ef:ca:49:77:
                    b8:3e:26:a3:8c:84:09:2e:f6:95:30:a0:c1:f2:f7:
                    05:22:db:94:fe:a9:ae:05:20:21:a7:3e:18:ed:db:
                    3c:02:9e:50:47:be:bc:a1:95:f0:1b:66:2a:c1:0d:
                    ce:b4:95:d9:f3:bd:58:1c:f8:aa:8e:c9:17:53:9d:
                    39:1a:b0:da:d3:ff:47:d8:dd:fa:7e:33:db:22:18:
                    a5:96:ad:3a:05:9f:e8:aa:8c:fd:a3:6e:6c:53:eb:
                    f9:30:89:90:1a:9b:1b:73:07:65:0a:df:df:9b:a5:
                    12:d6:49:8e:74:03:83:21:8c:6a:81:f9:22:ce:34:
                    83:86:ab:3a:53:6b:02:89:18:f3:3a:10:a5:6f:5f:
                    52:7f:40:60:75:e8:24:81:16:bf:31:46:6d:20:b8:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:09:3F:C5:40:3E:AC:7D:46:55:1A:64:A2:6C:5F:8C:22:08:30:04
            X509v3 Authority Key Identifier:
                keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:79:26:8e:47:25:78:25:0b:91:29:80:aa:ec:5b:e2:99:5e:
         66:d4:85:0a:28:62:fa:b7:a9:8e:dd:29:90:a3:fd:18:32:c0:
         00:19:12:62:dd:69:f3:4c:a5:5c:b7:ba:23:cf:b6:ba:dd:15:
         90:d0:84:f8:0e:3e:50:39:82:7b:18:1c:c1:32:91:51:dc:52:
         8d:e5:59:c4:92:c5:77:79:f0:6f:1e:ac:8a:03:9f:dd:c5:bd:
         3d:2e:63:c4:2e:79:e1:de:3f:40:44:fe:19:94:54:ef:cf:5c:
         7e:39:0a:1f:27:d7:26:9f:fe:6e:cc:7d:5f:2e:7e:5f:5c:a8:
         3f:aa:d2:a9:b8:d2:31:50:2a:b8:06:d4:ac:1e:7c:0b:31:7c:
         21:87:c0:f4:b6:d0:45:e8:d6:7e:90:13:47:d7:48:84:17:2f:
         7d:3f:50:5d:cc:fd:94:22:f7:15:89:d6:1e:a6:c8:6b:09:84:
         de:00:04:60:c1:73:4f:a4:7d:eb:5d:34:fb:d8:3e:68:0a:cf:
         a2:14:78:fe:21:01:a9:cb:c4:dc:b2:cd:30:90:5c:41:05:9b:
         a5:e7:97:6b:47:bb:5f:d9:6b:33:78:26:04:a6:84:39:83:73:
         14:01:0a:8c:9f:59:8a:78:32:cf:19:38:83:70:f6:6a:e2:f0:
         7d:17:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:47 2026 by rpki-client