This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
File:                     BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft (raw, json)
Hash identifier:          yPc6K6bTNPRv1cyNjlEsVukbV08SUpD0szfMpDFU4U4=
Subject key identifier:   2B:FC:A2:28:2B:06:DE:37:C7:28:5B:05:40:64:18:BA:55:E4:70:42
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Certificate issuer:       /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial:       4822B31EB15428D8561F48FE927E5F0ACB1D62F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
Manifest number:          DA
Signing time:             Sun 25 Jan 2026 09:13:32 +0000
Manifest this update:     Sun 25 Jan 2026 09:08:32 +0000
Manifest next update:     Mon 26 Jan 2026 09:24:32 +0000
Files and hashes:         1: 323830343a363830303a3a2f33322d3438203d3e20323639363634.roa (hash: qfb6AfqGl8bOQeHXD/A3gn8XVKh+t8Os//kVhwqFnkU=)
                          2: 34352e3139312e32302e302f32322d3234203d3e20323639363634.roa (hash: DjdMDcke6ilnD8tmmfgHtUJXmWqTF52hHf84c4Ol0mc=)
                          3: BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl (hash: xCiyROaqvVfm2Phx4oucTv1LrwdDhMLoLKTD6DqKkIo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:b3:1e:b1:54:28:d8:56:1f:48:fe:92:7e:5f:0a:cb:1d:62:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
        Validity
            Not Before: Jan 25 09:08:32 2026 GMT
            Not After : Jan 26 09:24:32 2026 GMT
        Subject: CN=2BFCA2282B06DE37C7285B05406418BA55E47042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:6f:05:18:5b:6e:78:73:a9:71:8b:34:b2:
                    7c:71:1d:02:a5:62:da:93:cb:64:00:a6:5e:08:da:
                    9f:95:6f:eb:bb:1a:16:06:7c:d4:17:44:3e:14:e5:
                    42:fb:d7:8c:b9:92:46:31:94:83:2f:08:67:0a:2f:
                    73:f1:e0:83:68:4e:f6:35:4c:57:b5:f1:fa:23:6d:
                    94:0b:70:d3:b3:c1:4f:02:75:aa:2e:02:c3:22:8c:
                    94:59:c1:36:f3:a7:41:15:13:ea:77:ac:a2:a9:08:
                    75:89:7f:1a:9e:23:a6:bf:31:93:05:d0:b6:f1:8d:
                    22:4f:2f:79:37:40:74:00:f0:da:54:ff:ef:1d:2c:
                    95:75:c2:9e:46:c1:1b:2a:57:c1:44:02:e4:ec:4e:
                    b5:34:9e:a8:3e:d9:58:ed:4f:7f:19:66:9d:d1:1b:
                    a9:9f:19:c8:c5:a2:7d:49:b7:e9:01:c2:68:74:12:
                    1c:15:70:c5:36:27:da:4e:1c:62:44:4d:0b:0e:7c:
                    39:6c:b0:3b:33:db:a1:34:9a:f7:b3:42:8d:36:58:
                    52:f6:7b:f8:a5:3b:2b:71:c4:34:a8:d9:8e:38:39:
                    ae:6c:13:6d:95:a3:f1:99:82:da:a8:73:67:cc:08:
                    a7:32:87:da:5c:3a:5b:58:fc:df:37:ad:e1:6b:2c:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:A2:28:2B:06:DE:37:C7:28:5B:05:40:64:18:BA:55:E4:70:42
            X509v3 Authority Key Identifier:
                keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:11:ff:fc:fc:cd:2d:a2:64:d6:2e:ca:b0:53:71:00:9d:
         fe:72:ed:8b:63:fc:91:e4:75:96:88:d6:d0:50:e0:92:91:c3:
         40:8b:5d:62:19:95:55:9a:91:82:ff:02:26:5b:3e:f6:12:1a:
         b0:98:76:c2:9f:38:ba:a6:b9:4f:dd:f0:a1:9a:af:7a:31:88:
         b8:2e:32:bd:a3:67:bd:56:fe:80:68:66:73:72:b3:41:02:0a:
         de:03:03:2b:37:ca:7f:83:ee:77:e0:07:8e:1e:f2:d1:7a:9d:
         80:bc:c7:60:c1:e5:24:b0:ea:3f:40:b7:c3:11:dc:6b:08:c1:
         0b:6f:96:5c:28:24:a8:d3:cf:a0:fc:a8:80:83:30:18:7c:6e:
         91:16:37:dd:c1:60:2f:23:43:39:38:4a:a7:61:04:c0:f2:58:
         6f:22:2c:f1:6c:0a:58:be:89:50:58:46:3b:2f:af:f9:b8:b7:
         7c:ff:65:84:85:f7:5a:dc:78:89:ca:95:51:ba:7d:05:2e:d3:
         23:5b:0d:1a:f3:67:fa:4e:8c:3e:87:80:17:e0:5d:f7:d7:3c:
         27:9f:ba:d3:fd:de:4a:22:49:f6:99:64:62:13:4e:4e:6e:e2:
         6b:25:22:af:ff:10:84:1a:14:5d:9a:1f:1e:95:cd:4b:d9:ee:
         ec:ae:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:20:14 2026 by rpki-client