This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          AYisPYI47F+pMsip+flX0hZM+0M6rLxNK+cwYX+yv9o=
Subject key identifier:   F4:57:2C:7D:F1:F4:7D:2F:61:61:B9:37:8E:DD:5A:11:FE:77:B6:7B
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       2B3E86DEE3C30EF800016B6543D42A52BAC34844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          0374
Signing time:             Sun 25 Jan 2026 03:55:20 +0000
Manifest this update:     Sun 25 Jan 2026 03:50:20 +0000
Manifest next update:     Mon 26 Jan 2026 04:26:20 +0000
Files and hashes:         1: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=)
                          2: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: iUOLcLFtrHGc6ca9Fdgm7E4zSMCd8QzSO7uCCdSDlKI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3e:86:de:e3:c3:0e:f8:00:01:6b:65:43:d4:2a:52:ba:c3:48:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Jan 25 03:50:20 2026 GMT
            Not After : Jan 26 04:26:20 2026 GMT
        Subject: CN=F4572C7DF1F47D2F6161B9378EDD5A11FE77B67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:0d:21:dc:a1:a6:a4:4e:08:f3:9d:bf:51:
                    b3:c6:da:07:3c:eb:1a:df:5c:bf:0f:20:15:9f:b7:
                    8a:19:92:6d:fe:be:49:c9:6c:e8:d9:49:27:d4:f7:
                    f4:5d:79:5e:8b:cb:1e:8a:09:5e:85:1a:80:68:b0:
                    d0:67:9c:c6:76:bf:63:cf:b6:98:f7:36:55:27:3c:
                    36:9b:da:06:9d:00:d7:a9:3b:f0:14:f6:11:dc:fd:
                    52:0d:8f:a7:c9:6b:6a:d2:71:0d:da:16:c3:21:96:
                    f1:3d:f0:06:79:d0:7b:c4:6d:5b:6a:4f:e3:8c:b4:
                    59:55:1a:1c:75:f1:13:2c:80:02:e4:09:19:3b:56:
                    6c:d4:75:c1:7f:6a:13:ef:b7:77:67:5d:d3:b5:24:
                    97:de:69:07:15:99:ac:62:f9:66:f2:9c:ff:a1:8c:
                    54:fb:6e:e6:c3:e2:07:9f:51:0c:78:5b:9d:27:a4:
                    c2:04:61:a5:bd:eb:9c:d2:6b:22:f8:7f:82:34:e1:
                    87:32:5f:88:c1:ce:5e:17:55:c9:0c:4d:ff:89:e3:
                    a9:60:35:6b:d0:0c:9e:82:4f:ce:9b:bb:da:ae:de:
                    23:14:58:be:19:87:a1:4d:d9:99:c2:80:b7:06:59:
                    cc:4d:36:d2:d4:4f:a3:e1:eb:bd:31:4f:5a:26:c7:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:2C:7D:F1:F4:7D:2F:61:61:B9:37:8E:DD:5A:11:FE:77:B6:7B
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4c:75:71:4f:3f:d3:e9:19:8a:52:2a:0c:99:76:54:42:36:
         76:cc:5d:e8:59:05:bf:e3:e0:04:f4:89:c9:6f:6d:0e:99:50:
         d9:6a:b0:e3:d2:05:3c:85:de:f9:d1:16:cd:60:b6:be:3c:b3:
         f7:f5:c9:47:04:ad:fd:f4:94:dd:fe:c1:1c:22:bf:8b:9c:c9:
         b2:71:ce:07:6e:69:43:68:5a:8d:80:d4:0f:58:b2:73:5d:fe:
         a6:6f:ac:86:9c:62:a6:7d:60:a3:15:47:74:2a:8e:6a:ce:c3:
         2b:8a:3a:4a:b4:1f:fb:d5:f4:6e:4a:00:40:3c:1f:12:a2:be:
         01:2b:2b:42:dd:71:e5:0e:47:02:64:37:88:f9:5c:59:93:07:
         c0:5c:b9:23:bb:9b:38:61:1c:87:6b:7e:e8:ba:be:06:30:a3:
         a3:95:45:65:9f:c4:34:28:e2:d7:91:68:c7:1a:b8:9a:bc:a1:
         8b:71:a6:7e:8e:98:3b:99:7f:21:e3:83:48:fc:c6:e6:d1:ed:
         c9:ec:ef:68:6b:db:8c:3e:90:6a:57:fb:61:e9:81:ae:b4:31:
         69:86:34:69:8f:8d:92:69:f7:4c:18:66:16:52:6c:0e:5c:0a:
         86:c2:1e:e1:fd:c6:f3:12:08:5b:6f:1d:59:d8:48:0d:ae:a4:
         e2:09:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:59:12 2026 by rpki-client