This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
File:                     0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft (raw, json)
Hash identifier:          oIc+jI0TYcCOklyUY+8/vqpt+LHgjJ/F+zDwmn1pXUs=
Subject key identifier:   A7:B0:6D:7F:35:96:37:30:3D:B0:6C:57:9F:9F:78:69:B6:E4:99:AB
Authority key identifier: 0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2
Certificate issuer:       /CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
Certificate serial:       25298DA1D9D1BE9B980A39F784DFE82ACDD7DBBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
Manifest number:          0101
Signing time:             Sun 25 Jan 2026 08:23:18 +0000
Manifest this update:     Sun 25 Jan 2026 08:18:17 +0000
Manifest next update:     Mon 26 Jan 2026 09:11:17 +0000
Files and hashes:         1: 323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa (hash: aiI8DugfocV6kV6BYnXN8XhAl68QsUvS6ajv1n2dvbo=)
                          2: 323830343a383366383a3a2f33362d3438203d3e20323732323331.roa (hash: SJ/9XRh/S3JcAR+UzZfvI9vhztzX1uE4KCpPNvs90PA=)
                          3: 0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl (hash: zV2Z/adtk8aZgqFFhUyxAXdPoQ+w7iJ7X1FsauDioSo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl
                          rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:8d:a1:d9:d1:be:9b:98:0a:39:f7:84:df:e8:2a:cd:d7:db:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
        Validity
            Not Before: Jan 25 08:18:17 2026 GMT
            Not After : Jan 26 09:11:17 2026 GMT
        Subject: CN=A7B06D7F359637303DB06C579F9F7869B6E499AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:f9:fe:91:d3:ec:85:46:1e:41:e8:d5:37:
                    1e:f5:f5:8e:3a:41:a7:d7:08:e4:55:08:e5:28:ae:
                    1d:dd:38:eb:20:8c:78:97:76:66:c1:0b:b3:15:3d:
                    7b:6f:c1:6c:fc:76:5b:04:9e:71:69:10:11:06:94:
                    5e:04:8a:60:f8:78:69:e3:a4:7c:a2:76:1e:ab:4b:
                    4c:10:ec:f8:01:04:5d:8d:06:02:0e:ec:af:40:f2:
                    f9:50:fc:ff:b3:ea:f8:23:a0:40:40:0d:bd:ac:c0:
                    d4:48:2b:11:94:e8:8b:0e:a7:25:16:f8:dc:b1:16:
                    3e:ea:f3:13:76:0d:40:1d:27:6f:1b:04:20:56:e2:
                    b0:32:48:5c:1c:2d:11:d3:98:b3:64:b8:63:99:c7:
                    2e:e8:21:ac:f6:da:ba:ac:d7:00:cd:d4:d1:a5:9a:
                    15:88:4e:62:ed:00:0d:59:78:04:54:bb:23:a6:04:
                    6a:7c:2f:32:0a:d6:29:4f:8b:e2:15:06:29:a5:64:
                    bc:ff:c4:a6:7a:9b:a2:0d:b4:8b:c1:af:92:dc:df:
                    ca:96:19:9a:25:cd:78:8a:66:9d:c2:be:af:08:cb:
                    5c:9f:c0:66:8c:2b:8f:00:e0:4c:14:75:db:31:26:
                    6b:27:24:4e:83:9f:f0:53:d5:7b:62:a0:65:b4:98:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B0:6D:7F:35:96:37:30:3D:B0:6C:57:9F:9F:78:69:B6:E4:99:AB
            X509v3 Authority Key Identifier:
                keyid:0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:f8:af:05:36:11:5a:02:50:f3:da:75:5b:0a:90:7f:2b:
         5f:7b:e3:6d:33:a8:f1:85:ed:1e:e5:ea:07:9c:f0:b8:15:ed:
         86:c3:68:14:20:a9:05:8e:47:4f:d0:19:ef:3c:e2:24:0a:d4:
         b0:9b:c1:89:2e:54:b3:c9:f4:66:08:2a:e8:b1:7d:82:d2:8a:
         62:07:81:96:0d:42:a0:65:7f:25:8d:9c:9d:7a:a0:98:8b:c9:
         c7:36:5a:40:63:f1:50:6d:f1:37:15:52:bc:f0:4e:4b:a8:f0:
         5d:f5:c3:d7:ee:8c:df:ed:d8:5e:fa:34:7f:72:fd:47:ba:af:
         10:8b:71:c8:49:23:1e:70:7f:3f:1a:bd:d6:74:93:ce:ca:ab:
         ef:4e:30:5b:c0:71:a9:53:1e:57:3f:84:94:21:4a:fb:86:f7:
         dc:3a:0c:24:19:07:f6:a5:13:24:b2:70:20:42:36:7d:bb:fc:
         d3:a1:7d:93:f9:1b:8a:4c:0f:e1:7f:d4:d8:1d:83:c4:14:69:
         cd:ba:b0:89:1d:0e:f6:c8:27:86:99:c5:32:a5:18:44:a1:4d:
         ed:85:1c:27:d6:73:4f:20:87:c5:fa:ce:ae:67:9c:57:29:ae:
         77:8b:11:a1:33:d5:35:87:30:8f:ba:78:33:6d:61:4c:4c:d2:
         be:b6:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:31 2026 by rpki-client