This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
File:                     725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft (raw, json)
Hash identifier:          LkbuLE2Aom6ElwJ54mPwC1g9GX9WedfHdet1GgxasNk=
Subject key identifier:   13:1A:9C:F6:47:EA:40:31:1E:5C:1B:CD:9D:6E:AF:D8:6C:21:EC:92
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       74749FBDEF623BA8A375D8DD354E93D48235A88F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
Manifest number:          0324
Signing time:             Sun 25 Jan 2026 11:36:12 +0000
Manifest this update:     Sun 25 Jan 2026 11:31:12 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:12 +0000
Files and hashes:         1: 3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa (hash: iFK1OF67O66YqUUD52Ds0rXQyHRWdpwPVw7VccZ/UVQ=)
                          2: 323830343a3162383a3a2f33322d313238203d3e20323632373634.roa (hash: emHd2D10GnG01ceLZivyVGNjBbutyt7W93juyNFSlF8=)
                          3: 725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl (hash: DWeDfTu8opWZCbMx7y4vWyjw/3OytIEhQozZNcUhmL4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:9f:bd:ef:62:3b:a8:a3:75:d8:dd:35:4e:93:d4:82:35:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: Jan 25 11:31:12 2026 GMT
            Not After : Jan 26 14:01:12 2026 GMT
        Subject: CN=131A9CF647EA40311E5C1BCD9D6EAFD86C21EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:70:5a:a3:ae:ac:a6:aa:24:43:bd:bd:4d:
                    d7:ce:fc:3a:62:ae:cf:71:63:7f:ee:1b:88:53:22:
                    a2:c1:ba:4a:19:08:59:37:9d:e4:3b:0d:6f:51:ac:
                    1c:95:f1:37:8f:e1:a8:66:7d:77:7e:79:20:0b:db:
                    79:b5:58:77:f0:93:e6:45:95:08:ed:48:bf:42:6f:
                    52:59:95:bd:16:1f:51:96:55:34:61:90:c7:49:77:
                    12:68:07:59:2d:99:ff:93:8f:76:5b:08:8c:1f:f2:
                    23:ab:dc:2d:3d:cd:28:e3:b7:7a:45:54:64:a2:0d:
                    a8:de:cd:53:99:cc:ed:b4:b8:a2:4c:83:d3:2d:3a:
                    e6:33:f0:03:61:c2:3b:b5:ef:91:b5:75:ab:1a:39:
                    0f:c5:55:6a:b7:2a:0b:5c:e1:f9:d3:b7:15:33:ed:
                    22:3b:0c:a0:73:07:5c:bf:3f:fe:60:df:4d:7c:81:
                    1e:c2:ca:b6:7e:e2:0b:99:ce:7f:14:2c:13:e0:1c:
                    95:d3:6c:8b:c1:c4:e8:e7:41:fd:2c:d2:9d:e0:da:
                    e2:32:95:a6:bd:17:67:ca:81:9e:fe:85:91:7a:6c:
                    98:79:d4:8d:d0:d7:1c:24:4a:de:aa:77:7b:12:da:
                    e7:41:24:45:61:f8:e8:2c:c6:13:5f:96:bb:1e:b3:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:9C:F6:47:EA:40:31:1E:5C:1B:CD:9D:6E:AF:D8:6C:21:EC:92
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:71:0c:0a:13:4d:c1:d1:9e:90:1b:05:7c:3d:e7:93:9d:50:
         36:48:df:80:5c:72:ae:1f:cf:bc:bc:ef:f8:74:ac:13:ca:e6:
         9c:a2:a0:32:c2:83:05:0e:13:b0:09:b2:16:5e:e3:ba:86:9e:
         3f:16:df:d8:28:77:4b:57:12:cd:a0:ea:ef:04:3c:ae:9b:e7:
         95:3d:f9:c8:3c:7f:9f:c7:f1:ee:4f:6e:b1:09:cc:98:25:98:
         1a:4f:8d:3a:b2:bf:b3:ec:43:9e:8b:45:9e:76:df:dd:da:6f:
         b9:d4:bd:85:69:37:54:e8:41:46:42:f9:fb:7e:96:30:26:54:
         0f:eb:92:45:a4:e3:13:7c:5d:06:b1:d3:9d:c4:cf:9a:39:0f:
         f4:94:1c:0c:bc:bd:4d:4e:ec:de:7c:e3:3a:1b:fc:1e:4e:34:
         2d:c9:43:e8:4a:b2:80:6b:31:0c:df:f4:c8:f6:41:9e:31:81:
         20:df:e3:83:2d:4c:d2:38:1f:8f:f7:c1:e6:80:44:68:a2:7f:
         e0:bd:8a:fd:26:c4:c2:34:b6:dd:8b:e8:c8:cf:89:40:4d:20:
         9f:44:9a:f9:54:bf:af:65:fc:75:1f:b7:8c:a4:5f:fe:78:92:
         60:6a:69:aa:08:f1:6c:da:bb:d7:ab:ed:f2:e0:c3:c2:8a:14:
         53:f8:b3:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdHSfve9iO6ijddjdNU6T1II1qI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1Q0ZCMzQ0RDNCQzhENEQxMjhBNkRFOEE1MjdEOUQx
RTNDNzBBNTAeFw0yNjAxMjUxMTMxMTJaFw0yNjAxMjYxNDAxMTJaMDMxMTAvBgNV
BAMTKDEzMUE5Q0Y2NDdFQTQwMzExRTVDMUJDRDlENkVBRkQ4NkMyMUVDOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWHBao66spqokQ729TdfO/Dpi
rs9xY3/uG4hTIqLBukoZCFk3neQ7DW9RrByV8TeP4ahmfXd+eSAL23m1WHfwk+ZF
lQjtSL9Cb1JZlb0WH1GWVTRhkMdJdxJoB1ktmf+Tj3ZbCIwf8iOr3C09zSjjt3pF
VGSiDajezVOZzO20uKJMg9MtOuYz8ANhwju175G1dasaOQ/FVWq3Kgtc4fnTtxUz
7SI7DKBzB1y/P/5g3018gR7CyrZ+4guZzn8ULBPgHJXTbIvBxOjnQf0s0p3g2uIy
laa9F2fKgZ7+hZF6bJh51I3Q1xwkSt6qd3sS2udBJEVh+OgsxhNflrses2mtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUExqc9kfqQDEeXBvNnW6v2Gwh7JIwHwYDVR0j
BBgwFoAUclz7NE07yNTRKKbeilJ9nR48cKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVBSTWVmM1htazFoR2syZlk3S2hBMlJyUTc2cmdpakp4dWRualp4WkZ4
WEMvMC83MjVDRkIzNDREM0JDOEQ0RDEyOEE2REU4QTUyN0Q5RDFFM0M3MEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNUNGQjM0NEQzQkM4RDRE
MTI4QTZERThBNTI3RDlEMUUzQzcwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVBSTWVmM1htazFoR2syZlk3S2hBMlJyUTc2cmdpakp4dWRualp4WkZ4WEMvMC83
MjVDRkIzNDREM0JDOEQ0RDEyOEE2REU4QTUyN0Q5RDFFM0M3MEE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgnEMChNNwdGekBsFfD3nk51QNkjfgFxyrh/PvLzv+HSsE8rmnKKgMsKDBQ4T
sAmyFl7juoaePxbf2Ch3S1cSzaDq7wQ8rpvnlT35yDx/n8fx7k9usQnMmCWYGk+N
OrK/s+xDnotFnnbf3dpvudS9hWk3VOhBRkL5+36WMCZUD+uSRaTjE3xdBrHTncTP
mjkP9JQcDLy9TU7s3nzjOhv8Hk40LclD6EqygGsxDN/0yPZBnjGBIN/jgy1M0jgf
j/fB5oBEaKJ/4L2K/SbEwjS23YvoyM+JQE0gn0Sa+VS/r2X8dR+3jKRf/niSYGpp
qgjxbNq716vt8uDDwooUU/izag==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:55 2026 by rpki-client