This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
File:                     96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft (raw, json)
Hash identifier:          +iYIvtngxpXHKQn1JhKUayijPWXWoxlMgLYARtslGAQ=
Subject key identifier:   D7:25:25:7F:F4:5A:CD:75:1D:52:62:8A:0D:08:58:6B:C3:85:D9:BB
Authority key identifier: 96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Certificate issuer:       /CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
Certificate serial:       398A750B57CA112C5A6A448A72E3E8F95AF0E8A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
Manifest number:          0138
Signing time:             Sun 25 Jan 2026 06:38:41 +0000
Manifest this update:     Sun 25 Jan 2026 06:33:41 +0000
Manifest next update:     Mon 26 Jan 2026 07:20:41 +0000
Files and hashes:         1: 3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa (hash: 1Y+6v14yXWwbyccDbJzE4VJO0XW/eilhTVC92Crn/GY=)
                          2: 3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa (hash: 6pLCEG/weky6psPs+O5XUyP3MwSaUCgC5/IjHJIWb1I=)
                          3: 3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa (hash: R4g05ADj2/B5Kkb3DZkmE5V9hXOr1rce+DvS4vi3DJc=)
                          4: 3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa (hash: LoWOA37tJCVwNyuihPQoVvOR+EjrEFTBXGsOm2lwK+s=)
                          5: 96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl (hash: aMuGny1Y5ishVlaecSctB0T5RqTzal7pewWpxZoKtAU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl
                          rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8a:75:0b:57:ca:11:2c:5a:6a:44:8a:72:e3:e8:f9:5a:f0:e8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
        Validity
            Not Before: Jan 25 06:33:41 2026 GMT
            Not After : Jan 26 07:20:41 2026 GMT
        Subject: CN=D725257FF45ACD751D52628A0D08586BC385D9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:40:0e:b3:3e:67:22:57:e8:bb:58:d1:fa:
                    22:b7:32:2d:ba:4e:01:7c:9f:74:f9:08:f3:1d:f5:
                    20:24:d8:9f:b9:b5:2a:e3:ca:f2:cc:55:4b:4d:fc:
                    87:65:16:58:c0:f1:4a:60:2c:72:8f:91:f8:1f:a5:
                    b2:be:13:eb:44:9b:68:1a:a3:8d:2d:d8:91:d9:5a:
                    a4:b1:d3:6d:ac:14:29:3e:b0:90:65:59:cd:26:a3:
                    d7:77:f9:fc:81:7c:25:13:0f:d2:81:08:68:c8:ef:
                    5b:ed:9b:70:8e:88:99:3f:42:61:da:0b:9e:b2:d0:
                    26:13:a4:9d:cd:65:1a:61:5a:15:89:db:2e:ee:4a:
                    ec:e2:18:77:96:f5:7b:95:66:05:ab:3b:24:02:50:
                    d7:d0:73:dd:a6:b5:ba:36:1b:4d:e0:5c:90:7d:ad:
                    23:8c:98:46:b4:f8:c6:f4:c3:e5:0b:e4:a9:3f:5b:
                    68:0b:39:2a:d9:5c:3b:72:10:9c:6d:e2:a7:1b:90:
                    60:1c:a3:e8:73:35:2c:8b:c3:1d:11:c6:ec:d6:22:
                    05:36:92:c8:55:f6:6e:f4:72:bc:68:2a:f7:d0:12:
                    42:06:b8:02:81:7c:bc:02:66:ae:90:9c:60:ea:0f:
                    73:63:a3:e6:ac:f5:f9:dd:82:8f:ee:c7:f5:6e:80:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:25:7F:F4:5A:CD:75:1D:52:62:8A:0D:08:58:6B:C3:85:D9:BB
            X509v3 Authority Key Identifier:
                keyid:96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:91:1f:6f:b2:be:f6:c0:af:0d:fb:56:f2:68:6d:db:c6:2f:
         b7:82:ff:cc:15:f6:26:99:5a:c5:3b:12:d3:c1:2d:e1:0f:34:
         bd:26:6b:ea:d4:11:b9:90:87:ce:11:82:d4:c5:e1:07:3f:b1:
         0b:b9:4a:30:75:3b:12:e8:ad:d7:d7:4b:d7:59:a2:ea:6b:9b:
         da:ab:db:bf:f1:f1:58:a1:27:90:8a:ec:fb:57:ea:bd:45:ac:
         39:5e:d1:6a:e0:84:57:a3:2b:3a:11:b8:21:6a:46:9b:88:d6:
         25:9e:11:b2:41:b4:f2:84:4b:40:d8:d1:95:4a:cc:d4:cd:93:
         c8:60:0e:bd:5f:12:69:9f:72:b6:a9:04:8b:e8:b5:7c:d5:1f:
         c7:89:74:37:68:6b:19:36:29:db:59:58:39:a1:a5:66:a1:fd:
         e5:2c:a1:86:ab:64:d5:ab:61:8b:52:47:b8:eb:39:d4:09:e5:
         3e:02:fb:9c:61:5c:71:83:2b:62:e4:96:c1:db:56:f6:7f:79:
         e0:65:22:5a:af:6b:b4:54:46:14:b8:fd:a1:73:60:0d:1c:cb:
         65:03:77:94:99:8a:9f:20:bf:67:a2:50:14:26:60:30:d1:40:
         37:bb:13:83:60:57:51:ce:4f:76:fe:ae:9b:8a:1a:0c:9b:87:
         30:ba:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:57 2026 by rpki-client