This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft
File:                     CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft (raw, json)
Hash identifier:          1rKna/2VslDEadlkVTIc7rmI2sdqoHIHxGdAg0+SRMY=
Subject key identifier:   33:19:9C:F8:65:32:D5:8B:BF:4C:74:26:8C:08:B3:6F:8C:20:87:B5
Authority key identifier: CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09
Certificate issuer:       /CN=CC703E0228D3E2591CD7B21A9C27F1542E0DBD09
Certificate serial:       456B86885DA362CC5AD985D3ABD5984C9A981986
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft
Manifest number:          0125
Signing time:             Sun 25 Jan 2026 08:14:05 +0000
Manifest this update:     Sun 25 Jan 2026 08:09:05 +0000
Manifest next update:     Mon 26 Jan 2026 10:56:05 +0000
Files and hashes:         1: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: cvm5TvyGB+eGHjDcZDEwAZq2Jex/pRAreV/44pY5uyM=)
                          2: CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl (hash: ZD/U9SCyg9jqKoyglUqEWfjyJZdlYElX8w9i0+PZd18=)
                          3: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: cVsXL9zzKnxJrQTMHMgMaF0pGRDjh9GVMVfwM+AegAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl
                          rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6b:86:88:5d:a3:62:cc:5a:d9:85:d3:ab:d5:98:4c:9a:98:19:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC703E0228D3E2591CD7B21A9C27F1542E0DBD09
        Validity
            Not Before: Jan 25 08:09:05 2026 GMT
            Not After : Jan 26 10:56:05 2026 GMT
        Subject: CN=33199CF86532D58BBF4C74268C08B36F8C2087B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:ff:98:cf:93:51:05:49:04:60:12:1a:3b:
                    04:75:31:01:8d:51:84:56:84:e9:ac:ef:2b:5f:ec:
                    e2:7c:73:6d:cd:b9:1d:19:de:74:9a:89:eb:9f:38:
                    f8:fc:b8:c7:2b:cb:69:3b:99:70:72:f1:51:4a:93:
                    c0:dd:2e:21:f3:36:e5:e8:a5:61:be:51:72:9f:34:
                    55:8c:b4:c9:e2:d0:ee:f0:e9:c5:50:72:71:e1:b1:
                    a8:e3:aa:a4:35:e9:53:e4:d6:cd:db:b5:7a:03:f7:
                    0c:97:bc:d1:8a:cf:9f:59:57:b0:3d:9c:f8:8d:7d:
                    58:f6:73:a6:ab:d5:38:8e:aa:d4:c9:9f:f8:ad:50:
                    dc:a2:fa:ed:ce:d9:08:3d:96:36:5c:3d:6a:a4:e4:
                    7e:39:ec:21:0b:f4:26:29:12:f2:1f:38:2e:55:69:
                    d6:19:eb:e3:f3:34:38:c3:ae:92:9b:db:35:f8:d6:
                    26:c5:6c:d8:33:56:b6:a8:a7:e8:19:b8:d7:86:24:
                    33:c8:ad:1e:1f:ea:13:f6:4f:75:3e:55:f8:53:7f:
                    7b:69:2b:4e:bf:42:4e:e1:2d:46:e7:1e:d5:dd:67:
                    f9:51:1c:4a:f6:a8:9d:e5:ef:66:fa:80:fd:7a:77:
                    d5:51:12:1b:11:6e:7b:3e:39:3e:eb:a5:73:15:5f:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:9C:F8:65:32:D5:8B:BF:4C:74:26:8C:08:B3:6F:8C:20:87:B5
            X509v3 Authority Key Identifier:
                keyid:CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:3e:a9:b1:f2:7b:66:99:25:84:7f:b1:4c:bf:09:97:3c:
         1c:34:3c:7a:cc:31:ad:67:3f:07:4f:e0:2f:9e:80:a4:41:2e:
         01:dc:bf:c2:70:9b:5d:56:9e:ed:e3:3c:59:ca:61:7e:88:fd:
         32:50:34:0e:e7:d1:3f:29:a0:ca:24:33:20:d4:3d:4b:14:00:
         f3:47:51:32:2e:3a:67:bf:f2:43:e8:64:50:02:3e:00:0f:8f:
         04:8a:04:89:0c:c2:b0:55:5b:4d:f0:09:84:e8:bb:70:0c:fe:
         10:1b:88:0b:84:a1:81:f0:f0:79:6a:66:8f:78:b4:9f:8d:b6:
         38:03:46:9f:62:67:a5:c9:05:28:75:01:8b:df:36:b4:5a:3d:
         b3:f5:fa:1a:52:59:7b:7b:b3:b0:60:ca:0a:45:6f:65:db:bf:
         86:b9:db:6b:19:ab:b2:90:ec:aa:da:e6:d2:36:ad:13:db:b4:
         53:80:47:61:1b:c2:33:23:6a:66:59:63:ae:78:76:53:ca:dc:
         63:ac:49:df:02:f9:66:bf:22:fe:88:c8:e8:d2:a8:90:a3:ad:
         67:34:a6:db:83:2a:7e:71:0a:83:ec:8a:0b:a6:93:05:43:81:
         83:3a:91:bc:17:bb:39:cc:be:4d:1e:cc:0a:3c:de:6f:e8:87:
         19:47:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:54 2026 by rpki-client