This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
File:                     F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json)
Hash identifier:          EebSYe1e6gIjptL+Mstc0mP81OTcYJKA8/nF1mKWM6w=
Subject key identifier:   E4:A8:22:B2:9F:5E:45:FB:24:6F:C7:C4:97:9F:0F:BB:0F:61:45:6D
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Certificate issuer:       /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial:       73CAA3D8393E73F2D149E88EE4418530BACD35A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
Manifest number:          027A
Signing time:             Sun 25 Jan 2026 02:07:34 +0000
Manifest this update:     Sun 25 Jan 2026 02:02:34 +0000
Manifest next update:     Mon 26 Jan 2026 06:06:34 +0000
Files and hashes:         1: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: CX/cj410Z6WPwJMrud8he6flcqEqe568hjn5TZSbfVs=)
                          2: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: cDOoFRmj8iEbMrxk3eV3ulYaQru+1CnbFKAYGeTHAiE=)
                          3: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: VDrfAwL3Ri73wmHCCBTJ8HFlRF9Bay2CAlDSTwJLpoI=)
                          4: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: QgzU9rceU0pX2SIMJeO4ViSomBaMzkZwR8ail6IEh6I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl
                          rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:a3:d8:39:3e:73:f2:d1:49:e8:8e:e4:41:85:30:ba:cd:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
        Validity
            Not Before: Jan 25 02:02:34 2026 GMT
            Not After : Jan 26 06:06:34 2026 GMT
        Subject: CN=E4A822B29F5E45FB246FC7C4979F0FBB0F61456D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:e7:d0:90:f3:67:4a:7d:30:b7:42:80:7b:
                    d4:cf:48:d4:7e:ba:95:60:f5:a1:30:81:60:29:53:
                    85:e3:41:cf:45:36:8e:ed:d5:72:cb:d4:70:6f:a3:
                    68:c2:94:7b:fc:f9:ea:82:99:79:f2:a6:68:a6:a7:
                    c6:eb:c6:b6:b0:be:a0:eb:c5:ad:ad:8a:fd:ed:d6:
                    9a:23:46:ce:f4:62:1e:fa:a5:f2:c4:d5:6d:17:7b:
                    39:ec:e8:76:bd:22:9f:c4:fc:c1:30:6d:39:90:74:
                    19:a9:9d:72:3b:19:fe:ce:a3:52:78:02:97:75:c3:
                    a3:a5:4a:9d:9c:3a:8b:34:c1:ed:f6:61:0b:f0:ae:
                    00:57:c4:24:e2:dc:8b:f4:77:d3:58:ef:a5:27:a5:
                    2b:20:5c:d0:3d:04:30:d2:06:19:31:0c:b8:3e:bc:
                    1b:7f:2e:ef:56:71:f5:ec:c0:1b:fe:8c:fb:14:c3:
                    cd:cb:cc:52:f2:ec:99:b8:86:3c:42:ce:9d:fe:b1:
                    30:9e:94:c7:25:3c:04:66:f1:38:a0:d0:93:0d:e7:
                    b2:6a:d5:98:f5:36:07:c6:9b:78:f4:a8:5f:20:a6:
                    29:3c:aa:58:21:36:f5:cc:ff:19:c7:53:7e:cf:d7:
                    20:f2:6e:0b:aa:cd:d4:83:a1:ea:1b:b2:4e:c1:48:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:22:B2:9F:5E:45:FB:24:6F:C7:C4:97:9F:0F:BB:0F:61:45:6D
            X509v3 Authority Key Identifier:
                keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:69:16:77:64:97:73:56:90:9e:d6:dc:13:6b:ee:3c:70:
         af:9d:61:b9:e2:69:9b:af:8d:60:e9:23:20:aa:e8:e5:63:be:
         44:02:b4:b5:86:35:7e:8d:cc:a7:d6:5b:42:05:ce:76:31:f4:
         d0:2e:1e:8b:00:e1:5b:24:cb:e1:fc:1f:ba:7c:53:1a:96:4b:
         2d:88:b0:68:98:33:c3:69:e5:1e:1f:2c:15:18:47:e6:a9:94:
         45:4b:e9:b2:24:bf:1b:57:00:02:92:31:69:50:e7:8c:56:59:
         a8:56:03:f7:c9:ec:8b:55:00:15:10:b0:ca:81:ac:a2:74:c8:
         d0:a1:1c:1c:22:02:9e:08:b7:bb:43:7a:d8:e3:9c:df:1e:fe:
         85:f0:f3:52:4a:b5:ac:93:34:aa:19:e6:ae:3d:41:ba:62:58:
         a5:a6:96:3f:1f:fb:3e:a0:ea:ed:8b:0d:6c:ac:1e:0a:73:f6:
         05:54:78:03:2e:a4:2f:a4:f0:5a:46:24:a8:90:bc:f7:72:c8:
         a0:81:ea:3a:d8:cc:b8:bb:93:4d:d4:26:ef:22:f7:a3:78:f6:
         14:40:96:4a:31:8e:54:27:f4:e3:7b:14:7f:de:be:6f:a7:e1:
         ac:43:d4:f3:3e:ea:e6:a7:a1:49:82:00:ee:e2:ba:3d:31:f4:
         b5:64:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:21 2026 by rpki-client