This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
File:                     2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json)
Hash identifier:          mtpmb+Y78vwAR7lj3PyVySFjAH2cMX9xwOSaOS3Ah+Q=
Subject key identifier:   09:89:F6:DD:56:8F:E7:5D:F3:18:0E:D0:95:59:7D:AE:4D:E7:80:B0
Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88
Certificate issuer:       /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
Certificate serial:       39597D89904A2C404B60AAB272B8DB3F1890BE9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
Manifest number:          80
Signing time:             Sun 25 Jan 2026 21:38:48 +0000
Manifest this update:     Sun 25 Jan 2026 21:33:48 +0000
Manifest next update:     Mon 26 Jan 2026 23:41:48 +0000
Files and hashes:         1: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=)
                          2: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: YYBsMfrKrc/m0GYQvQxIGemrG+vy5QEk2PDNDEJUo7g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl
                          rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 23:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:59:7d:89:90:4a:2c:40:4b:60:aa:b2:72:b8:db:3f:18:90:be:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
        Validity
            Not Before: Jan 25 21:33:48 2026 GMT
            Not After : Jan 26 23:41:48 2026 GMT
        Subject: CN=0989F6DD568FE75DF3180ED095597DAE4DE780B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:6a:03:43:33:c3:45:e1:1c:1e:e2:8e:c5:
                    50:e4:15:42:d7:56:eb:ed:d6:7d:4e:b8:83:ca:5b:
                    74:1a:25:77:51:ef:bd:14:9a:6e:59:9a:46:c1:b7:
                    15:17:a1:bf:f6:37:98:99:09:79:50:fc:b2:44:3f:
                    0c:fe:44:27:d0:50:67:7a:94:f6:ae:b1:a8:2e:14:
                    dc:72:78:07:6b:f4:6c:fb:74:5c:ea:89:8a:f9:44:
                    e5:7c:c6:2a:03:ef:50:46:d0:cf:cc:f8:28:79:b5:
                    9c:31:31:a7:10:f9:ea:b3:46:15:2a:92:fd:ba:35:
                    bc:76:e4:55:26:3c:ae:a2:7f:62:ab:a4:88:ce:a6:
                    01:a7:a7:4a:bf:9d:57:cc:86:72:3b:1a:76:21:43:
                    b7:eb:17:52:82:3b:1a:54:9c:7c:d1:e0:2d:80:c4:
                    24:4d:ff:0d:82:ac:5c:3e:74:38:0d:35:f4:80:7f:
                    37:3c:04:20:c4:01:39:16:fd:74:4c:ba:6a:32:dc:
                    ac:55:25:85:2b:69:80:9e:ca:59:32:2e:29:eb:ee:
                    f6:ea:ca:00:0f:1e:2d:75:9d:27:d2:22:93:63:4e:
                    1b:ad:0c:15:8c:c0:bf:71:6a:42:18:66:88:9d:41:
                    f8:41:54:a2:f7:a7:34:f0:34:39:0f:69:89:8b:ea:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:F6:DD:56:8F:E7:5D:F3:18:0E:D0:95:59:7D:AE:4D:E7:80:B0
            X509v3 Authority Key Identifier:
                keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:40:37:1c:d4:52:ff:bb:e2:0d:51:ef:ce:97:51:b7:0a:
         42:a4:5a:28:36:ac:b7:44:53:4e:38:4f:19:94:4b:ce:60:3a:
         ee:e6:a6:c2:7e:53:8b:9b:f9:8d:e3:fb:b1:6c:9f:48:90:b0:
         de:29:9f:af:07:e6:40:25:5a:20:aa:0c:8c:08:05:a0:1b:15:
         65:7e:d5:e1:14:1b:10:b4:2c:bb:bf:e5:5d:84:df:86:b4:8d:
         62:54:9a:21:dc:01:c7:ab:74:bd:c7:d1:44:1d:10:0b:e4:16:
         b6:22:32:c5:f2:96:ab:20:bf:86:af:a5:e9:8c:0e:a8:af:c3:
         57:5c:5f:5b:fa:0b:80:8f:47:54:c5:56:c3:f0:de:e0:5b:16:
         da:9f:39:74:f0:e3:84:eb:b8:16:77:1d:0b:7e:17:3e:dd:06:
         ea:f3:12:e3:34:e4:7e:d4:c1:e1:66:b7:9c:a5:21:03:b0:da:
         32:d2:b1:36:5d:23:16:23:78:2e:6a:a8:5a:21:b6:6b:d2:05:
         e7:b8:49:35:aa:3a:a9:82:e5:a6:98:6d:16:34:b5:3a:49:75:
         f9:80:c1:06:d2:24:07:46:96:1d:97:75:00:08:e7:78:bb:e2:
         9f:08:1b:96:d8:7a:2e:16:1b:a7:d5:c3:f9:91:73:bd:b3:e3:
         39:40:11:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOVl9iZBKLEBLYKqycrjbPxiQvp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZGNEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTRE
QTkzM0U4ODAeFw0yNjAxMjUyMTMzNDhaFw0yNjAxMjYyMzQxNDhaMDMxMTAvBgNV
BAMTKDA5ODlGNkRENTY4RkU3NURGMzE4MEVEMDk1NTk3REFFNERFNzgwQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07moDQzPDReEcHuKOxVDkFULX
Vuvt1n1OuIPKW3QaJXdR770Umm5ZmkbBtxUXob/2N5iZCXlQ/LJEPwz+RCfQUGd6
lPausaguFNxyeAdr9Gz7dFzqiYr5ROV8xioD71BG0M/M+Ch5tZwxMacQ+eqzRhUq
kv26Nbx25FUmPK6if2KrpIjOpgGnp0q/nVfMhnI7GnYhQ7frF1KCOxpUnHzR4C2A
xCRN/w2CrFw+dDgNNfSAfzc8BCDEATkW/XRMumoy3KxVJYUraYCeylkyLinr7vbq
ygAPHi11nSfSIpNjThutDBWMwL9xakIYZoidQfhBVKL3pzTwNDkPaYmL6gQ5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCYn23VaP513zGA7QlVl9rk3ngLAwHwYDVR0j
BBgwFoAUL/TunB+vGcvUTMtsT4A7VNqTPogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2lo
S1AvMC8yRkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjRFRTlDMUZBRjE5Q0JE
NDRDQ0I2QzRGODAzQjU0REE5MzNFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8y
RkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX69ANxzUUv+74g1R786XUbcKQqRaKDast0RTTjhPGZRLzmA67uamwn5Ti5v5
jeP7sWyfSJCw3imfrwfmQCVaIKoMjAgFoBsVZX7V4RQbELQsu7/lXYTfhrSNYlSa
IdwBx6t0vcfRRB0QC+QWtiIyxfKWqyC/hq+l6YwOqK/DV1xfW/oLgI9HVMVWw/De
4FsW2p85dPDjhOu4FncdC34XPt0G6vMS4zTkftTB4Wa3nKUhA7DaMtKxNl0jFiN4
LmqoWiG2a9IF57hJNao6qYLlpphtFjS1Okl1+YDBBtIkB0aWHZd1AAjneLvinwgb
lth6LhYbp9XD+ZFzvbPjOUARcQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:12 2026 by rpki-client