This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
File:                     947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json)
Hash identifier:          uw5WYnkZFBZHcNNoa8rbI6nEB/bAIFSUBxCoa+1ttSI=
Subject key identifier:   94:2E:20:D7:7A:C6:0F:1A:E8:70:99:17:5F:C3:6A:26:2B:2C:5C:5C
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       31DDD6F50C55E8C207B000B116AD2A8039563F47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
Manifest number:          A9
Signing time:             Sun 25 Jan 2026 03:26:07 +0000
Manifest this update:     Sun 25 Jan 2026 03:21:07 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:07 +0000
Files and hashes:         1: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=)
                          2: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=)
                          3: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: 1UwqJ8UbmYhar8eXvsRpT30myVb9bh3c9wNhdisV18w=)
                          4: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dd:d6:f5:0c:55:e8:c2:07:b0:00:b1:16:ad:2a:80:39:56:3f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Jan 25 03:21:07 2026 GMT
            Not After : Jan 26 07:01:07 2026 GMT
        Subject: CN=942E20D77AC60F1AE87099175FC36A262B2C5C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:21:46:15:02:11:45:95:65:2a:ab:9f:2c:
                    0d:d7:07:56:b7:07:99:91:7b:47:fd:5f:7e:d4:d6:
                    09:2d:32:43:94:b1:0b:6e:1a:82:ca:1e:9c:5b:74:
                    57:f3:87:4a:c9:70:42:c1:29:63:0b:be:b6:50:f7:
                    49:1c:4c:16:a8:9b:15:79:93:bf:9a:b8:8f:40:1d:
                    2d:8f:38:db:b2:1d:91:ea:5a:02:d2:99:fb:f7:d2:
                    1d:48:cb:1d:d1:a7:99:c0:65:84:17:64:57:3a:c4:
                    35:66:6c:ef:04:38:78:48:9d:b2:91:b1:97:1f:6b:
                    cb:36:a1:a4:c3:f1:47:e0:b4:d6:70:90:8e:9d:a6:
                    be:22:66:41:32:f6:ce:35:40:9c:71:92:47:57:1a:
                    94:a1:62:53:2c:51:c6:c7:a9:c2:ba:7a:79:f6:9b:
                    c3:46:ed:e1:0d:a0:f8:e5:fd:be:77:fd:07:64:bb:
                    1f:0b:dd:74:00:1b:86:44:e2:f5:79:33:56:bd:80:
                    a9:d8:5d:ad:c4:24:ec:ae:c4:b2:4a:13:32:ff:b1:
                    8e:ac:5c:aa:00:c7:51:e9:0b:34:6e:71:1a:ec:4c:
                    51:a5:33:a8:4e:da:d8:8a:dc:d8:9c:ee:4b:2c:f1:
                    81:f5:7b:67:6c:7d:ae:d2:d5:2d:76:ce:37:ec:26:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2E:20:D7:7A:C6:0F:1A:E8:70:99:17:5F:C3:6A:26:2B:2C:5C:5C
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:5a:d6:82:86:ba:62:96:ab:a9:29:15:99:dc:3d:a9:f5:
         1c:2c:6c:07:e7:e0:1f:94:45:29:04:4a:10:d5:fb:a8:73:45:
         3c:d1:78:d4:26:f3:f6:1c:0a:b8:76:7d:9c:62:b7:2b:db:c0:
         50:3b:6e:58:05:1f:e1:09:2e:40:25:90:64:a7:75:ee:11:0f:
         70:59:6a:fd:4a:6e:e8:a6:7c:d6:30:c9:dc:4c:20:e0:3a:81:
         d8:b3:84:11:32:0d:97:06:c5:54:73:4e:52:13:71:a8:b6:a3:
         28:e3:4e:e9:62:d1:5c:c5:51:43:73:8a:c5:a3:c6:f2:c3:fc:
         fb:38:e3:5b:58:a6:7b:94:ca:67:db:ab:73:bd:6d:79:fe:a8:
         4d:34:5c:9f:04:0d:1f:ff:0d:01:45:c7:df:e0:8e:c4:3a:25:
         0e:e6:3c:c3:29:9a:a0:8e:64:eb:db:76:20:21:b9:35:7e:4b:
         32:32:c6:e8:03:36:e7:17:d2:85:42:e3:be:70:cb:c5:e6:f5:
         e2:e2:82:6d:bd:3c:ff:6a:62:c5:a0:92:04:40:75:34:7f:02:
         79:91:79:45:36:03:12:d5:93:d7:cf:d9:ab:28:87:e6:24:59:
         f2:be:a3:b1:fb:22:01:16:0c:db:35:67:c5:30:01:f7:a3:ee:
         6d:a5:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:24:15 2026 by rpki-client