This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
File:                     DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft (raw, json)
Hash identifier:          NfYGCfsvKLI01/wYGiEfzCZ3Iw0J/ghfP4kdV1+Sjp0=
Subject key identifier:   D1:1F:C9:46:6C:56:E6:BB:EE:8B:56:D7:D5:62:8C:7E:38:50:44:61
Authority key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E
Certificate issuer:       /CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
Certificate serial:       42A7E95B89F50903433C5FFB72DFA5E33907BCD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
Manifest number:          017D
Signing time:             Sun 25 Jan 2026 08:57:33 +0000
Manifest this update:     Sun 25 Jan 2026 08:52:33 +0000
Manifest next update:     Mon 26 Jan 2026 08:58:33 +0000
Files and hashes:         1: 34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (hash: pjcENXhwN39gPAIuzrYcrkt1/jTP1rUfHtlUwzsHBWs=)
                          2: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl (hash: gHW8OWgSd09U1bq3rmIln/ExpffdKqBo2o+bmMQAung=)
                          3: 323830343a353033303a3a2f33322d3438203d3e20323638333734.roa (hash: bmCfoJVjmMhZ9Zxei7VwsBUkWDIqf9LkUDnbJiwOoO8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl
                          rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a7:e9:5b:89:f5:09:03:43:3c:5f:fb:72:df:a5:e3:39:07:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
        Validity
            Not Before: Jan 25 08:52:33 2026 GMT
            Not After : Jan 26 08:58:33 2026 GMT
        Subject: CN=D11FC9466C56E6BBEE8B56D7D5628C7E38504461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:c0:54:96:be:53:1f:f4:fe:c2:27:c4:59:
                    96:c8:a3:b9:7c:08:7d:ab:69:f2:d7:f6:07:19:11:
                    a9:69:15:58:3a:7d:0a:ed:e0:39:95:a5:98:ea:ef:
                    ae:a0:1a:45:8d:b6:a5:e7:7e:0e:f3:2a:22:6b:00:
                    8d:10:37:bf:9b:15:49:9f:c3:dd:52:aa:4a:f4:52:
                    92:f9:5f:6e:4f:58:5e:40:2b:2e:70:69:b6:2b:2e:
                    d1:a8:8f:95:57:49:15:27:9c:62:f2:52:83:9d:4f:
                    b1:ce:78:af:6d:a5:7b:db:86:69:6a:56:4b:0e:de:
                    13:ea:22:9a:40:98:70:7f:9e:38:3f:46:b4:96:ad:
                    1e:bc:be:59:b3:e4:70:98:05:f5:e2:c4:fd:f3:ba:
                    00:28:82:8e:d4:cc:19:ae:7c:fa:44:72:b7:dc:5c:
                    82:f6:14:ef:96:d8:d7:b2:23:e9:30:3e:25:16:66:
                    33:21:6c:8e:30:4e:65:4d:26:90:8e:2d:da:f0:e2:
                    63:0d:2f:97:61:6b:d8:3e:4f:6a:3d:c9:33:d9:07:
                    c2:3a:29:9a:a9:01:bb:ef:0c:c0:5c:2d:55:f6:15:
                    0e:3c:89:73:98:9b:8e:35:12:1a:7b:3f:3a:28:2a:
                    3c:2a:94:09:d9:77:db:41:02:b7:a6:b0:ec:e1:b1:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1F:C9:46:6C:56:E6:BB:EE:8B:56:D7:D5:62:8C:7E:38:50:44:61
            X509v3 Authority Key Identifier:
                keyid:DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:a4:c1:46:29:a1:27:05:91:d1:21:94:4d:3e:94:94:68:
         d6:43:28:7c:9f:3f:ac:b6:06:0c:13:25:0a:0f:4b:52:89:5f:
         1e:34:1b:25:47:82:33:fd:3b:bd:14:a2:ee:ad:90:3d:2f:b9:
         87:80:e3:31:96:a7:9b:b9:5d:27:3f:57:c8:24:5d:ae:7a:8c:
         6b:fb:a7:5a:28:54:cf:24:28:0c:4f:c6:8e:6b:4a:a1:b0:91:
         48:18:c5:53:a6:c1:ba:f0:a9:76:03:bf:b7:51:87:bd:40:ee:
         6e:a9:56:4e:1d:52:04:c9:0e:dd:2e:90:97:dd:d6:9f:e8:2c:
         dc:f4:85:a4:e2:3f:27:07:5d:33:b2:4f:c5:f8:17:b2:26:cc:
         6e:22:84:ff:7e:3d:ef:6d:85:4b:bc:bc:55:55:93:86:4c:52:
         f5:52:4e:b6:cd:e3:77:1f:c1:25:eb:88:ae:d3:ac:d3:1e:89:
         c6:90:64:df:30:36:fc:19:0f:a5:bf:35:da:b0:e0:e8:c8:3f:
         a5:82:eb:e3:5d:73:87:5b:50:db:60:ac:1e:ea:f3:96:6c:3b:
         4b:13:92:0a:87:c5:25:fc:c7:5f:8d:e9:97:18:b6:2f:3f:62:
         4f:20:e7:02:ae:d7:6d:e5:37:b0:bc:b4:9a:6a:2d:50:19:f5:
         d3:6e:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:15 2026 by rpki-client