This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
File:                     CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft (raw, json)
Hash identifier:          t+EUdf5PPL97F6VDsAbzM2pdfvy3NcEaO4+q+6cI/sQ=
Subject key identifier:   99:1A:6E:05:E7:03:8F:9D:8B:94:7D:81:24:CF:C2:05:30:3A:8A:29
Authority key identifier: CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
Certificate issuer:       /CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Certificate serial:       7D7B522FB09C181BEF68646BA6D366F177E0A1EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
Manifest number:          52
Signing time:             Sun 25 Jan 2026 12:22:52 +0000
Manifest this update:     Sun 25 Jan 2026 12:17:52 +0000
Manifest next update:     Mon 26 Jan 2026 14:34:52 +0000
Files and hashes:         1: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl (hash: aRhKXBAbbzn2dVVDWG8hpnVMyPewe9fjTZsp5Zzoqto=)
                          2: 3138392e3132362e342e302f32322d3332203d3e20323730333434.roa (hash: TWpMsUryptQu6Hi6KjgY8UHGV5Dc4mwwgB/z57TzmHE=)
                          3: 323830343a366139303a3a2f33322d313238203d3e20323730333434.roa (hash: i51l37KiQWwXtN+K1/iN3p/yRB7t5FE68ciQe18TlUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
                          rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7b:52:2f:b0:9c:18:1b:ef:68:64:6b:a6:d3:66:f1:77:e0:a1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
        Validity
            Not Before: Jan 25 12:17:52 2026 GMT
            Not After : Jan 26 14:34:52 2026 GMT
        Subject: CN=991A6E05E7038F9D8B947D8124CFC205303A8A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:4e:5a:cc:ae:3b:34:15:e0:82:81:f2:af:
                    df:19:45:0b:3a:e9:7d:25:15:3a:aa:7f:1e:14:37:
                    3c:ef:09:f7:21:b7:1f:a9:94:b9:9c:81:e4:54:1f:
                    dc:f8:f0:dd:fa:67:1d:5d:c9:3e:bc:07:e2:00:89:
                    28:05:81:f6:8a:37:0f:08:6b:ff:d1:80:d2:3e:db:
                    4b:c5:a8:18:0f:d4:4a:80:9e:ef:2e:9f:d0:09:86:
                    ec:28:5a:e1:37:61:a3:05:68:a1:46:5e:cd:66:31:
                    66:fc:80:78:cc:1f:1f:e2:ca:d9:0b:2d:c0:03:d1:
                    ff:c8:86:bc:6a:7c:08:3d:7b:7e:a6:75:3e:71:e0:
                    c9:ea:30:86:46:95:9a:5c:96:f0:b7:39:c2:06:03:
                    63:b3:ad:1b:35:ec:84:bb:2d:2c:1e:1a:d5:5a:06:
                    2f:0e:6e:81:f2:6a:f8:f0:2e:c4:5d:84:73:29:a7:
                    08:17:4d:a6:b7:74:dd:ba:f1:21:8a:c2:b1:b6:ac:
                    44:33:3b:17:cb:de:14:cd:86:a2:2f:25:91:0d:cf:
                    c2:27:bf:d5:05:8f:fe:e1:e6:28:d2:33:f1:04:db:
                    a1:ea:ef:b3:d4:bb:76:66:1c:c6:1a:81:e7:7b:c2:
                    7e:b8:46:92:d6:05:18:b6:d2:ac:1f:52:a9:c8:62:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:6E:05:E7:03:8F:9D:8B:94:7D:81:24:CF:C2:05:30:3A:8A:29
            X509v3 Authority Key Identifier:
                keyid:CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:a6:99:0f:3a:bf:ff:a8:85:d6:77:f8:e8:f9:2b:ef:8e:
         b6:8d:7d:11:a6:a5:6d:bd:84:e6:d6:f1:26:08:48:6d:38:cd:
         07:ce:d8:fb:6f:74:b2:bd:27:6a:49:df:ac:1b:89:49:26:bc:
         09:6f:52:5d:4b:2b:9e:e7:f4:74:13:34:71:97:03:ec:59:f0:
         46:dd:59:7b:3a:1f:43:15:9b:bc:35:51:3b:61:65:c0:92:57:
         51:8b:48:33:ed:ea:56:65:a3:93:6d:40:9f:1f:f2:da:e7:d1:
         2f:93:0f:35:ac:2d:f3:c7:f5:7c:f9:77:51:72:08:d3:bb:5f:
         6f:a8:d5:70:79:cb:b0:fc:57:2a:e6:58:bd:23:03:b8:f6:43:
         4b:05:7d:ea:cb:95:3c:cd:2e:15:fc:24:ef:94:5c:7c:0c:dc:
         87:c6:05:b0:85:84:bf:c5:74:b9:db:7b:af:2a:45:12:40:b9:
         9a:a2:3a:40:eb:a8:65:74:a9:70:6d:da:22:2a:f2:86:74:42:
         9a:09:dd:4e:2e:d8:3d:4c:78:80:53:e1:b7:71:08:ea:74:73:
         ae:23:4c:c5:e3:3e:5e:1f:df:ec:61:e7:ea:81:de:26:b8:5d:
         e8:4f:0a:c1:44:99:b2:78:cb:79:06:ee:0b:ac:d4:26:59:39:
         67:02:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:18 2026 by rpki-client