This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
File:                     D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft (raw, json)
Hash identifier:          z2n6slrxZB5FSo2WbHQQU8MBmZ7gFHudXQSd2NObs6A=
Subject key identifier:   5B:98:F5:2E:F1:45:3E:5B:DD:D8:58:9A:97:20:D9:58:B4:76:FB:F3
Authority key identifier: D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
Certificate issuer:       /CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Certificate serial:       392C070210157CC184313EB36A41FF599BE5C748
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
Manifest number:          70
Signing time:             Sun 25 Jan 2026 14:22:43 +0000
Manifest this update:     Sun 25 Jan 2026 14:17:43 +0000
Manifest next update:     Mon 26 Jan 2026 17:59:43 +0000
Files and hashes:         1: 3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa (hash: qlUjHpjAWKMnQPffdQJn3eCpwFflll7j8Xky9+T9Cfs=)
                          2: D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl (hash: ZXQHYpHEueB3Bostyfx0fU2oNMBDHXVLFp5eHtNQIUU=)
                          3: 323830343a373835633a3a2f33322d3438203d3e20323731323337.roa (hash: aRvaBBCO0cntwA2+Kz+mMu8boe9ywcCKXHaMThipubU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
                          rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:07:02:10:15:7c:c1:84:31:3e:b3:6a:41:ff:59:9b:e5:c7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
        Validity
            Not Before: Jan 25 14:17:43 2026 GMT
            Not After : Jan 26 17:59:43 2026 GMT
        Subject: CN=5B98F52EF1453E5BDDD8589A9720D958B476FBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:ed:24:1f:9a:b3:86:5a:c6:a6:27:5b:26:
                    cd:69:2f:1b:50:ab:27:88:f3:d5:d7:ee:8f:25:19:
                    66:a5:79:a5:7b:3b:f8:0a:a9:49:0a:cd:0d:eb:57:
                    b4:9b:15:76:21:78:be:1b:fe:74:05:c1:a2:e2:f4:
                    52:30:f8:8f:55:f9:43:da:9b:55:e5:f8:17:1d:ef:
                    4a:59:6b:21:ec:7d:14:a7:19:26:aa:c8:d2:a2:58:
                    0a:d4:b5:0f:83:46:01:40:5c:8c:b1:4e:74:be:48:
                    8c:ae:dd:6b:7b:47:5f:90:97:c4:34:9e:e8:19:1f:
                    9f:67:a7:5c:3e:96:49:e7:11:27:36:d9:bd:9c:51:
                    d8:ca:c8:b0:0c:27:da:db:40:1b:e4:13:f2:b4:3d:
                    01:cd:7e:7c:9d:55:93:79:5b:72:66:f5:55:98:f5:
                    ca:0f:d9:d1:c1:b5:31:bf:6a:1f:09:ff:eb:24:4b:
                    1b:58:96:a6:68:00:2f:c2:ea:f1:ce:65:d2:4a:ca:
                    04:dc:5e:3a:37:85:47:d1:34:18:c4:1d:87:7b:e5:
                    ff:d1:50:8a:6a:62:d8:62:26:48:fa:90:11:72:09:
                    32:f6:ce:c5:ec:0f:3e:e1:49:5d:cf:9b:b1:8e:6e:
                    74:72:79:98:01:4d:e4:f9:4b:6c:4a:40:96:68:7d:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:F5:2E:F1:45:3E:5B:DD:D8:58:9A:97:20:D9:58:B4:76:FB:F3
            X509v3 Authority Key Identifier:
                keyid:D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:43:ba:12:a9:28:5e:f0:08:36:c5:94:c1:ba:36:ad:d5:1c:
         c2:f6:8e:fc:2f:45:a0:f4:60:80:89:98:c1:af:09:3d:a9:12:
         39:d7:82:4f:39:1a:7e:00:21:60:57:e1:fa:2c:bb:d4:5a:46:
         6e:52:43:4b:65:1e:2d:55:77:8c:e0:53:97:e2:34:25:72:00:
         1a:56:5d:30:f2:c1:cd:bb:5b:28:e0:52:80:c5:5c:d9:98:0c:
         de:a2:22:9c:dc:8a:f4:1c:6d:56:e5:84:62:60:60:62:22:2d:
         93:15:dc:69:b1:12:11:5d:a4:69:ba:69:64:91:30:c5:36:55:
         ac:08:14:09:60:0e:4f:f8:a6:d5:f5:d3:56:43:a2:25:38:5c:
         80:b2:67:55:48:18:93:8c:4d:37:68:fb:6f:b6:be:fc:99:61:
         6c:46:5f:6b:48:cb:3a:40:bf:17:e0:f7:f2:e0:9c:9a:89:98:
         c4:cd:9e:a4:2a:57:f2:06:71:ab:60:88:70:f8:43:fc:e9:54:
         d5:56:13:72:68:4c:ab:6c:fc:11:2c:60:24:26:7a:2c:ae:a9:
         b7:7b:1a:c8:f3:9a:c8:88:08:07:f0:90:d7:9e:fd:df:9f:3f:
         e4:a2:fe:77:59:1c:e7:ec:d8:b7:2c:42:95:b6:7d:37:05:2b:
         8d:56:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:40 2026 by rpki-client