This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
File:                     2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft (raw, json)
Hash identifier:          xQvNEteXfU//WJNscxrg8hGxfK4s/u97lRLNX392FmE=
Subject key identifier:   1B:CC:6B:40:A7:E6:D3:B8:6F:6A:68:6F:64:6E:A2:CC:65:72:5A:D0
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       21280B285352AE03FAB71444AA3758428F5D09C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
Manifest number:          0310
Signing time:             Sun 25 Jan 2026 14:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 13:56:17 +0000
Manifest next update:     Mon 26 Jan 2026 15:57:17 +0000
Files and hashes:         1: 3137372e37322e38382e302f32312d3332203d3e203532383232.roa (hash: l1bCBW5xTIWmnRtwFALqoufSI4NmF7ZdUExV4DVUkHY=)
                          2: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl (hash: xYpYTA3/tB0T86igWillpn6xoAEjIq7HnJQSKdqXJN8=)
                          3: 323830343a6262633a3a2f33322d313238203d3e203532383232.roa (hash: NiTHJW5Y+34NTE8ZT454pnL1Mlzpd+vYci8H9lwnai8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:28:0b:28:53:52:ae:03:fa:b7:14:44:aa:37:58:42:8f:5d:09:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: Jan 25 13:56:17 2026 GMT
            Not After : Jan 26 15:57:17 2026 GMT
        Subject: CN=1BCC6B40A7E6D3B86F6A686F646EA2CC65725AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:61:1a:70:2a:f2:e8:73:75:1a:76:5d:75:
                    6a:57:23:2f:ca:f0:a0:20:74:a5:33:ae:f3:ef:26:
                    7c:23:41:bd:63:38:1a:6b:0b:55:ed:6d:63:c4:43:
                    d2:d8:77:1e:ee:1c:fb:a0:95:ac:2e:5a:d0:f2:9c:
                    de:b5:9a:f0:c4:3f:76:a0:2a:90:d7:d5:ad:9d:f0:
                    22:2f:e7:b2:7f:67:c0:a6:3f:22:cd:45:95:14:8a:
                    42:c6:08:35:a3:7d:4c:1f:a3:e5:65:0b:0f:cc:11:
                    c4:fd:9d:65:39:26:a0:a7:27:d6:50:f5:dd:d3:50:
                    e8:52:55:0c:1f:a2:a1:af:5d:7f:43:51:18:29:f3:
                    56:8c:f1:21:33:b6:8f:db:7e:39:91:1b:3c:23:ec:
                    63:3c:99:29:eb:39:90:b2:b4:59:83:77:17:26:29:
                    1b:14:8e:48:0f:6a:6a:7c:36:45:7d:f9:b7:73:96:
                    9d:10:db:b4:78:ea:fe:57:7a:58:da:db:c9:41:c9:
                    6e:aa:29:87:5a:b6:d5:8b:d7:48:c3:0b:f9:02:3f:
                    6b:27:a1:5a:b7:d5:f4:5a:07:ce:4b:58:85:2e:2a:
                    d0:78:cc:cb:07:04:f7:c2:d5:17:30:d6:34:46:21:
                    c3:ad:dd:3d:6b:d9:9a:16:08:d6:ac:83:fe:68:55:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:6B:40:A7:E6:D3:B8:6F:6A:68:6F:64:6E:A2:CC:65:72:5A:D0
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:45:19:95:d2:a2:72:f9:7e:a9:2d:50:e7:08:42:0e:64:
         e9:7a:b4:74:2d:72:ca:66:52:43:a3:80:95:35:e0:c8:e6:34:
         4c:a5:d0:ae:cd:76:fc:05:97:b7:04:4e:b3:fe:11:78:b5:62:
         92:de:94:1d:59:e4:64:4a:d0:64:1a:a0:c4:db:fe:59:0b:dd:
         8d:b5:0b:3a:04:f5:db:b7:d8:49:7d:36:07:de:34:b1:e0:fc:
         15:a4:04:b7:6a:87:54:75:97:3d:a6:c0:dc:be:2d:65:b8:90:
         76:e0:c4:73:66:ac:83:1a:09:0f:5e:73:a0:27:65:a3:b0:63:
         a1:d7:62:e7:37:d4:2c:f3:22:1c:57:aa:43:1f:79:cd:1a:b0:
         fa:fc:5e:fe:8b:d3:3c:d3:2d:2d:ca:ab:68:88:16:74:6c:88:
         1b:cd:07:7c:eb:95:be:9b:10:54:2c:a6:ac:e5:bf:2d:3f:a9:
         83:94:e1:19:10:9b:bf:42:b3:69:2f:96:2d:07:18:4a:83:80:
         88:ae:bd:aa:09:7e:0d:6a:65:13:17:93:a1:c0:06:27:7d:48:
         f5:d6:91:ab:8d:ca:94:e9:74:ab:dd:8c:2a:c2:4e:89:1c:9d:
         bf:95:1e:e7:47:81:40:67:55:85:8e:6a:85:bb:e2:05:c9:49:
         91:0b:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:56:39 2026 by rpki-client