This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
File:                     5A3AE20076D062C545A8A8573997926813E925D8.mft (raw, json)
Hash identifier:          nQ6j+bM9RoBY0R3y8niVXdJXXQVYWZgNdXWYtwQeKQ0=
Subject key identifier:   BE:4E:79:C4:2E:19:E7:2E:5D:2F:2E:9E:A1:F4:CA:22:4D:C3:B4:CF
Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8
Certificate issuer:       /CN=5A3AE20076D062C545A8A8573997926813E925D8
Certificate serial:       6480A6255EB5FF07F77D07541912BA50A7086CEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
Manifest number:          0250
Signing time:             Sun 25 Jan 2026 11:44:28 +0000
Manifest this update:     Sun 25 Jan 2026 11:39:28 +0000
Manifest next update:     Mon 26 Jan 2026 13:52:28 +0000
Files and hashes:         1: 5A3AE20076D062C545A8A8573997926813E925D8.crl (hash: bG4JxVP2vhqNEnRKd8V7QJ0PzC1pYw7IUgRwzr31nis=)
                          2: 323830343a356437343a3a2f33322d3438203d3e20323638393733.roa (hash: MsKHn0SiETNQZVMd+4wWyPuOBT80tvdac+Ej9lHHtR0=)
                          3: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (hash: 6W+sBJcJZ2b6bj5RsmyJFMfqEinjpbph4IeKP9qOa9U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl
                          rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:80:a6:25:5e:b5:ff:07:f7:7d:07:54:19:12:ba:50:a7:08:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8
        Validity
            Not Before: Jan 25 11:39:28 2026 GMT
            Not After : Jan 26 13:52:28 2026 GMT
        Subject: CN=BE4E79C42E19E72E5D2F2E9EA1F4CA224DC3B4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:04:5e:ab:78:e1:79:52:8f:83:21:09:ec:
                    bd:7e:fe:9c:57:3a:ae:d6:19:86:65:00:d8:4e:39:
                    21:04:9c:11:02:88:92:13:a3:e4:7b:bd:57:61:21:
                    21:ef:f1:b0:ca:b3:05:65:91:aa:33:99:ba:da:bc:
                    c6:ad:d6:57:c3:9e:82:90:df:fb:d2:6f:6a:d8:56:
                    26:58:cf:0d:ad:3a:2e:48:48:50:0a:b8:5d:f6:d3:
                    54:6d:58:59:27:90:07:d3:7a:ea:10:83:37:a1:0a:
                    56:3a:e6:f6:19:8b:8e:5c:7a:ab:54:46:0c:97:07:
                    dc:e1:9c:e4:0e:e7:4f:78:94:51:95:1b:f6:ba:92:
                    64:93:e8:42:c4:91:2b:5d:eb:48:0a:e0:ad:03:c5:
                    85:b9:c5:26:3e:42:0d:f3:69:b0:75:58:51:06:05:
                    e2:19:0b:b5:51:33:e6:8d:cd:b5:35:0c:26:b3:29:
                    fd:35:26:e1:3e:e8:0b:1d:f4:4b:28:77:4e:10:dd:
                    3b:fd:46:98:19:1c:55:60:0f:e2:92:ca:0e:16:b0:
                    3f:f9:e1:ae:b6:af:04:69:42:8f:a8:9f:cb:ba:6f:
                    06:ac:8e:f7:b2:59:e9:40:77:65:d0:a4:35:86:ff:
                    a4:b0:b3:ab:cb:f5:b4:7f:f2:87:28:b4:f6:d7:25:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4E:79:C4:2E:19:E7:2E:5D:2F:2E:9E:A1:F4:CA:22:4D:C3:B4:CF
            X509v3 Authority Key Identifier:
                keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:f6:32:ea:c8:0a:a0:88:2c:e6:5e:04:31:cc:4a:eb:1e:
         3a:ec:81:45:15:27:2e:ff:9c:36:ef:eb:59:86:16:a9:bd:14:
         44:fa:73:9f:eb:8c:8a:aa:fc:ee:2f:31:29:00:34:ac:a6:7c:
         2a:ec:d7:e6:72:93:93:6f:e7:6f:9e:fb:a5:a8:b4:6e:69:a0:
         52:60:e2:51:76:44:bd:30:a7:4f:ab:ae:b0:15:5a:66:ac:f4:
         58:ef:c1:4f:bf:7c:32:39:67:38:90:34:07:55:c3:df:a9:16:
         0c:a3:84:61:20:db:e8:ce:87:4f:c6:92:a1:c5:a4:68:4a:74:
         90:1d:0d:67:a0:7b:05:df:63:da:46:ab:61:fe:ef:62:c4:45:
         f6:e2:cf:08:74:42:70:82:58:ac:b3:5c:95:ab:f9:5a:93:94:
         15:b4:a0:6b:f9:f7:0a:0c:74:3a:2b:cd:f5:f6:59:2d:b3:33:
         b3:6e:d4:89:7d:f7:3e:4e:55:14:5e:48:c8:59:e4:a2:1c:e3:
         27:ac:a8:25:20:85:67:60:77:44:46:e8:01:2e:6b:73:69:5b:
         ed:18:4b:ea:4e:7b:64:8b:00:2a:62:4f:36:24:82:ce:a1:e7:
         f8:1c:f7:82:df:46:5b:c7:67:ec:02:e4:2c:6f:13:88:33:41:
         9c:d3:18:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZICmJV61/wf3fQdUGRK6UKcIbOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzQUUyMDA3NkQwNjJDNTQ1QThBODU3Mzk5NzkyNjgx
M0U5MjVEODAeFw0yNjAxMjUxMTM5MjhaFw0yNjAxMjYxMzUyMjhaMDMxMTAvBgNV
BAMTKEJFNEU3OUM0MkUxOUU3MkU1RDJGMkU5RUExRjRDQTIyNERDM0I0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkdwReq3jheVKPgyEJ7L1+/pxX
Oq7WGYZlANhOOSEEnBECiJITo+R7vVdhISHv8bDKswVlkaozmbravMat1lfDnoKQ
3/vSb2rYViZYzw2tOi5ISFAKuF3201RtWFknkAfTeuoQgzehClY65vYZi45ceqtU
RgyXB9zhnOQO5094lFGVG/a6kmST6ELEkStd60gK4K0DxYW5xSY+Qg3zabB1WFEG
BeIZC7VRM+aNzbU1DCazKf01JuE+6Asd9Esod04Q3Tv9RpgZHFVgD+KSyg4WsD/5
4a62rwRpQo+on8u6bwasjveyWelAd2XQpDWG/6Sws6vL9bR/8ocotPbXJU3ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvk55xC4Z5y5dLy6eofTKIk3DtM8wHwYDVR0j
BBgwFoAUWjriAHbQYsVFqKhXOZeSaBPpJdgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6
azcvMC81QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBM0FFMjAwNzZEMDYyQzU0
NUE4QTg1NzM5OTc5MjY4MTNFOTI1RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMC81
QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiMf2MurICqCILOZeBDHMSuseOuyBRRUnLv+cNu/rWYYWqb0URPpzn+uMiqr8
7i8xKQA0rKZ8KuzX5nKTk2/nb577pai0bmmgUmDiUXZEvTCnT6uusBVaZqz0WO/B
T798MjlnOJA0B1XD36kWDKOEYSDb6M6HT8aSocWkaEp0kB0NZ6B7Bd9j2karYf7v
YsRF9uLPCHRCcIJYrLNclav5WpOUFbSga/n3Cgx0OivN9fZZLbMzs27UiX33Pk5V
FF5IyFnkohzjJ6yoJSCFZ2B3REboAS5rc2lb7RhL6k57ZIsAKmJPNiSCzqHn+Bz3
gt9GW8dn7ALkLG8TiDNBnNMYWA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:03 2026 by rpki-client