This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
File:                     987C49173148EC0A164D79BE3F0B7F94AF367573.mft (raw, json)
Hash identifier:          KkdVkPYseVA80phYRkwjP0Uzq9KJF315IeeAuh4Udlk=
Subject key identifier:   DA:8F:73:F1:CD:22:83:AA:57:53:6D:FA:41:40:B0:C4:D3:5C:A1:F4
Authority key identifier: 98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73
Certificate issuer:       /CN=987C49173148EC0A164D79BE3F0B7F94AF367573
Certificate serial:       7C5F4650E8423AB5332548A7193E4220DD6FB6EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
Manifest number:          5C
Signing time:             Sun 25 Jan 2026 17:43:53 +0000
Manifest this update:     Sun 25 Jan 2026 17:38:53 +0000
Manifest next update:     Mon 26 Jan 2026 21:31:53 +0000
Files and hashes:         1: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (hash: XIGTCoQg/BSob8oqo96n3uBMyrck0rCAY0jz87O7OUY=)
                          2: 987C49173148EC0A164D79BE3F0B7F94AF367573.crl (hash: jLN2CcfXwqJiQaWm+ATuqVHNm8NgztFjBGBDwBs6HUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl
                          rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:46:50:e8:42:3a:b5:33:25:48:a7:19:3e:42:20:dd:6f:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C49173148EC0A164D79BE3F0B7F94AF367573
        Validity
            Not Before: Jan 25 17:38:53 2026 GMT
            Not After : Jan 26 21:31:53 2026 GMT
        Subject: CN=DA8F73F1CD2283AA57536DFA4140B0C4D35CA1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:cc:c6:a0:ea:56:c0:b6:28:68:8e:41:26:
                    a1:31:d8:37:bf:67:75:08:28:28:bc:d6:f1:61:4e:
                    89:bd:8e:b3:87:c8:24:dc:a0:c5:72:6a:6f:1a:b6:
                    ee:32:69:99:7d:a6:ec:53:bd:a3:ec:fb:d9:53:0a:
                    2a:4c:d2:c1:5e:b5:db:68:7c:5f:03:fe:7c:f0:d6:
                    3b:e8:cc:d7:61:8f:80:dd:a5:0f:4b:b0:bc:7b:a0:
                    70:8f:60:ee:d1:d8:d1:a5:01:5e:61:d6:2f:41:34:
                    59:a2:43:c3:55:60:fe:11:a8:ce:67:16:25:64:fc:
                    23:4b:18:b9:25:ce:2e:c0:00:c7:0b:38:d8:1b:9b:
                    57:73:2b:9b:0f:27:e9:e9:b0:02:52:3e:02:5f:ee:
                    b2:2f:fe:b9:62:2c:67:da:78:ca:76:e8:40:ac:b8:
                    d5:36:20:37:e1:e6:13:0a:aa:5c:3c:54:25:a0:db:
                    60:79:db:eb:60:1c:04:03:be:36:48:73:7d:bc:23:
                    ea:9c:38:89:fd:02:1e:a4:ac:5b:14:0c:c2:ae:7b:
                    9a:51:b3:8b:b8:69:a2:1b:17:20:49:c7:21:78:45:
                    23:cd:f8:34:53:f0:ea:ed:3b:6d:12:9b:c0:52:1c:
                    4e:94:8c:5e:ea:f8:17:06:92:b0:f4:24:90:86:8e:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:73:F1:CD:22:83:AA:57:53:6D:FA:41:40:B0:C4:D3:5C:A1:F4
            X509v3 Authority Key Identifier:
                keyid:98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:d8:b6:de:97:a4:88:35:25:e9:7f:8a:bd:87:0e:3c:38:
         ed:b6:3b:73:d7:a9:75:cb:f3:3f:3e:72:4f:d8:21:15:39:f9:
         fd:8d:a9:91:a1:15:76:8b:1e:10:a5:7b:78:c3:6e:fb:df:99:
         93:b6:9b:65:5c:ff:28:3b:dc:9c:12:9a:c7:1f:8a:38:6f:1a:
         40:74:fd:da:1c:f2:a9:33:c2:75:06:c7:7e:d3:f3:cd:88:1c:
         d4:c9:6c:9c:f7:de:8a:fb:43:c3:19:42:39:e3:5e:02:12:b9:
         00:71:93:ec:7b:82:3d:5c:0f:f0:dd:f5:9c:d0:29:ab:46:12:
         d8:81:a9:a6:d8:fa:5e:d7:78:a5:35:97:4a:5e:51:48:e7:f9:
         2a:67:6e:dd:66:54:01:ee:f6:8f:2a:5a:c9:8f:fd:08:b4:09:
         be:d0:0b:91:35:76:c4:02:c7:ab:8e:5b:d8:40:c5:ab:b0:76:
         bd:a9:08:bb:63:79:21:d8:57:ad:90:01:e3:1d:35:04:d2:61:
         b4:ec:c0:9f:ca:12:4b:41:dd:0b:9c:ad:ef:56:be:fd:b4:b3:
         4b:27:dd:46:53:cf:34:ca:da:8a:e8:77:0f:c4:3b:d4:6d:91:
         88:f9:33:89:e5:bc:ad:b6:95:7d:fb:35:2d:e5:1d:cc:01:f6:
         02:8a:a3:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfF9GUOhCOrUzJUinGT5CIN1vtuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg3QzQ5MTczMTQ4RUMwQTE2NEQ3OUJFM0YwQjdGOTRB
RjM2NzU3MzAeFw0yNjAxMjUxNzM4NTNaFw0yNjAxMjYyMTMxNTNaMDMxMTAvBgNV
BAMTKERBOEY3M0YxQ0QyMjgzQUE1NzUzNkRGQTQxNDBCMEM0RDM1Q0ExRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kszGoOpWwLYoaI5BJqEx2De/
Z3UIKCi81vFhTom9jrOHyCTcoMVyam8atu4yaZl9puxTvaPs+9lTCipM0sFetdto
fF8D/nzw1jvozNdhj4DdpQ9LsLx7oHCPYO7R2NGlAV5h1i9BNFmiQ8NVYP4RqM5n
FiVk/CNLGLklzi7AAMcLONgbm1dzK5sPJ+npsAJSPgJf7rIv/rliLGfaeMp26ECs
uNU2IDfh5hMKqlw8VCWg22B52+tgHAQDvjZIc328I+qcOIn9Ah6krFsUDMKue5pR
s4u4aaIbFyBJxyF4RSPN+DRT8OrtO20Sm8BSHE6UjF7q+BcGkrD0JJCGjrObAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2o9z8c0ig6pXU236QUCwxNNcofQwHwYDVR0j
BBgwFoAUmHxJFzFI7AoWTXm+Pwt/lK82dXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFq
SzcvMC85ODdDNDkxNzMxNDhFQzBBMTY0RDc5QkUzRjBCN0Y5NEFGMzY3NTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4N0M0OTE3MzE0OEVDMEEx
NjRENzlCRTNGMEI3Rjk0QUYzNjc1NzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFqSzcvMC85
ODdDNDkxNzMxNDhFQzBBMTY0RDc5QkUzRjBCN0Y5NEFGMzY3NTczLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArqnYtt6XpIg1Jel/ir2HDjw47bY7c9epdcvzPz5yT9ghFTn5/Y2pkaEVdose
EKV7eMNu+9+Zk7abZVz/KDvcnBKaxx+KOG8aQHT92hzyqTPCdQbHftPzzYgc1Mls
nPfeivtDwxlCOeNeAhK5AHGT7HuCPVwP8N31nNApq0YS2IGpptj6Xtd4pTWXSl5R
SOf5Kmdu3WZUAe72jypayY/9CLQJvtALkTV2xALHq45b2EDFq7B2vakIu2N5IdhX
rZAB4x01BNJhtOzAn8oSS0HdC5yt71a+/bSzSyfdRlPPNMraiuh3D8Q71G2RiPkz
ieW8rbaVffs1LeUdzAH2AoqjIg==
-----END CERTIFICATE-----