This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File:                     5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier:          0bCJkYbRqkN50KLspuyVCqiQY0sO41A5t0ZD87ETCQo=
Subject key identifier:   43:2B:1C:7D:B7:E9:73:70:C5:0C:A3:17:37:E8:56:F6:95:6C:95:AD
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer:       /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial:       6EE071D33EA39E1DBB81C4406FEEADA9F91B5D4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number:          036C
Signing time:             Sun 25 Jan 2026 17:09:25 +0000
Manifest this update:     Sun 25 Jan 2026 17:04:25 +0000
Manifest next update:     Mon 26 Jan 2026 20:12:25 +0000
Files and hashes:         1: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=)
                          2: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=)
                          3: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: P5d6r14x66qAyAPBGRr5hTAaNEHqTlP01MJcYIJFOkg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e0:71:d3:3e:a3:9e:1d:bb:81:c4:40:6f:ee:ad:a9:f9:1b:5d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
        Validity
            Not Before: Jan 25 17:04:25 2026 GMT
            Not After : Jan 26 20:12:25 2026 GMT
        Subject: CN=432B1C7DB7E97370C50CA31737E856F6956C95AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:f2:69:40:ff:a4:f1:5c:80:db:ad:8d:29:
                    45:4e:57:c6:67:3b:16:e8:eb:cb:0f:70:fe:40:b1:
                    3b:ae:c2:d2:53:a3:55:05:c4:b0:67:d1:56:4e:78:
                    c3:05:96:b9:65:88:c7:c7:49:db:e7:2c:59:be:b6:
                    ea:9a:89:b3:c6:2c:5d:e0:ae:a1:0c:c7:87:7e:65:
                    52:67:bc:d6:c8:12:89:6b:7a:47:2c:3f:8e:76:8a:
                    7c:2a:f4:b4:51:e1:8b:ce:3d:0d:82:08:e4:b3:f5:
                    50:13:9b:08:15:c1:86:4f:4b:d4:1d:43:85:a5:1c:
                    a3:2c:c9:84:89:bf:48:7f:47:a2:13:92:fb:a1:ba:
                    e0:2c:5a:5a:38:d2:78:f0:f9:72:10:5e:64:a8:58:
                    ac:27:0f:76:85:77:98:63:59:11:8d:f1:fb:7e:d2:
                    f7:c3:32:91:4b:8c:af:c0:8b:0e:0b:42:0d:d9:82:
                    1c:e9:6d:55:91:d9:89:03:2a:f4:57:43:9f:2c:66:
                    23:ef:f4:46:a5:5e:aa:b9:af:ba:9f:f2:0f:7f:02:
                    62:1b:e6:45:15:74:ca:34:08:06:f8:3f:24:38:f0:
                    6a:a2:1b:66:f3:a9:98:11:68:33:a3:a3:1d:6f:b0:
                    e7:47:3a:07:ab:ec:ca:7e:f3:bb:8b:1d:ad:1a:a3:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:1C:7D:B7:E9:73:70:C5:0C:A3:17:37:E8:56:F6:95:6C:95:AD
            X509v3 Authority Key Identifier:
                keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:46:84:a8:ae:87:55:f7:a5:77:90:c3:8c:6f:8f:47:63:
         ed:42:fb:2d:79:45:95:6a:a6:77:33:2c:ee:2e:49:8c:0e:40:
         9c:10:42:55:00:8c:5c:ff:50:7f:8f:f0:86:5a:08:7d:bf:57:
         90:f0:76:64:45:2f:27:ba:cb:38:42:0c:3a:3b:7a:dd:ae:37:
         4c:95:91:a0:8a:bd:19:32:ca:fd:2d:68:1b:3e:27:e0:17:04:
         da:ef:ac:d6:eb:20:09:88:8d:a1:fa:55:a8:ce:31:93:49:d8:
         cb:64:0f:a3:f1:e3:74:6f:3f:60:a7:03:75:2b:7f:59:50:35:
         00:c9:f0:44:d9:ff:dc:92:aa:6f:69:e0:75:8e:60:6b:6d:9d:
         76:6c:70:5f:e9:e6:f3:cb:14:0b:2c:e2:49:77:f6:01:8e:1a:
         78:33:ff:02:37:59:81:e7:bb:0c:6a:e2:99:53:9b:f0:33:62:
         65:b1:41:e9:90:3d:f4:bc:40:7c:b0:41:6d:ce:45:43:a4:96:
         8b:56:31:1d:de:bf:a1:bb:4c:6e:dc:10:0d:3a:68:05:68:1c:
         0a:6c:9d:e4:4e:bb:05:7d:93:38:b0:07:7c:90:03:3a:dd:9e:
         f6:c7:14:85:45:6b:3d:eb:d9:f6:30:6d:ea:5d:52:86:d1:c1:
         8b:05:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:29:14 2026 by rpki-client