This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
File:                     0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json)
Hash identifier:          IcAFwlQONorjx00Gc8E7G2x17cM2PWXViV5p60HOPoQ=
Subject key identifier:   EB:83:B6:76:D5:5C:20:29:71:29:6F:BE:89:D1:69:BD:B5:BC:97:AA
Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB
Certificate issuer:       /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
Certificate serial:       20C112312BAA00A0157AAD2AAC58B37BCA5D3ADA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
Manifest number:          036C
Signing time:             Sun 25 Jan 2026 09:18:10 +0000
Manifest this update:     Sun 25 Jan 2026 09:13:10 +0000
Manifest next update:     Mon 26 Jan 2026 09:22:10 +0000
Files and hashes:         1: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: INPiXsB0H+C3ZjieHe2vINI3cR+Rq/zIurDcm5qO4Sw=)
                          2: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=)
                          3: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl
                          rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c1:12:31:2b:aa:00:a0:15:7a:ad:2a:ac:58:b3:7b:ca:5d:3a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
        Validity
            Not Before: Jan 25 09:13:10 2026 GMT
            Not After : Jan 26 09:22:10 2026 GMT
        Subject: CN=EB83B676D55C202971296FBE89D169BDB5BC97AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:3f:dc:b0:46:4c:26:9b:1b:7f:41:72:8f:
                    2c:ec:55:d4:26:99:3a:20:65:02:dc:ef:51:ab:f8:
                    a4:11:73:41:13:f7:b1:82:4e:d1:2a:ca:74:bf:36:
                    95:4d:81:0d:bf:09:c5:60:40:3e:9c:3b:42:b3:e8:
                    ca:8d:c6:7d:74:c6:d6:42:59:eb:0a:4a:db:d5:94:
                    34:e9:50:e2:0a:98:27:ac:87:36:df:7f:ca:8a:49:
                    00:1d:a6:3e:ac:dd:a7:b5:ea:8d:69:d0:61:59:d2:
                    58:4e:90:c1:77:74:7e:d8:27:38:d2:26:fd:64:4c:
                    31:16:14:3c:ee:8e:22:59:b1:26:fc:d7:c1:96:93:
                    24:49:77:5f:a0:64:ba:2f:fc:5f:6e:15:b0:df:cd:
                    0c:76:6b:e1:89:69:17:f0:65:7e:bd:5c:66:58:20:
                    80:4c:c4:56:23:53:85:71:a5:49:e8:1a:75:3a:d4:
                    a6:ea:2f:ba:78:9e:83:59:c3:fe:17:5e:90:26:b3:
                    5a:8c:65:b8:fc:35:1e:fa:c7:b7:72:de:ab:9e:12:
                    a7:8c:34:9b:57:f0:ad:b0:33:3f:b5:28:fd:4c:fa:
                    43:31:c1:86:0c:0b:45:11:0b:f4:87:03:ff:54:f4:
                    ac:96:90:f0:ee:b8:47:f1:f4:ec:0c:e7:82:a6:db:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:83:B6:76:D5:5C:20:29:71:29:6F:BE:89:D1:69:BD:B5:BC:97:AA
            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:c9:12:87:c6:59:fd:70:b4:ef:65:30:99:a6:03:e8:77:
         f1:7e:d3:31:c1:86:9a:e7:a9:48:66:86:3d:24:87:b8:ea:58:
         ea:57:ac:1e:1f:0f:8e:ba:4a:53:f5:0f:6e:d5:d4:fc:2d:b3:
         02:75:98:50:8c:d6:7b:15:22:54:04:a3:b0:9b:23:f1:f2:b5:
         c2:09:51:d4:c4:b8:22:0b:fc:8b:de:1d:8a:4a:3b:57:84:d3:
         06:d2:82:f9:cd:ce:ad:90:a0:98:7c:c4:94:5a:cf:67:7b:6f:
         69:14:75:66:77:11:96:a8:b4:3d:e6:0e:ed:2e:af:10:7b:7d:
         c0:4d:27:e8:a8:ed:65:3b:27:44:4a:4b:09:59:f5:c6:8a:90:
         41:a0:c7:f4:44:a3:b8:ee:84:0a:a0:99:8e:4b:de:a7:66:8e:
         85:bb:fc:5e:68:78:35:93:52:e5:31:4b:6c:04:7f:bd:66:83:
         b8:9a:1e:67:9a:c8:58:62:06:b5:48:79:00:2e:88:af:9d:a5:
         cf:e8:3f:e3:59:4b:ff:28:b2:34:9b:82:79:d2:60:a4:d5:cc:
         43:56:19:71:11:ae:01:50:4f:1b:c4:6c:04:48:70:5c:a4:79:
         81:a3:09:fb:e8:f1:6b:f2:99:19:d7:a3:05:6e:67:db:bc:03:
         05:73:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:54 2026 by rpki-client