This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
File:                     C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft (raw, json)
Hash identifier:          /sL3TK8lmCMsYvdVlzQiXQPbgzkcH9JQPEDkYaGtOGA=
Subject key identifier:   D2:80:D4:1D:07:22:33:2B:7F:6B:85:DF:CE:2E:07:AF:0F:63:24:F5
Authority key identifier: C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD
Certificate issuer:       /CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
Certificate serial:       09C3A75D9403D102D9495171FA15C799D2F94952
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
Manifest number:          D2
Signing time:             Sun 25 Jan 2026 12:33:37 +0000
Manifest this update:     Sun 25 Jan 2026 12:28:37 +0000
Manifest next update:     Mon 26 Jan 2026 13:52:37 +0000
Files and hashes:         1: 3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (hash: KKYm/55pCGpbLWeQwnRn/GBwiJl0ocNiQJGRsO01YUg=)
                          2: 323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (hash: LPPl3TiuccnQnw15BF2O5c80XCo9bntztuQLh81UT94=)
                          3: C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl (hash: u3HuH/n22lqmZbC2itIrL2kw/ejYGVCY91cK7gXu5VU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:a7:5d:94:03:d1:02:d9:49:51:71:fa:15:c7:99:d2:f9:49:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
        Validity
            Not Before: Jan 25 12:28:37 2026 GMT
            Not After : Jan 26 13:52:37 2026 GMT
        Subject: CN=D280D41D0722332B7F6B85DFCE2E07AF0F6324F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:f1:1b:ff:5b:05:32:56:f6:d9:97:a4:2e:
                    db:75:30:1a:70:c1:a3:6f:1f:d2:16:1c:02:7a:f8:
                    9b:46:44:6a:0c:fe:64:bc:47:ba:24:51:24:74:b0:
                    a0:b5:1e:e9:d5:0b:6e:a7:16:bc:20:95:d8:0b:06:
                    30:40:ac:e6:ac:83:0b:75:56:1d:17:dd:36:32:43:
                    fb:06:9c:ec:39:bc:2c:36:eb:3b:39:b5:f9:99:7c:
                    d2:36:59:8c:59:4c:46:60:fb:19:fa:63:05:74:40:
                    2a:56:de:d6:a8:89:23:e5:1a:29:ef:01:c7:5f:57:
                    a2:8c:0c:36:4d:e1:bc:79:a3:4a:d4:79:53:db:8b:
                    02:e9:69:58:e8:c8:2e:d4:85:c8:02:bb:06:c4:2c:
                    67:f9:34:f5:5b:fe:9d:c5:fb:bf:b0:22:36:d6:46:
                    61:83:eb:ff:37:39:a1:61:23:6d:d6:bf:7f:b3:b5:
                    66:b0:93:0e:59:6d:cb:10:da:4a:46:7f:b0:35:fb:
                    27:03:3d:bf:41:1d:83:60:ad:eb:c9:cf:a2:a4:8e:
                    d7:7e:68:8b:e6:03:ce:9a:a4:3b:1e:25:a6:22:4c:
                    00:ef:f7:8e:db:34:64:97:41:3d:85:b0:e3:81:57:
                    37:1f:be:9a:d8:46:dd:0c:c4:3d:b6:84:ca:81:83:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:D4:1D:07:22:33:2B:7F:6B:85:DF:CE:2E:07:AF:0F:63:24:F5
            X509v3 Authority Key Identifier:
                keyid:C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:47:78:db:eb:ab:e2:a6:03:28:db:ee:f9:d8:ff:20:f2:
         44:02:2a:75:ae:f8:b3:6b:01:ef:3c:52:dd:91:18:d6:0f:b4:
         6f:bd:fb:14:36:af:99:84:5e:0f:99:7a:16:03:9a:46:69:1e:
         32:b0:52:fa:59:84:c7:7f:51:65:0e:1b:89:50:09:9e:00:b1:
         b8:89:82:e9:bd:09:f1:2c:b2:06:a0:77:42:7f:99:4d:0a:56:
         1f:9e:20:11:6a:96:b4:7f:fc:61:15:a9:f9:af:7d:57:20:8c:
         a0:d3:06:2d:8e:f3:2f:b4:75:1a:d6:f4:15:60:95:e1:b5:dc:
         c4:21:b3:1f:22:fb:dc:31:17:8d:d3:e4:29:e6:5f:50:a1:9d:
         61:69:95:2a:5b:be:7c:28:9e:95:2c:13:4d:b3:2d:f3:fe:2a:
         f2:9c:64:f1:a0:9a:4d:e5:54:25:97:a9:9a:0d:e1:ec:b2:6f:
         43:da:2a:e4:7d:6e:ad:31:b6:cf:39:a2:36:d1:8e:18:17:c6:
         e8:93:ad:9d:32:22:99:64:9a:1d:87:bb:24:4a:e8:27:e6:c3:
         de:d5:0d:63:31:dc:c7:ff:95:9a:c8:12:de:be:b0:e5:40:73:
         cc:d4:29:34:e7:92:6c:9e:c0:3a:52:f6:cd:32:20:16:9e:5c:
         ef:d1:2c:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCcOnXZQD0QLZSVFx+hXHmdL5SVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVFM0Q2QzBBMDJBMEVFM0JEMDcwMkQ0MTM4MjlCQzE0
ODdBNDVBRDAeFw0yNjAxMjUxMjI4MzdaFw0yNjAxMjYxMzUyMzdaMDMxMTAvBgNV
BAMTKEQyODBENDFEMDcyMjMzMkI3RjZCODVERkNFMkUwN0FGMEY2MzI0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hPEb/1sFMlb22ZekLtt1MBpw
waNvH9IWHAJ6+JtGRGoM/mS8R7okUSR0sKC1HunVC26nFrwgldgLBjBArOasgwt1
Vh0X3TYyQ/sGnOw5vCw26zs5tfmZfNI2WYxZTEZg+xn6YwV0QCpW3taoiSPlGinv
AcdfV6KMDDZN4bx5o0rUeVPbiwLpaVjoyC7UhcgCuwbELGf5NPVb/p3F+7+wIjbW
RmGD6/83OaFhI23Wv3+ztWawkw5ZbcsQ2kpGf7A1+ycDPb9BHYNgrevJz6Kkjtd+
aIvmA86apDseJaYiTADv947bNGSXQT2FsOOBVzcfvprYRt0MxD22hMqBg1iFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0oDUHQciMyt/a4Xfzi4Hrw9jJPUwHwYDVR0j
BBgwFoAUxePWwKAqDuO9BwLUE4KbwUh6Ra0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1
aTYvMC9DNUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RTNENkMwQTAyQTBFRTNC
RDA3MDJENDEzODI5QkMxNDg3QTQ1QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1aTYvMC9D
NUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInhHeNvrq+KmAyjb7vnY/yDyRAIqda74s2sB7zxS3ZEY1g+0b737FDavmYRe
D5l6FgOaRmkeMrBS+lmEx39RZQ4biVAJngCxuImC6b0J8SyyBqB3Qn+ZTQpWH54g
EWqWtH/8YRWp+a99VyCMoNMGLY7zL7R1Gtb0FWCV4bXcxCGzHyL73DEXjdPkKeZf
UKGdYWmVKlu+fCielSwTTbMt8/4q8pxk8aCaTeVUJZepmg3h7LJvQ9oq5H1urTG2
zzmiNtGOGBfG6JOtnTIimWSaHYe7JEroJ+bD3tUNYzHcx/+VmsgS3r6w5UBzzNQp
NOeSbJ7AOlL2zTIgFp5c79Es+A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:50 2026 by rpki-client