This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
File:                     F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft (raw, json)
Hash identifier:          TnGDktkzPmod/Yx2F7eSaN2nSubmEpnrCrLca83LhPE=
Subject key identifier:   65:0D:07:02:13:FB:60:85:7D:C9:0C:E0:35:13:4E:12:22:8C:9D:74
Authority key identifier: F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D
Certificate issuer:       /CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
Certificate serial:       51BAA9C5F07DF569D4E1EDE0721E9FF4E35DAA30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
Manifest number:          0154
Signing time:             Sun 25 Jan 2026 14:27:55 +0000
Manifest this update:     Sun 25 Jan 2026 14:22:55 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:55 +0000
Files and hashes:         1: 323830343a393430633a3a2f33322d3438203d3e20323734383138.roa (hash: txs4qGVE6CFf1oe0D7Nr3lbJ5NrOYxnIQyBplIdS0Dk=)
                          2: F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl (hash: KY7qF5PSeVrUr70XwWqbn9MAsaTe8pbuzbRj2LP5krk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl
                          rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ba:a9:c5:f0:7d:f5:69:d4:e1:ed:e0:72:1e:9f:f4:e3:5d:aa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
        Validity
            Not Before: Jan 25 14:22:55 2026 GMT
            Not After : Jan 26 15:01:55 2026 GMT
        Subject: CN=650D070213FB60857DC90CE035134E12228C9D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:fb:6f:00:4f:43:c9:17:40:22:3b:a5:12:
                    bd:b4:8e:2f:d5:a4:a7:7d:48:dd:a4:91:d5:44:34:
                    1d:04:ec:d4:9e:05:b1:95:cf:97:61:39:92:fc:d9:
                    c6:99:9f:67:f2:cd:50:3d:d5:dc:3f:0c:73:65:47:
                    f4:88:fc:36:01:4f:3c:d9:eb:04:ba:d0:ec:cf:72:
                    83:7b:de:99:55:e5:3c:5c:9b:b1:99:c6:f5:7e:da:
                    79:64:af:ea:69:10:c5:48:30:64:68:a3:88:2b:f0:
                    fa:9e:24:f3:32:d0:d4:c7:f3:47:7c:23:3f:75:d6:
                    86:44:92:c1:fb:21:d1:85:67:86:fb:c6:33:e8:e1:
                    2f:da:58:05:fe:67:93:30:f3:87:7f:2f:d0:ea:cf:
                    12:e8:ee:39:c9:42:79:a0:ce:41:f8:98:a5:16:92:
                    22:01:f9:25:36:94:da:c7:d1:10:2b:ae:d5:46:42:
                    c9:a0:c8:eb:a2:83:53:c5:01:9e:54:2b:33:ef:28:
                    0c:b4:13:62:fe:fc:17:32:6c:4f:36:39:ca:18:04:
                    54:ff:85:d0:87:38:8b:e2:2d:bc:73:0e:a7:7e:c4:
                    71:0e:41:64:99:ae:da:a6:7d:8e:b2:03:49:f4:56:
                    5f:3f:b4:5f:72:92:86:4d:66:fd:98:c9:78:68:04:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:07:02:13:FB:60:85:7D:C9:0C:E0:35:13:4E:12:22:8C:9D:74
            X509v3 Authority Key Identifier:
                keyid:F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:14:14:b5:d3:51:53:ef:53:54:05:50:cd:37:7e:a6:fb:
         63:72:93:b9:1b:5c:15:5a:d8:1b:ef:39:d4:a5:b0:b2:0b:8a:
         37:71:09:46:58:da:80:1e:3f:9f:43:69:13:f5:ac:03:8a:41:
         cb:4c:cd:06:3a:8e:91:d2:04:7c:eb:b9:af:49:a4:2f:56:b8:
         dc:42:43:46:68:a6:a3:71:6b:4b:44:c7:2a:ec:a6:aa:11:15:
         49:87:1e:42:8e:ed:7f:e4:95:21:ff:7c:3d:03:93:a2:f0:9e:
         a0:20:26:56:b6:63:d7:0d:77:1b:0c:63:7e:a0:2a:3d:17:a9:
         2d:c5:a5:b9:25:eb:f5:bd:33:85:bc:ba:66:b1:4d:96:6b:72:
         e6:6d:41:72:2a:53:da:6a:25:85:fe:f2:bb:bc:59:30:25:e4:
         f6:80:5c:1c:2c:5b:e6:5d:b4:38:ec:7c:94:5f:28:44:92:98:
         ca:4b:5e:59:20:91:86:54:93:f2:ab:9e:53:72:80:34:2e:8b:
         49:8c:82:1c:1e:bd:f6:75:08:00:63:0b:96:fb:15:2d:4b:d1:
         ba:1a:46:21:cc:2a:cd:4d:ae:95:b7:3c:ec:4e:29:9a:a1:31:
         25:ef:2e:65:b6:4a:2f:34:af:13:03:7c:8e:54:18:83:37:8a:
         5d:89:be:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUbqpxfB99WnU4e3gch6f9ONdqjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFN0YzNzZFMEQwRUFGNTIxQUNERDVCM0JGMEM4NDQz
M0ZCM0E1RDAeFw0yNjAxMjUxNDIyNTVaFw0yNjAxMjYxNTAxNTVaMDMxMTAvBgNV
BAMTKDY1MEQwNzAyMTNGQjYwODU3REM5MENFMDM1MTM0RTEyMjI4QzlENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSPtvAE9DyRdAIjulEr20ji/V
pKd9SN2kkdVENB0E7NSeBbGVz5dhOZL82caZn2fyzVA91dw/DHNlR/SI/DYBTzzZ
6wS60OzPcoN73plV5Txcm7GZxvV+2nlkr+ppEMVIMGRoo4gr8PqeJPMy0NTH80d8
Iz911oZEksH7IdGFZ4b7xjPo4S/aWAX+Z5Mw84d/L9DqzxLo7jnJQnmgzkH4mKUW
kiIB+SU2lNrH0RArrtVGQsmgyOuig1PFAZ5UKzPvKAy0E2L+/BcybE82OcoYBFT/
hdCHOIviLbxzDqd+xHEOQWSZrtqmfY6yA0n0Vl8/tF9ykoZNZv2YyXhoBCJrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZQ0HAhP7YIV9yQzgNRNOEiKMnXQwHwYDVR0j
BBgwFoAU+efzduDQ6vUhrN1bO/DIRDP7Ol0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOYWFUZTNzOXJQa2dlb3VrclhpczUyNVRiWFhnRjl3OTF0Y2VFcUZy
Z3QvMC9GOUU3RjM3NkUwRDBFQUY1MjFBQ0RENUIzQkYwQzg0NDMzRkIzQTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RTdGMzc2RTBEMEVBRjUy
MUFDREQ1QjNCRjBDODQ0MzNGQjNBNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmhOYWFUZTNzOXJQa2dlb3VrclhpczUyNVRiWFhnRjl3OTF0Y2VFcUZyZ3QvMC9G
OUU3RjM3NkUwRDBFQUY1MjFBQ0RENUIzQkYwQzg0NDMzRkIzQTVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUB0UFLXTUVPvU1QFUM03fqb7Y3KTuRtcFVrYG+851KWwsguKN3EJRljagB4/
n0NpE/WsA4pBy0zNBjqOkdIEfOu5r0mkL1a43EJDRmimo3FrS0THKuymqhEVSYce
Qo7tf+SVIf98PQOTovCeoCAmVrZj1w13GwxjfqAqPRepLcWluSXr9b0zhby6ZrFN
lmty5m1BcipT2molhf7yu7xZMCXk9oBcHCxb5l20OOx8lF8oRJKYykteWSCRhlST
8queU3KANC6LSYyCHB699nUIAGMLlvsVLUvRuhpGIcwqzU2ulbc87E4pmqExJe8u
ZbZKLzSvEwN8jlQYgzeKXYm+KQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:41 2026 by rpki-client