This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
File:                     DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft (raw, json)
Hash identifier:          sMkn6p2hlYniohs7A5uc10llNfRAV8SdDIF6oU/11D0=
Subject key identifier:   7D:9A:87:E5:01:D9:E8:1E:BB:5E:9D:4D:B0:DA:96:DD:CB:CD:4C:7F
Authority key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Certificate issuer:       /CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Certificate serial:       4B493354BA5D6B5ABD8F7179EDCA8A167615EB54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
Manifest number:          0154
Signing time:             Sun 25 Jan 2026 01:00:21 +0000
Manifest this update:     Sun 25 Jan 2026 00:55:21 +0000
Manifest next update:     Mon 26 Jan 2026 02:42:21 +0000
Files and hashes:         1: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl (hash: dG8052GZcd//990Bcyi4Kct6NcLrf/w9SSdPimIesEk=)
                          2: 3137302e3135302e3230302e302f32322d3234203d3e20323635303338.roa (hash: +2p9wnelJvyIdVwZ5qUKRl86p9f5kfdKUAcjXUn447w=)
                          3: 323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (hash: Hf5yARcahJxd2qwBIlcKhy0tIV/SIDbTzFn9LXhXI0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:49:33:54:ba:5d:6b:5a:bd:8f:71:79:ed:ca:8a:16:76:15:eb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Validity
            Not Before: Jan 25 00:55:21 2026 GMT
            Not After : Jan 26 02:42:21 2026 GMT
        Subject: CN=7D9A87E501D9E81EBB5E9D4DB0DA96DDCBCD4C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:06:77:81:11:d4:61:3d:71:a5:40:09:17:
                    0e:61:68:81:7e:83:9c:37:a6:a9:fa:81:49:cc:19:
                    11:90:b9:68:31:67:40:53:03:98:39:c7:32:34:54:
                    94:72:20:64:b0:c0:40:97:45:37:f0:ea:dd:8b:e9:
                    e1:84:63:57:75:47:78:51:70:04:de:c9:0c:dd:5c:
                    27:56:79:23:cc:4a:94:15:f0:67:31:da:2f:44:07:
                    a3:3d:d9:c9:18:3e:1e:fb:77:fe:a4:8b:40:b6:59:
                    18:38:93:88:c8:b5:f8:20:74:41:de:20:db:bc:f0:
                    34:47:fc:84:f9:09:4c:f4:05:19:ad:05:2e:3c:04:
                    ab:3b:65:6f:23:47:bb:4b:5c:a0:0a:42:0b:3a:ae:
                    ce:90:95:52:b0:88:4d:0a:4b:f4:6a:62:3b:c0:b2:
                    37:c9:db:d7:45:ae:0d:a8:ad:00:4a:67:85:52:41:
                    ea:1f:d9:66:3b:ed:10:1f:1e:21:96:7e:8a:00:e7:
                    70:ce:86:f9:77:c3:44:12:2d:64:be:9f:9b:a4:52:
                    ae:74:f4:30:1b:e1:a7:91:c4:8e:8c:e7:94:33:f8:
                    6e:f2:8e:a0:c5:d6:fb:7c:8e:9a:ad:77:58:e8:12:
                    2a:6b:1b:c3:0a:b7:32:dc:05:51:0d:d4:0c:6c:d6:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:87:E5:01:D9:E8:1E:BB:5E:9D:4D:B0:DA:96:DD:CB:CD:4C:7F
            X509v3 Authority Key Identifier:
                keyid:DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:48:b0:60:af:f3:85:f5:e8:00:c8:eb:9c:45:57:1d:8a:94:
         fa:b6:38:63:74:c4:98:8c:cc:29:ca:e3:6a:3b:42:63:f3:8a:
         33:dd:07:56:2a:48:4e:93:c5:bc:7a:02:ab:28:ea:e0:0b:74:
         cc:9f:c4:76:14:91:5a:b1:a8:50:72:0c:cf:8c:08:45:f7:85:
         4a:3f:63:1b:4d:24:1d:18:17:dc:9d:5c:37:73:63:c8:9b:ab:
         94:76:94:e9:85:35:32:5e:84:50:10:9c:75:e2:b2:7c:75:05:
         c0:06:94:a0:8e:92:b0:8b:7d:27:5a:72:89:5b:bd:b5:cd:c1:
         ab:bb:dd:b5:fa:49:b2:cf:66:b6:6c:52:81:d3:c8:50:b5:eb:
         83:3c:8b:b9:94:ab:89:2e:9c:17:5b:ed:a3:29:b7:75:f9:2c:
         78:9d:b5:6c:10:ee:6c:96:0e:79:e9:ed:ff:03:f2:46:50:2b:
         43:59:b5:63:39:b2:88:f6:4c:1c:25:0e:09:e5:b9:b6:20:ed:
         79:aa:8c:e8:31:72:c5:2b:71:93:0f:3b:0e:f0:a5:fa:d0:84:
         63:b8:ea:c1:e6:46:5a:68:c0:52:7e:19:e9:27:d7:8d:68:93:
         ed:7b:c6:5d:c4:ba:8f:72:1c:58:b2:da:a5:84:c0:45:ae:52:
         58:40:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:15 2026 by rpki-client