This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File:                     1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier:          hYnK96hTKnELEidw1oBEFUYsEVQDXt/DMFoRboq1od0=
Subject key identifier:   5B:FB:FA:A9:30:AB:C0:37:1D:B0:C6:C1:17:A6:98:5C:0E:A6:73:6F
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer:       /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial:       6B78FFA961BD4A31EF8AF795B2685D134359BC15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number:          D6
Signing time:             Sun 25 Jan 2026 10:13:41 +0000
Manifest this update:     Sun 25 Jan 2026 10:08:41 +0000
Manifest next update:     Mon 26 Jan 2026 12:12:41 +0000
Files and hashes:         1: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
                          2: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: LFOr95LFrCRM4ymbHzRWNugdqg0KrAl3J06qUyn9Lq4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:ff:a9:61:bd:4a:31:ef:8a:f7:95:b2:68:5d:13:43:59:bc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
        Validity
            Not Before: Jan 25 10:08:41 2026 GMT
            Not After : Jan 26 12:12:41 2026 GMT
        Subject: CN=5BFBFAA930ABC0371DB0C6C117A6985C0EA6736F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:07:e0:1f:03:e5:63:c3:0b:3b:22:23:44:
                    cb:b9:f5:25:70:dd:da:e8:f2:f8:51:ad:2d:c3:9a:
                    68:1f:f8:03:1f:15:71:53:20:07:98:02:86:79:72:
                    81:24:8b:ce:b3:36:00:15:40:58:96:6a:13:a3:df:
                    b7:de:76:78:95:d2:36:44:84:15:83:0d:31:fb:8a:
                    a3:42:66:b2:9e:74:7f:33:84:30:31:ef:bb:64:65:
                    97:a2:fc:78:32:77:4a:57:5a:a0:09:41:20:60:6a:
                    fa:30:3b:69:1c:c3:6e:13:4a:db:50:30:89:a2:ad:
                    eb:42:99:49:69:ae:eb:bb:23:a7:23:ad:00:31:55:
                    cd:84:7e:a5:85:fc:42:7f:07:e9:e4:55:03:21:9d:
                    80:f2:fc:42:70:ed:d1:1b:cc:2c:3f:f0:02:6d:8d:
                    a6:f9:c2:96:6b:50:3f:40:55:9c:68:b2:8d:1e:6a:
                    94:73:11:c5:1a:58:98:89:27:f7:bc:b8:98:b0:1c:
                    5e:e8:2f:03:89:12:c0:8b:a0:b8:af:b2:a6:b9:cd:
                    02:10:73:ac:fc:39:4d:70:f5:ed:a4:06:88:4d:34:
                    65:ef:3f:d9:ec:0b:0d:1d:84:93:e6:f3:31:00:c4:
                    10:f2:69:2b:b3:0b:3e:86:c9:b4:11:fa:22:ec:15:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:FA:A9:30:AB:C0:37:1D:B0:C6:C1:17:A6:98:5C:0E:A6:73:6F
            X509v3 Authority Key Identifier:
                keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:fe:72:2b:be:e9:fa:1f:51:cb:0b:a8:60:7f:b1:f8:87:
         a5:5d:10:93:73:58:54:9d:65:58:83:dc:45:58:b1:5d:8d:59:
         19:3c:c8:95:41:b1:45:18:48:bc:71:ba:e6:f3:42:5d:0e:cf:
         4f:41:8d:44:2e:2f:67:56:91:1c:6b:5a:9d:98:b9:83:99:e2:
         23:14:42:7e:0a:ad:3c:38:1d:c7:8c:07:c6:42:bb:99:d4:99:
         5b:07:0a:98:53:05:03:c0:bc:ab:27:54:81:06:c8:8a:e9:21:
         8a:17:01:ef:4d:94:32:4d:5e:71:e7:c6:af:5c:cd:62:b0:c6:
         0f:0c:af:1f:b5:be:35:b1:12:d4:c7:44:70:31:3e:b3:84:e2:
         5d:22:a2:af:f8:bc:4d:e0:36:c1:13:aa:74:6f:53:59:28:e7:
         ad:9e:3b:bc:6b:e3:60:b0:1e:15:ca:ea:03:0c:cb:97:5b:2d:
         20:d9:85:f4:40:4e:6d:e7:c8:6a:42:4c:d9:a2:16:88:1e:1d:
         dd:e9:45:15:5e:20:9c:d4:f4:68:9a:65:41:e5:31:81:e8:35:
         5d:c6:5d:d7:7e:f4:59:a4:16:b6:ac:09:35:be:bb:f7:cb:92:
         d4:1e:ad:41:13:2c:d8:d7:66:db:1f:9f:98:79:f0:ca:d1:f3:
         64:9a:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:34 2026 by rpki-client