This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          6BzuKLLA406YGUDN9oidMAKfOxFOFGXtfn+C/E8/AJ4=
Subject key identifier:   D8:1A:12:71:48:15:4B:46:57:D7:AA:89:83:F1:93:21:DD:2F:4B:C9
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       0D3DD9DF388746872ACB61BCBD234A232B2DAE39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          010E
Signing time:             Sun 25 Jan 2026 05:30:19 +0000
Manifest this update:     Sun 25 Jan 2026 05:25:19 +0000
Manifest next update:     Mon 26 Jan 2026 08:14:19 +0000
Files and hashes:         1: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=)
                          2: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: xC3yKLwzOtQJ1KoqrysqeFZBT8iKADYQW2eFvOQ04HY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3d:d9:df:38:87:46:87:2a:cb:61:bc:bd:23:4a:23:2b:2d:ae:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Jan 25 05:25:19 2026 GMT
            Not After : Jan 26 08:14:19 2026 GMT
        Subject: CN=D81A127148154B4657D7AA8983F19321DD2F4BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:38:b4:e6:af:11:7a:45:43:f6:2a:5e:91:
                    2a:a4:a0:b4:c2:61:77:c6:2e:dd:4f:69:d9:b2:86:
                    74:b1:63:7f:45:a8:12:7c:0b:05:bb:2e:89:27:ee:
                    3a:f3:36:f2:c6:21:bc:2f:c8:e9:90:57:b0:0e:ff:
                    32:b2:bf:56:07:99:a1:8f:e8:11:2b:af:13:89:62:
                    b1:ba:68:f8:0a:9b:61:5b:7b:3d:21:6f:99:e7:43:
                    45:3a:06:3c:1b:dd:6a:71:e4:f3:ac:ab:b3:16:01:
                    41:4d:67:c2:cb:ef:83:1a:ca:f9:57:05:22:b3:74:
                    bc:44:e7:8a:7d:51:a4:5c:b5:ac:89:53:7a:ab:75:
                    20:d9:32:63:8e:bf:0a:07:a8:09:71:1e:2d:31:9a:
                    ef:be:17:fc:c0:4a:32:38:57:0a:96:46:5f:8c:18:
                    bf:12:8d:e2:0f:e3:6c:b0:3a:c1:88:4e:cc:b1:d6:
                    f0:87:66:b2:3a:96:99:53:a8:03:36:46:40:44:de:
                    6a:af:72:a7:4e:0a:16:f3:79:ee:9e:c5:8f:68:fb:
                    54:61:7f:1b:9e:dc:41:8d:44:93:1c:3d:8c:14:1c:
                    64:44:38:eb:a2:73:20:35:54:09:a8:f4:22:8a:c8:
                    ab:66:00:59:af:91:34:b4:85:b3:b6:18:9a:83:ad:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1A:12:71:48:15:4B:46:57:D7:AA:89:83:F1:93:21:DD:2F:4B:C9
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:f9:f8:78:a6:5d:e2:9b:3c:48:dd:ef:3f:0d:a7:ba:16:
         10:32:42:e3:d4:af:9b:63:c4:3e:9a:e3:9e:41:8f:b8:bf:66:
         a9:bb:6c:74:e3:14:73:55:50:97:de:74:16:98:e5:16:48:3a:
         19:ca:23:3f:91:2d:9c:ec:e1:3e:40:1e:96:9b:51:a8:39:55:
         7e:1e:5f:00:b0:6b:dd:96:58:0c:5e:1d:2b:e7:c9:24:a3:7a:
         19:fe:67:fc:fb:35:ef:2f:33:72:60:ed:62:e8:9b:22:68:41:
         04:83:d5:03:7d:ab:2e:97:72:cb:5d:09:8b:ef:17:2f:88:37:
         42:b2:ee:e9:5a:54:1b:05:cb:87:89:dc:3f:a8:bb:35:58:d0:
         dd:0f:44:c2:51:81:ed:c0:12:6e:e2:6c:28:78:46:1d:39:76:
         6a:e9:8b:bc:9a:3e:98:c3:c9:01:a9:cf:f6:9f:d8:31:03:8c:
         24:ef:39:1a:00:4a:50:3f:0c:bb:be:c3:0a:24:72:c9:c3:24:
         e4:4c:cf:b9:a2:e8:b6:92:c1:6b:23:f0:e0:34:41:a3:54:ff:
         1c:c2:ff:16:91:fc:0a:b7:2d:80:ee:1c:3d:84:b8:88:db:95:
         d8:01:c3:10:ec:2d:28:d8:f3:66:65:8d:49:11:27:42:18:14:
         d4:5b:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----