This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
File:                     1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft (raw, json)
Hash identifier:          tfI8rGYZT8H6sqle63JdmbnV0Ers1O8mVV3ovaJqKuE=
Subject key identifier:   61:2E:1E:61:83:07:58:57:68:F8:AB:4D:38:B5:8E:4D:EB:69:B7:22
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       4255375A073F4A6E8AA75DCAE38AF909505DF9C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
Manifest number:          023A
Signing time:             Mon 26 Jan 2026 03:47:55 +0000
Manifest this update:     Mon 26 Jan 2026 03:42:55 +0000
Manifest next update:     Tue 27 Jan 2026 05:56:55 +0000
Files and hashes:         1: 323830343a366537633a3a2f33322d3438203d3e20323730363030.roa (hash: JYK/WP9Vk6MW3CYYUpIEVJ/Al4IQyYWxuhhf/X7sW3U=)
                          2: 323830343a366537633a3a2f33322d3332203d3e20323730363030.roa (hash: oHg0zNoIkBHqe0M8SwHQAuftsFQ+KS9yTQCClyjCi14=)
                          3: 323830343a366537633a3a2f33332d3333203d3e20323730363030.roa (hash: hFm4ML6uQUfIDnfqr0SQ+Yuk9BEZRW5t/U724pULVts=)
                          4: 3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa (hash: 3M+ECReB7EbOTGrbbQAf3gxWLfn7zo8GRPGtjx2yHUk=)
                          5: 323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa (hash: xfObI9tlswoAp13q7zbRR3aKYGL9KKOT8Dth3M+Ftfk=)
                          6: 1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl (hash: q37/zRjuiRAKnlSeO2Axo16vj45YPjXDB1TBpt+JGso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:55:37:5a:07:3f:4a:6e:8a:a7:5d:ca:e3:8a:f9:09:50:5d:f9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Jan 26 03:42:55 2026 GMT
            Not After : Jan 27 05:56:55 2026 GMT
        Subject: CN=612E1E618307585768F8AB4D38B58E4DEB69B722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:5d:b5:1e:4f:ea:96:ae:16:8a:00:74:ed:
                    ce:6b:39:96:f3:f6:34:60:42:cb:9c:04:17:ee:a2:
                    9a:9d:41:2c:58:c7:29:7d:fc:f2:98:4a:ba:54:e9:
                    79:a3:a8:4d:d4:cd:06:82:a1:51:31:dd:af:d7:f1:
                    b7:23:58:31:c0:e0:51:cb:48:09:66:9d:2b:8f:29:
                    54:e0:8c:0c:95:d8:6e:5d:9a:28:f8:05:c5:7d:7d:
                    21:e3:13:7b:e8:35:35:8a:33:40:d4:ad:c0:ee:0e:
                    3e:c7:2e:61:bf:a3:e0:d8:20:29:1e:34:51:31:2f:
                    a8:f0:90:74:86:97:50:2c:22:3e:f1:e1:62:5c:17:
                    cc:21:c8:71:33:3d:e9:96:f0:86:f7:de:c3:65:b3:
                    a5:49:36:6e:ed:31:9e:33:8b:3e:07:59:08:f0:31:
                    7f:4e:cf:b5:36:71:32:27:ea:b7:19:d4:a2:0c:2f:
                    a7:59:66:4b:e1:73:20:86:50:f0:64:cf:f6:4b:d5:
                    38:ce:82:98:bb:75:03:bc:b0:d3:67:ab:69:17:e0:
                    6d:03:d8:c6:e7:02:11:04:6d:80:99:d1:f4:50:4f:
                    cc:bd:c4:6e:de:e3:0b:3b:c5:2a:ef:60:24:3b:cc:
                    b0:1d:d2:da:b0:4a:1f:93:80:1a:dd:d3:56:6c:e7:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2E:1E:61:83:07:58:57:68:F8:AB:4D:38:B5:8E:4D:EB:69:B7:22
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:04:ee:28:42:28:c0:39:ac:4c:41:34:fc:e2:77:55:4c:a2:
         28:de:af:d5:f2:70:bb:cb:04:d9:da:be:d5:9b:3a:c3:c4:f9:
         2f:ad:d2:bd:e7:a6:ac:e1:e5:94:35:a0:c1:d1:39:86:29:4e:
         bb:2e:5f:29:0e:c9:58:ed:58:31:8c:ee:d3:b1:38:eb:49:19:
         ff:42:c2:b2:22:18:f9:c9:31:e1:00:11:e9:ad:22:1f:4b:ca:
         7b:8a:20:5e:e7:f7:0b:bd:b3:e6:de:f6:e7:6f:14:87:88:86:
         b6:76:d6:50:03:d7:a5:61:be:9c:99:5d:98:45:4e:90:9d:59:
         e8:df:67:ce:f8:14:b0:82:23:e1:5d:41:d3:7b:4c:a2:11:1c:
         b5:b1:32:66:a9:df:1e:6d:49:e9:d1:da:d9:2f:a4:8b:9e:cc:
         d1:64:68:4f:3c:47:59:10:04:5c:b6:e1:3b:2b:76:9d:ba:34:
         ab:68:8b:db:3d:46:ea:1a:4c:fb:35:ed:99:d1:31:2f:ae:1c:
         f1:0d:73:dc:45:52:e4:e7:f3:ae:2f:53:a4:ba:d6:78:71:c8:
         ca:55:bf:80:29:34:92:07:5a:71:60:90:0a:cc:3e:07:e6:66:
         a9:66:24:fc:75:62:40:f9:df:5b:c7:b4:49:a8:05:08:d8:32:
         d4:21:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:38 2026 by rpki-client