This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
File:                     848EB2427D617D2F83AC459253A873E550C79E2D.mft (raw, json)
Hash identifier:          CbIWYSpN/ygBDDXInh85fXG6y+O0BKfGgUd42VaFNS0=
Subject key identifier:   69:20:D9:8D:05:C0:0A:E1:57:33:DA:D1:5C:EA:CB:34:74:82:42:48
Authority key identifier: 84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D
Certificate issuer:       /CN=848EB2427D617D2F83AC459253A873E550C79E2D
Certificate serial:       0D8C8F89988B0A592B5FD9F52AA1EC6BF61D768C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
Manifest number:          013A
Signing time:             Sat 24 Jan 2026 22:25:05 +0000
Manifest this update:     Sat 24 Jan 2026 22:20:05 +0000
Manifest next update:     Mon 26 Jan 2026 00:46:05 +0000
Files and hashes:         1: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: kVEUM0+/jn+r6zanlFczfAds1h+k32VTQiq8B3t1sbo=)
                          2: 323830343a346331303a3a2f33322d3438203d3e20323637333437.roa (hash: 6ojMn0OC0/Tkj1yL1J7bJQxkUBcfNAQWyiS2pbokNQ8=)
                          3: 848EB2427D617D2F83AC459253A873E550C79E2D.crl (hash: pPBQ6EExt70KFCC4PI8rkNXuTp5kbuTyCbINBfMGp+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl
                          rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 00:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:8f:89:98:8b:0a:59:2b:5f:d9:f5:2a:a1:ec:6b:f6:1d:76:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848EB2427D617D2F83AC459253A873E550C79E2D
        Validity
            Not Before: Jan 24 22:20:05 2026 GMT
            Not After : Jan 26 00:46:05 2026 GMT
        Subject: CN=6920D98D05C00AE15733DAD15CEACB3474824248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:ce:ce:4c:c1:1a:6b:7c:f2:6d:2f:65:7d:
                    8c:9d:7a:e3:79:21:1d:45:c0:23:cf:63:a8:8a:b6:
                    ed:f4:e0:05:9e:75:3f:e5:c1:57:22:53:02:ee:a0:
                    df:b5:58:30:74:59:85:a7:d0:a5:6b:f7:b0:75:2d:
                    e2:1a:45:dd:d9:95:4c:67:6d:e8:6c:58:ce:08:0c:
                    c8:2f:bb:63:a0:5e:c6:11:1f:30:7f:af:54:05:9a:
                    83:c9:7f:3b:19:4c:3e:e7:05:a5:a9:aa:5f:bb:95:
                    70:e0:02:bd:21:f1:a6:f8:93:14:7e:14:6f:56:c3:
                    2b:23:0c:3b:fd:04:6b:9b:9d:fd:ed:da:44:ec:66:
                    33:3d:5f:22:ce:f8:f0:75:2a:a9:be:95:5d:14:e3:
                    53:1b:38:18:48:3d:c3:a9:8d:36:6d:6b:3c:23:64:
                    32:98:7a:b2:6d:04:8f:1c:f4:a4:ff:79:fe:36:ca:
                    3c:3e:ac:6e:06:89:95:55:92:25:8e:ac:3b:8a:9e:
                    dc:fa:a5:ec:3c:c5:23:e9:ee:e2:f0:db:12:f3:6d:
                    6b:6b:88:c2:2d:37:9f:a2:f1:6c:33:7e:ea:d3:35:
                    db:b8:c4:be:c6:ed:e9:f5:4f:2a:23:17:80:c9:21:
                    18:83:d4:10:ba:28:59:5c:79:78:2f:8a:f0:dd:78:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:D9:8D:05:C0:0A:E1:57:33:DA:D1:5C:EA:CB:34:74:82:42:48
            X509v3 Authority Key Identifier:
                keyid:84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:ca:1a:29:5b:2b:6b:e8:e9:9a:ae:0c:39:16:5b:06:63:
         0a:c4:5e:49:1a:65:8d:44:6f:a4:7a:1a:db:17:4b:64:36:c3:
         de:4e:09:78:e5:7e:79:3a:52:ac:6a:da:b6:5b:76:29:13:a1:
         28:70:da:ee:97:8f:35:92:2b:9b:1c:45:00:e4:35:8b:0e:a1:
         62:cf:a1:07:10:0f:00:9a:66:14:7c:62:2a:c1:88:fa:c1:da:
         a7:b6:be:12:7f:6d:ab:e8:c6:05:1f:9f:eb:bd:99:fa:61:5e:
         d7:74:0e:fb:fe:d3:0e:45:13:ef:36:bf:76:34:ce:11:73:0f:
         cb:f5:65:9a:31:b9:7f:32:b7:65:86:91:fd:4b:5c:a0:cc:9e:
         b8:b3:85:a4:cf:6f:cf:12:e5:b8:15:4a:da:65:9a:dd:b6:a4:
         77:ff:5f:5c:55:4c:1d:54:43:2b:57:b3:61:df:c3:e3:64:b3:
         a8:98:0e:04:a4:23:e0:66:dc:3e:05:c9:d6:b3:5b:af:31:3f:
         a3:03:95:44:f3:19:56:bb:71:2b:fe:75:58:50:55:a0:43:3c:
         00:c0:be:34:bd:14:cc:05:12:57:ae:9f:42:8a:0f:ca:bc:25:
         00:af:4b:5f:aa:8b:61:45:01:e9:51:8e:27:a2:0f:a3:a0:87:
         ed:87:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:00:56 2026 by rpki-client