This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
File:                     0F8527D7B78AAF3D805B156085B133DC25F008C2.mft (raw, json)
Hash identifier:          CEAftRXLwJojTN9CPtKbyBmbQLDlcH2rXYEAc9TqL5U=
Subject key identifier:   4B:43:5C:0E:BB:67:7D:DD:A2:38:2F:7A:14:FE:33:2D:BA:D5:E0:40
Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
Certificate issuer:       /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Certificate serial:       1BF474C5336F66EDE64D62C6F5132D83143BF7C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
Manifest number:          036F
Signing time:             Sun 25 Jan 2026 10:17:54 +0000
Manifest this update:     Sun 25 Jan 2026 10:12:54 +0000
Manifest next update:     Mon 26 Jan 2026 13:50:54 +0000
Files and hashes:         1: 0F8527D7B78AAF3D805B156085B133DC25F008C2.crl (hash: 5VyPmS5AsN2mL7u6fjubSIzY/dKKxDmIVO769ELf3hE=)
                          2: 34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa (hash: N9grxltOROc+ux6E/qeZmK2RCXheOYXSNWp+YJl41vA=)
                          3: 323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (hash: mCi58gE6mto4l20v0MTk29C3Pqml+EIUm2zKqhd4tDY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl
                          rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f4:74:c5:33:6f:66:ed:e6:4d:62:c6:f5:13:2d:83:14:3b:f7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
        Validity
            Not Before: Jan 25 10:12:54 2026 GMT
            Not After : Jan 26 13:50:54 2026 GMT
        Subject: CN=4B435C0EBB677DDDA2382F7A14FE332DBAD5E040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:d0:26:91:4c:30:7a:a0:31:52:c1:09:16:
                    0f:f8:44:0b:da:a5:7c:3e:1f:62:28:fb:e9:46:c7:
                    ce:6f:54:01:8b:88:62:a4:6d:15:74:28:2c:a4:32:
                    1c:d4:ba:05:72:8c:24:b8:46:34:9e:64:54:2a:2f:
                    6d:b5:ee:9d:ea:49:f0:33:2e:b2:66:2e:fb:2c:67:
                    06:24:a5:e3:53:3a:95:df:08:47:de:1f:43:74:63:
                    3d:86:b5:88:13:0f:d6:63:b1:36:1f:21:19:70:e6:
                    2f:f8:e8:ee:d1:f3:0c:c3:6b:1d:8f:e5:e9:e3:bc:
                    6a:e4:f4:5f:34:dc:df:42:d2:8c:4f:8e:fb:62:0c:
                    fc:3e:e7:68:6d:ff:00:33:33:1b:09:ce:dc:93:d4:
                    f9:db:6f:53:9c:2f:d4:2e:e6:cc:b4:43:4e:70:ea:
                    03:3b:c6:bd:f3:e9:07:09:cd:f6:f9:dd:83:49:4f:
                    a0:57:bc:b8:50:9f:40:04:4a:7f:13:df:ea:a8:6c:
                    85:af:79:84:83:a6:3d:41:b1:3c:88:0f:f4:3e:70:
                    50:c4:7c:4a:90:dc:be:6c:5c:bc:c3:57:f8:94:92:
                    d7:19:b9:9f:27:3d:66:c0:97:dd:2c:71:e2:b9:9f:
                    ef:0d:6e:1a:c2:86:8c:a4:ff:94:7f:3b:3b:15:f4:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:43:5C:0E:BB:67:7D:DD:A2:38:2F:7A:14:FE:33:2D:BA:D5:E0:40
            X509v3 Authority Key Identifier:
                keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:ab:c0:b7:ae:49:0a:bf:63:01:fd:ef:b0:7e:c0:83:de:
         3d:00:73:8d:21:48:89:ba:97:b5:41:cb:c6:91:3d:05:00:cd:
         ff:49:72:38:d6:18:b7:29:b4:95:76:f7:7e:2e:83:be:36:46:
         65:e9:dc:db:83:0c:87:33:c7:5e:6d:be:80:55:fb:43:aa:20:
         d9:c7:9c:0c:64:51:f4:f9:c1:39:40:82:bf:71:53:f3:7c:73:
         1c:0f:e4:0c:d5:5c:3c:84:f8:99:93:e5:c4:0c:be:f0:d3:f5:
         e0:de:8c:8b:ae:1d:73:7d:f9:7b:70:81:98:00:d5:2d:2d:d5:
         43:54:56:a7:b8:54:2d:7b:ae:a2:87:36:e1:0d:46:0a:8c:90:
         ac:8c:bc:fb:7d:be:4e:36:90:03:95:13:00:f9:2d:28:44:48:
         61:b3:5d:99:91:96:b0:ad:fe:42:44:df:ff:9e:ac:89:ad:73:
         56:22:16:28:e1:ec:b7:63:b4:b9:9c:84:7f:d0:c1:9a:5f:5a:
         d1:98:95:ee:b8:96:36:36:61:b1:bf:e8:01:41:a5:e3:2b:ab:
         15:60:4d:fe:3b:17:01:90:8a:f8:98:df:dd:27:50:6d:1c:96:
         41:c9:fc:3e:e0:28:c7:91:b3:af:00:e6:84:1e:da:55:3e:61:
         94:f7:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:34 2026 by rpki-client