This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
File:                     0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json)
Hash identifier:          oJ5Ki8EctBT96M8Gc2x/vwTRhXLR96PnjAKy/rJ14Ao=
Subject key identifier:   E9:83:1F:E7:C1:6D:25:18:7A:D3:79:BE:60:0F:A0:56:B0:DC:C3:0C
Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Certificate issuer:       /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Certificate serial:       7B81315D5217B8B837AF719D90F143F9AB764BEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
Manifest number:          A1
Signing time:             Sun 25 Jan 2026 17:50:34 +0000
Manifest this update:     Sun 25 Jan 2026 17:45:34 +0000
Manifest next update:     Mon 26 Jan 2026 21:35:34 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=)
                          2: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: 3T33dh/02Oh14bLrHJytpF5OUGtoONZeBCO9mNPWv/w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:81:31:5d:52:17:b8:b8:37:af:71:9d:90:f1:43:f9:ab:76:4b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
        Validity
            Not Before: Jan 25 17:45:34 2026 GMT
            Not After : Jan 26 21:35:34 2026 GMT
        Subject: CN=E9831FE7C16D25187AD379BE600FA056B0DCC30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:61:1c:82:00:ef:77:e9:1f:1c:91:43:43:
                    d8:58:c8:86:9d:fc:5f:d3:cc:42:82:e8:d3:a8:55:
                    37:01:a3:1b:7a:f8:de:77:68:c9:76:5a:ba:bb:e8:
                    37:18:6c:1d:ac:7c:45:3e:85:20:24:ac:74:62:b6:
                    2a:ef:a5:7a:97:12:a0:05:86:2e:eb:64:3b:3a:f1:
                    18:ce:2b:f2:08:70:f4:b4:b5:82:5b:eb:7b:ae:e9:
                    a5:59:07:9d:89:88:35:82:4a:45:e7:3d:d1:92:f2:
                    ae:34:fd:e8:fc:1c:31:6d:5a:54:8c:bc:60:f1:ac:
                    db:ef:d0:d4:49:40:f4:56:52:ad:12:9e:ce:a3:2d:
                    2f:4f:ce:02:da:5e:e9:e4:67:3d:8e:a1:cb:63:a2:
                    da:4d:e4:15:c1:65:8e:12:6d:81:74:b2:3c:3f:ac:
                    c4:5e:3c:44:0c:7a:e6:6b:97:ec:4d:d1:ed:dc:69:
                    86:f4:c7:0f:dc:2d:7d:18:6d:03:8a:ef:14:6a:a8:
                    9d:06:0b:4e:96:a8:16:ad:0a:aa:fb:ae:59:ab:47:
                    42:04:9d:df:5c:ad:37:36:25:73:22:07:1d:d7:b6:
                    3d:26:d0:07:21:bc:d5:4d:b5:c4:b2:24:e3:96:43:
                    49:4e:bc:17:23:da:dc:95:d3:df:07:18:61:b1:b3:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:1F:E7:C1:6D:25:18:7A:D3:79:BE:60:0F:A0:56:B0:DC:C3:0C
            X509v3 Authority Key Identifier:
                keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b1:ca:8f:b6:0e:4c:ac:f1:ee:33:82:02:09:54:b9:62:21:
         12:d8:2f:72:6c:55:fa:88:9e:51:92:16:54:3d:19:0b:cb:a6:
         c8:a4:b2:1d:9d:02:d9:66:15:e5:7b:b7:e5:28:a7:b5:7f:05:
         c4:30:41:bd:f9:47:49:1c:3b:79:88:37:71:b2:9e:30:b2:ef:
         f7:25:d2:8c:13:1b:63:44:8c:62:57:cc:3b:43:8a:e6:1c:63:
         7b:c7:ff:d1:71:8d:a0:6e:11:99:5c:de:e4:41:41:80:a2:a4:
         f1:0c:99:6c:85:c3:70:00:2e:5e:22:2e:c3:da:03:42:d1:96:
         74:5f:ce:aa:30:27:9f:63:cf:f1:38:a2:bd:25:c6:5b:a3:18:
         fe:ef:d6:68:10:87:bd:a4:ff:1c:d1:3a:14:46:ed:80:72:d4:
         63:df:1c:9d:0e:5d:3d:bf:ad:54:d2:50:a0:32:0f:0d:2e:cf:
         7a:fa:b1:36:20:c1:e0:40:1f:aa:68:47:f8:45:9a:49:8d:76:
         bb:f4:67:69:0f:e5:77:d3:4c:61:aa:db:bf:a3:3a:98:49:1b:
         9c:ef:8e:cb:3b:d4:7a:96:c4:1a:95:f4:ed:cf:76:b5:26:21:
         33:0c:fd:23:61:b0:75:02:1a:06:97:64:8e:e6:aa:01:30:0b:
         e0:e9:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:54:08 2026 by rpki-client