This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
File:                     CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft (raw, json)
Hash identifier:          ybZRQwBzOLwKmBPSCnBCMXMF4WWNXORJVLrR5bPJiLE=
Subject key identifier:   26:98:22:74:4D:A6:AC:3B:A7:80:CC:F2:8A:F9:50:CC:E6:98:6C:72
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5F1EB841B41979FE8AEED337F200E557E7C1A664
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
Manifest number:          0386
Signing time:             Sat 24 Jan 2026 22:18:59 +0000
Manifest this update:     Sat 24 Jan 2026 22:13:59 +0000
Manifest next update:     Mon 26 Jan 2026 01:26:59 +0000
Files and hashes:         1: AS262663.roa (hash: PJD+gJrNYgL/40tPhpVtkj6zXlFK35wnFt9vxf+tKb4=)
                          2: AS52903.roa (hash: qrdArtV80HzymrbTbF11pSFZWhXgIROL/7g76QvSk1Y=)
                          3: CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl (hash: HmQiIfgCvGDsAZ3qls7tNYxM9XamBFGMskfxhhQz2cc=)
                          4: AS274611.roa (hash: lNFmMhYHy5bqcKlWdy9xOblkcBDMFvYbbGCIlp6S7os=)
                          5: AS272541.roa (hash: V22Gh1TVtrNX9+17jmLesBqivb61sg4dECzobHizBy8=)
                          6: AS53107.roa (hash: 2LzgDPKeF6VauUyFDKp1p1A8UbKt9VfxLDVHYjtXdbA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:b8:41:b4:19:79:fe:8a:ee:d3:37:f2:00:e5:57:e7:c1:a6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Jan 24 22:13:59 2026 GMT
            Not After : Jan 26 01:26:59 2026 GMT
        Subject: CN=269822744DA6AC3BA780CCF28AF950CCE6986C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:d3:ba:bd:5c:b7:32:36:1a:e6:dd:fd:d6:
                    ef:6d:64:13:bc:08:9c:97:c4:93:a2:24:4b:86:fe:
                    68:0d:5a:aa:7c:90:fe:58:3a:97:c9:d6:b6:e2:7f:
                    f1:d6:8c:af:35:fb:2e:db:b0:64:bf:0a:d6:6f:4d:
                    90:42:fb:dc:2c:63:8c:55:c4:d6:5f:eb:41:17:20:
                    38:22:56:27:f5:a7:05:e6:96:28:11:89:3d:af:61:
                    52:12:85:b0:c4:3f:9e:f1:a9:bd:0a:7c:f6:b5:84:
                    9b:7f:cd:5f:cf:60:22:05:b8:72:99:18:45:31:5d:
                    d7:fe:3b:a2:e5:00:16:df:07:ad:30:48:ef:42:74:
                    4a:43:1e:06:a9:c5:56:aa:a6:25:45:8d:9f:8c:fa:
                    2d:cb:ee:3d:14:03:67:19:db:0b:b6:76:cc:76:d9:
                    82:c8:10:de:f8:fd:62:2e:e8:b5:e9:7a:14:47:83:
                    16:78:d2:6f:cc:9f:cc:e9:15:6e:18:c2:a1:9b:4c:
                    5b:d3:d7:b9:70:57:36:93:f1:db:87:e8:47:b4:f3:
                    96:cf:1d:34:16:14:45:42:c1:ef:54:00:ac:cf:98:
                    f4:b8:aa:d5:32:56:50:d2:ad:4e:36:c0:7d:a0:17:
                    40:c4:86:dd:bf:23:a3:d9:67:57:bf:10:41:a7:c9:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:22:74:4D:A6:AC:3B:A7:80:CC:F2:8A:F9:50:CC:E6:98:6C:72
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:ce:83:2c:e4:d0:bf:10:00:f4:fb:5c:52:56:01:bc:4e:
         a3:48:3c:00:d0:eb:9a:95:72:98:f5:71:28:6c:4a:2a:7c:e2:
         d5:6d:2d:05:a3:2e:ce:ff:02:61:84:e6:84:21:49:ee:ba:bc:
         d9:fb:2c:71:db:6a:48:cc:c2:6f:66:c1:f4:a1:7a:c6:8f:85:
         5b:1f:f5:38:db:c4:c8:6e:6f:06:2b:02:90:eb:67:8c:51:6c:
         6a:89:a7:43:61:60:4c:88:0b:77:ff:11:37:61:c9:04:06:b4:
         73:95:e7:99:ac:23:b8:76:24:90:95:96:dc:5a:05:32:5b:86:
         2c:58:7a:c2:30:e2:bf:56:15:d5:07:98:d1:0c:bc:ce:68:da:
         31:1c:71:7e:cb:9e:c2:c2:d1:b0:bf:7b:01:fa:84:46:e7:80:
         0e:a0:51:cb:f7:2b:c1:6a:8c:de:fc:82:23:39:96:e6:9f:6a:
         9e:a6:52:0d:a7:7e:b9:e5:d5:ce:f1:9a:de:10:2b:90:93:52:
         fc:f0:9b:70:29:97:e6:be:19:11:e2:48:20:80:3d:78:0a:84:
         94:d4:e6:fb:e0:1c:cf:9c:d7:40:e7:a3:2c:a8:b2:a3:7f:28:
         2f:da:e6:1a:81:4f:93:80:6d:ac:51:f2:0a:70:81:68:1f:f3:
         a8:2e:5d:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXx64QbQZef6K7tM38gDlV+fBpmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNjAxMjQyMjEzNTlaFw0yNjAxMjYwMTI2NTlaMDMxMTAvBgNV
BAMTKDI2OTgyMjc0NERBNkFDM0JBNzgwQ0NGMjhBRjk1MENDRTY5ODZDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0otO6vVy3MjYa5t391u9tZBO8
CJyXxJOiJEuG/mgNWqp8kP5YOpfJ1rbif/HWjK81+y7bsGS/CtZvTZBC+9wsY4xV
xNZf60EXIDgiVif1pwXmligRiT2vYVIShbDEP57xqb0KfPa1hJt/zV/PYCIFuHKZ
GEUxXdf+O6LlABbfB60wSO9CdEpDHgapxVaqpiVFjZ+M+i3L7j0UA2cZ2wu2dsx2
2YLIEN74/WIu6LXpehRHgxZ40m/Mn8zpFW4YwqGbTFvT17lwVzaT8duH6Ee085bP
HTQWFEVCwe9UAKzPmPS4qtUyVlDSrU42wH2gF0DEht2/I6PZZ1e/EEGnyTOBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJpgidE2mrDungMzyivlQzOaYbHIwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWoxNlUvMS9D
RjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlyvOgyzk0L8QAPT7XFJWAbxOo0g8ANDrmpVymPVxKGxKKnzi1W0tBaMuzv8C
YYTmhCFJ7rq82fsscdtqSMzCb2bB9KF6xo+FWx/1ONvEyG5vBisCkOtnjFFsaomn
Q2FgTIgLd/8RN2HJBAa0c5XnmawjuHYkkJWW3FoFMluGLFh6wjDiv1YV1QeY0Qy8
zmjaMRxxfsuewsLRsL97AfqERueADqBRy/crwWqM3vyCIzmW5p9qnqZSDad+ueXV
zvGa3hArkJNS/PCbcCmX5r4ZEeJIIIA9eAqElNTm++Acz5zXQOejLKiyo38oL9rm
GoFPk4BtrFHyCnCBaB/zqC5drA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:50 2026 by rpki-client