This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
File:                     72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json)
Hash identifier:          dgV9TF4aGKp5lVM9IsxuK9cBQSrGARkwDmLf2iOA33s=
Subject key identifier:   12:AA:58:5F:B1:C7:F5:2F:28:41:D8:01:32:5E:72:DE:50:EE:83:AB
Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5
Certificate issuer:       /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
Certificate serial:       16D86E9BA9E6B47394AB3E5E7114DBE60A50799B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
Manifest number:          01D2
Signing time:             Sun 25 Jan 2026 11:10:06 +0000
Manifest this update:     Sun 25 Jan 2026 11:05:06 +0000
Manifest next update:     Mon 26 Jan 2026 12:26:06 +0000
Files and hashes:         1: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: wEyXr4xaIA6FViPYjy6qKmrWjNiuJR3Gti7ksL7NT1k=)
                          2: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: 5Anq0fIbeZTAWrSHQbXv/kTMVhZWeE9VTqgPhGtu+UA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl
                          rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d8:6e:9b:a9:e6:b4:73:94:ab:3e:5e:71:14:db:e6:0a:50:79:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
        Validity
            Not Before: Jan 25 11:05:06 2026 GMT
            Not After : Jan 26 12:26:06 2026 GMT
        Subject: CN=12AA585FB1C7F52F2841D801325E72DE50EE83AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:a4:a9:66:7b:fd:18:40:bd:57:4b:9b:27:
                    23:03:d6:fd:b8:af:80:e4:3e:b1:4b:a0:f8:9a:20:
                    c0:cf:73:a9:05:d5:57:57:7f:23:b0:77:73:a7:f1:
                    09:10:9e:a1:a4:03:6c:b8:93:70:92:eb:0b:02:75:
                    e4:db:d0:69:b9:c3:0a:80:23:56:0a:42:4f:4d:78:
                    69:f3:8d:78:09:50:c1:f1:3e:c9:ab:a5:1e:a3:d0:
                    8f:c9:ca:53:ec:a5:c5:ac:d0:68:01:86:95:5a:9f:
                    6d:4f:36:67:d6:66:98:b7:11:4e:1c:04:da:f1:13:
                    3e:30:9b:43:34:24:c6:4d:64:a0:53:b6:72:64:66:
                    a6:d7:1c:63:e7:6d:d9:fd:24:6b:50:d9:a2:e6:4c:
                    c0:54:cc:34:21:ca:56:9d:7f:a5:67:32:d7:eb:0b:
                    36:0a:da:f5:24:d5:5e:b0:98:08:df:13:b1:c5:c2:
                    e6:86:4e:4a:ca:43:92:83:9d:38:ec:f5:7b:ec:cd:
                    e3:a6:bb:3a:ea:b6:18:dd:35:09:6e:80:c0:57:e5:
                    71:6d:15:1e:5b:42:f8:d0:c8:e2:9e:c6:cb:bd:a0:
                    7f:2c:19:e9:2e:bd:6d:d4:6f:cb:b7:b0:de:79:87:
                    a7:17:20:01:24:70:95:62:9b:32:fa:73:7d:78:e9:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AA:58:5F:B1:C7:F5:2F:28:41:D8:01:32:5E:72:DE:50:EE:83:AB
            X509v3 Authority Key Identifier:
                keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:f5:4c:8b:f0:34:b6:28:77:44:d3:55:13:12:df:e8:70:
         9a:1f:89:f9:0e:1d:06:9a:b7:25:26:d7:4f:43:d0:89:f9:f9:
         2b:94:f9:81:de:5e:ae:47:77:44:f7:fb:c4:1e:eb:86:6e:16:
         a4:8a:a8:27:a7:0b:61:6c:2e:61:3d:82:c2:f5:49:3a:58:7c:
         70:e5:dc:66:39:a4:b0:45:b7:0d:2d:4f:d1:9c:51:73:a6:dd:
         da:5d:73:8a:57:94:2c:83:18:e0:ec:50:40:9f:9e:49:75:92:
         52:00:1d:48:5c:8b:6b:86:27:2e:06:0c:f2:17:35:8b:de:aa:
         b6:f9:97:2e:f8:55:c2:bf:35:b3:af:63:3a:5e:29:b4:d2:32:
         43:d5:1d:d8:e6:de:32:48:f9:87:77:70:92:f6:73:74:54:ab:
         51:f6:a4:7f:41:8d:25:3b:87:c6:62:30:e6:2c:fc:0e:19:22:
         9d:19:a5:6f:04:19:25:49:92:a5:ce:ae:d9:ee:14:20:5b:bf:
         95:34:d7:59:a2:4e:26:35:9a:2f:db:b4:d3:c7:f9:88:b9:7c:
         6e:b0:55:f8:11:8e:73:d7:58:3f:1f:f0:9b:d6:0b:2a:ba:7a:
         d6:64:31:c9:7c:49:12:a6:77:ad:fc:76:e7:59:03:79:ab:46:
         b4:77:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----