This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
File:                     8B5B625A528EC464925ACB69248E90494483E3F7.mft (raw, json)
Hash identifier:          x4l3BvgphS+O72JEnjl7HUoBP/GYqRz4pUv2VqiXMAk=
Subject key identifier:   DE:40:54:53:A3:5A:EB:AC:88:12:85:33:78:AF:FE:39:F2:0B:4B:05
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       17A898DD5F8B948DD6B6384729087938E513277E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
Manifest number:          036B
Signing time:             Sun 25 Jan 2026 09:32:59 +0000
Manifest this update:     Sun 25 Jan 2026 09:27:59 +0000
Manifest next update:     Mon 26 Jan 2026 10:04:59 +0000
Files and hashes:         1: 8B5B625A528EC464925ACB69248E90494483E3F7.crl (hash: 6xPh7CtbtR5/GDUUSIUgPqadju52jgIS52ynFhA/gD0=)
                          2: 323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (hash: +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=)
                          3: 3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (hash: ObqAafyNZ+1poxt3i+2GRujB4s5MDqvrCcZ2DXBseOg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:98:dd:5f:8b:94:8d:d6:b6:38:47:29:08:79:38:e5:13:27:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Jan 25 09:27:59 2026 GMT
            Not After : Jan 26 10:04:59 2026 GMT
        Subject: CN=DE405453A35AEBAC8812853378AFFE39F20B4B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:63:bb:b1:fc:9a:f0:f5:84:e1:6b:8a:af:
                    63:a6:0a:c6:18:dc:39:d6:8c:e6:53:d8:e0:5f:ad:
                    df:2f:ec:5a:a0:71:70:45:75:97:93:2c:92:63:a1:
                    b8:a4:a0:8e:33:4d:9c:14:d5:fc:e7:ad:1d:3a:fb:
                    e0:55:b7:f9:48:05:a6:f0:f5:af:85:fd:2d:02:f5:
                    d5:a6:9f:53:05:6e:9c:3d:cb:5d:3c:27:8d:72:64:
                    8f:86:82:42:0f:1a:2d:24:b0:db:10:41:4f:ec:a9:
                    e8:e3:68:2b:45:6b:29:4d:0c:94:1b:c2:c2:96:d4:
                    d4:13:45:02:ca:dc:10:84:2a:83:b1:96:cf:55:c9:
                    7c:fc:09:8f:78:41:45:e4:41:33:86:7e:f6:72:a6:
                    93:f5:8e:d5:12:66:20:62:3c:b1:90:11:9f:98:92:
                    8c:dd:1d:94:f4:b7:0f:24:45:a1:9b:60:ad:6c:38:
                    e4:ec:46:19:8f:d7:5a:36:32:fb:c8:3b:94:c6:5a:
                    41:02:d7:a4:37:72:ae:43:3a:b3:51:9b:1f:62:b5:
                    f2:4d:e1:51:69:d6:78:42:9b:f4:01:c4:8e:56:2a:
                    5a:73:e1:03:cc:31:3b:17:4f:fd:d7:8a:2c:a8:9f:
                    54:74:5c:aa:66:e5:1b:a0:35:cd:6f:53:20:2d:96:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:54:53:A3:5A:EB:AC:88:12:85:33:78:AF:FE:39:F2:0B:4B:05
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:e9:00:f4:35:e6:ee:5c:27:c0:b5:9f:60:c8:fd:da:bc:
         b0:7f:66:99:90:5b:a5:82:e5:23:6e:d6:68:97:84:c3:42:61:
         94:08:41:90:fa:7e:e5:c2:6f:d2:ec:43:eb:e3:23:b7:d3:e6:
         41:d6:81:2b:14:2f:7a:2d:00:f5:be:7d:7e:32:c3:9a:e8:57:
         fc:02:12:8d:2d:65:5a:55:6a:40:5a:07:6b:b9:d4:5c:4e:d3:
         2d:fe:20:ce:73:36:c5:2b:42:0c:6f:39:b9:21:71:88:f4:38:
         83:7d:53:46:38:38:ef:c8:79:71:13:c6:90:94:62:56:6a:b0:
         f2:d5:5b:2b:2b:0d:30:ed:0d:16:2a:42:32:6a:bf:f2:63:c5:
         21:37:d0:97:c3:d5:0a:bb:39:63:ab:dc:14:7f:27:16:71:b1:
         4f:ed:74:c6:a0:05:ca:f6:c2:8f:53:ca:d1:a0:1b:29:ca:e3:
         57:2f:85:49:b3:1e:00:eb:fc:99:b6:71:29:4b:cd:a5:c7:ec:
         f9:2f:c8:8a:e5:e6:3a:1c:8a:ba:ba:46:ae:b5:2c:08:37:ac:
         2e:16:8a:5b:8e:6d:42:a4:db:ea:a6:b1:67:e5:81:6c:25:e2:
         20:8d:03:fb:f2:e9:45:03:91:02:87:29:31:0c:3a:57:46:d5:
         4a:79:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:37 2026 by rpki-client