This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          0bX+lz2C+qppoBddPVtpzwxvDXI2MfSI0ntyM9sDp+g=
Subject key identifier:   29:3C:6B:C2:30:5B:6B:9D:C8:71:C4:9B:81:C3:73:EA:39:F9:9C:28
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       7B5A08B4F462D12826D7CD670A146FF5179FCB25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          0196
Signing time:             Sun 25 Jan 2026 05:22:02 +0000
Manifest this update:     Sun 25 Jan 2026 05:17:02 +0000
Manifest next update:     Mon 26 Jan 2026 08:11:02 +0000
Files and hashes:         1: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=)
                          2: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=)
                          3: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: E/rhQefU0K5hmGu4jOQj/6Hqh2ojAmQ4d3FwhOyMmB0=)
                          4: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=)
                          5: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5a:08:b4:f4:62:d1:28:26:d7:cd:67:0a:14:6f:f5:17:9f:cb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Jan 25 05:17:02 2026 GMT
            Not After : Jan 26 08:11:02 2026 GMT
        Subject: CN=293C6BC2305B6B9DC871C49B81C373EA39F99C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:ff:48:5b:f5:55:68:4d:e9:de:3b:81:81:
                    64:6c:bf:53:3f:be:94:1a:e5:a1:7f:d9:49:a5:25:
                    b1:66:d4:38:97:48:2c:f4:75:e8:ed:b4:bc:95:54:
                    bc:98:c9:73:c8:7e:ed:1b:ae:62:3a:c8:64:10:97:
                    de:6b:7f:28:86:70:fc:04:d3:b6:36:00:e1:22:51:
                    0f:6b:90:d3:30:6d:8d:9c:48:a2:17:48:02:1a:98:
                    00:e6:ed:83:7f:5e:d8:f2:4b:98:cb:b3:ac:ed:29:
                    41:17:cb:14:50:c1:90:89:df:d4:9a:fe:e8:a2:40:
                    d1:8d:cd:26:00:b2:b2:8a:dd:3a:4d:70:36:ff:b3:
                    62:4f:e6:85:ce:09:47:d2:e3:99:15:a8:f0:e4:83:
                    49:06:b3:b0:dd:85:aa:b1:f7:19:d7:7b:da:54:90:
                    a5:a1:88:3b:84:62:a6:2a:12:65:e9:2b:f4:4f:ac:
                    9c:c4:f3:40:84:b8:9f:58:14:cf:77:ae:fc:59:04:
                    34:ac:0b:54:6b:da:a6:84:ba:02:fa:c4:d0:70:16:
                    dd:a8:a5:34:35:ec:30:09:34:48:0c:d0:26:b2:94:
                    e7:bb:4a:3d:a0:9f:33:8f:01:f4:e1:f8:f0:6d:07:
                    f6:19:71:86:a6:ac:33:35:96:f2:d8:b3:de:a6:28:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3C:6B:C2:30:5B:6B:9D:C8:71:C4:9B:81:C3:73:EA:39:F9:9C:28
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:9b:a4:c0:2d:56:5c:e4:a1:df:be:f2:59:3c:ce:ec:b4:
         80:ce:9b:b2:44:34:40:26:62:7a:40:af:73:f1:a5:68:e9:d4:
         3b:59:16:44:79:5e:9b:40:31:07:f4:22:8c:5d:9b:0c:15:47:
         2b:2a:95:e8:a3:9e:41:b9:25:c9:0a:5c:92:70:09:e1:0c:5f:
         b3:32:81:4e:ea:a5:d2:d4:e6:ca:d7:97:8f:ec:41:9d:d2:f3:
         15:9a:08:e8:bb:d1:7b:21:e3:c4:58:3a:08:3d:91:31:53:4a:
         9d:df:75:6b:65:82:c7:96:e7:19:f1:70:63:9d:fd:8d:77:94:
         71:1c:aa:74:0c:09:91:9d:35:78:2f:df:f5:1b:79:78:f7:ba:
         91:4f:26:49:35:6f:3d:e8:92:8e:86:b7:89:dc:f4:1b:19:b7:
         b0:a1:9b:5d:25:7f:e3:c0:55:76:fe:56:58:f6:3d:60:0a:72:
         4f:a2:d4:7a:6a:ec:66:d0:90:27:ce:87:c2:b2:1d:81:5b:2f:
         b0:59:6d:47:e2:e9:10:2a:b2:7e:00:97:e8:df:23:42:cb:93:
         e9:18:ca:53:94:60:d9:17:06:2d:ec:ec:45:a4:1a:4d:90:82:
         63:69:eb:28:8c:5c:21:ff:c8:6c:8d:a0:60:7e:17:d5:ec:20:
         3d:e1:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----