This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
File:                     AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft (raw, json)
Hash identifier:          KPeLRExAapz/4U7O1aEDfQ0vDzJTzLpnyyA9WhIfpXQ=
Subject key identifier:   75:4D:BB:EF:DD:CF:6F:67:05:C9:08:17:CE:A4:DF:43:44:3F:E2:4C
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Certificate issuer:       /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial:       57AA9BD8E500009BD9F035E8977B14B32CDF0431
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
Manifest number:          02D2
Signing time:             Sun 25 Jan 2026 15:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 14:55:37 +0000
Manifest next update:     Mon 26 Jan 2026 17:28:37 +0000
Files and hashes:         1: 323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (hash: mY1owELMXoq5BRjtUYOOzFgAJjl+N37JQtMJStvgBfs=)
                          2: AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl (hash: Sqz0k3Cdsb+On6dZx1fxVFiMWtxQ6Cy5WCF+XTv6zp8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
                          rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:aa:9b:d8:e5:00:00:9b:d9:f0:35:e8:97:7b:14:b3:2c:df:04:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Validity
            Not Before: Jan 25 14:55:37 2026 GMT
            Not After : Jan 26 17:28:37 2026 GMT
        Subject: CN=754DBBEFDDCF6F6705C90817CEA4DF43443FE24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:6f:69:01:60:ce:01:55:58:c5:66:cd:a3:
                    91:09:45:70:14:8d:9f:8b:43:be:6a:b3:1a:f3:a1:
                    4b:df:a5:6a:c1:d3:e7:34:74:6c:35:87:eb:d4:3a:
                    56:3f:a2:8d:e9:b2:37:ef:9d:3e:63:88:c3:23:be:
                    ed:a4:78:93:cc:61:dc:43:3d:d0:a1:64:8a:62:2a:
                    2d:df:19:47:6f:32:99:60:35:fb:70:f0:e8:13:bc:
                    66:99:1e:07:b1:cd:40:d6:b5:cf:98:d7:19:7e:5a:
                    19:2b:30:2e:fe:68:f8:db:37:9a:6a:7b:59:50:8f:
                    81:7f:12:36:57:a6:c3:26:e0:ee:34:a8:5f:5f:de:
                    5b:f1:53:15:2a:d7:21:b9:14:a8:9d:bf:ae:bf:3e:
                    5c:96:99:05:a8:c4:07:98:f1:5d:da:d1:ca:5d:19:
                    f2:66:84:8d:76:98:b5:1b:16:8e:ee:27:15:6c:49:
                    1b:91:07:c8:3b:bc:31:b8:b4:77:7b:4f:2e:af:90:
                    3c:df:80:89:29:3b:14:eb:57:4f:eb:c8:aa:49:1f:
                    e5:8e:9b:1d:6a:03:b8:73:c7:63:25:e5:89:55:95:
                    a9:ff:68:82:46:76:cf:38:00:5c:8e:f6:34:60:6b:
                    b9:91:f8:8d:e3:4a:bc:fa:70:3e:ce:a9:ed:60:57:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:BB:EF:DD:CF:6F:67:05:C9:08:17:CE:A4:DF:43:44:3F:E2:4C
            X509v3 Authority Key Identifier:
                keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d2:2d:23:fe:47:67:b9:5b:b9:db:72:8f:d2:79:82:a7:2e:
         69:79:33:99:ff:84:17:cf:9e:01:90:0b:d2:a9:40:b8:2d:86:
         99:79:bb:6a:95:ad:3d:8d:10:78:1d:69:c2:f7:88:fa:9b:2f:
         07:c1:08:d2:29:c1:1d:3d:38:9a:18:ba:64:88:d2:ec:ee:1f:
         03:e7:88:fa:59:6c:a2:f8:1c:2a:0c:ff:26:e9:91:33:b9:e8:
         37:23:ff:2c:e4:dc:e4:a1:33:f6:d0:70:e0:f1:3e:1b:57:8b:
         6d:6f:f1:18:0b:ff:95:90:d7:2e:4c:bd:21:19:43:a4:ae:f6:
         ed:46:e0:74:35:ed:83:6a:ea:40:4b:5b:ee:8f:28:94:0e:3b:
         a1:88:41:2a:e3:fc:0c:49:dc:93:b7:e9:7c:0a:52:64:b1:33:
         2a:40:f2:e0:fb:04:13:67:38:f9:7f:12:a5:bd:51:8c:00:93:
         27:a2:ae:77:b4:62:e9:82:26:28:43:93:22:1f:89:a0:00:07:
         11:a0:c5:e0:78:f8:47:88:c2:c9:1e:b1:2c:e9:3e:5a:ef:0c:
         ab:f7:57:ff:4f:8f:7a:a8:39:f7:d2:44:1a:72:d2:3d:6f:93:
         1d:57:9f:88:37:27:72:da:7f:33:e9:83:b2:7b:13:ed:65:d7:
         19:ff:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:03:35 2026 by rpki-client