This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
File:                     CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json)
Hash identifier:          HRblUd/zzd6OJIVITZ/HtKlOgn55o6Js/BUgQ+RJB3A=
Subject key identifier:   C8:13:D7:C7:88:67:88:10:4C:84:43:D3:2C:8C:6A:5C:28:01:E6:21
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       14DD47AE2EA1FFBC9C620A8B91F2D9064953517F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
Manifest number:          03DE
Signing time:             Sun 25 Jan 2026 02:50:00 +0000
Manifest this update:     Sun 25 Jan 2026 02:45:00 +0000
Manifest next update:     Mon 26 Jan 2026 02:50:00 +0000
Files and hashes:         1: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=)
                          2: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=)
                          3: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: mhRGu7I6py8fM4dTpcTnPbFp4UJJnrlyrQt9srVxOtQ=)
                          4: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=)
                          5: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=)
                          6: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=)
                          7: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dd:47:ae:2e:a1:ff:bc:9c:62:0a:8b:91:f2:d9:06:49:53:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Jan 25 02:45:00 2026 GMT
            Not After : Jan 26 02:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:f3:15:cd:b0:3d:78:5e:f3:cd:97:e4:38:
                    82:f9:bd:cb:9b:2f:d9:89:ed:58:11:2c:4f:e3:73:
                    f7:31:cd:d0:6f:a1:31:b1:4d:49:e7:ec:b6:94:7d:
                    81:99:fc:7e:d7:a6:9f:f3:34:fd:c5:4b:5e:ae:9f:
                    3c:d1:e8:24:af:76:84:dc:cf:0d:3e:5c:d0:dc:0a:
                    43:91:90:e7:9b:cc:41:1f:cf:b3:58:ca:ac:09:e8:
                    c5:f1:25:ad:d9:34:74:ed:f5:eb:84:c7:80:92:58:
                    55:02:6d:51:69:d4:6a:3d:51:b2:28:3e:2a:f3:89:
                    6d:77:37:05:70:88:b2:df:6b:70:15:7e:4f:79:71:
                    b2:50:4c:13:be:42:5e:b2:0a:fe:da:9c:af:95:89:
                    7f:1c:4b:c1:b8:d4:76:8a:5f:56:d6:ee:e2:de:44:
                    34:be:b2:12:21:c3:72:a9:cc:22:d9:ad:8d:fb:18:
                    30:0c:0e:b2:c5:e1:59:fc:ad:fa:9e:66:c9:62:3d:
                    e4:2b:cd:00:67:f9:ba:e1:55:08:c5:49:e4:b2:77:
                    65:18:c8:7b:59:78:7c:50:90:77:12:be:a2:25:5c:
                    b4:f3:42:c3:e7:b3:c8:2e:81:87:4c:da:d6:87:0f:
                    47:78:5d:7f:bb:17:b0:17:68:32:36:d7:c6:f0:b0:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:D7:C7:88:67:88:10:4C:84:43:D3:2C:8C:6A:5C:28:01:E6:21
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:05:76:3d:29:28:0c:e2:49:34:cb:79:2e:95:d0:d7:a9:
         36:2a:5b:1a:e4:0e:e6:3c:a4:58:d4:87:3b:dc:2e:ed:d4:1b:
         10:47:33:0c:b0:c2:ae:23:bf:8d:b4:0b:ce:73:12:8c:47:22:
         cd:3b:bf:be:44:60:58:10:21:42:7a:64:00:93:ad:bf:f5:d8:
         42:d6:2d:17:20:24:fb:2b:4c:c9:70:30:e6:55:be:a1:f5:41:
         24:00:7d:8c:26:af:be:b9:70:13:68:e0:58:9a:b3:b2:93:a0:
         e4:be:f3:29:49:30:1a:b8:1c:68:66:a5:d0:b7:78:02:96:71:
         1b:49:f8:82:03:8d:59:aa:47:dc:36:41:29:66:30:c1:2c:27:
         5e:ad:5a:77:81:57:d9:92:91:d6:aa:c2:27:e8:e5:09:13:31:
         01:b0:06:89:5b:48:d6:04:11:90:74:7e:c1:44:b8:af:7f:3b:
         1d:ac:93:13:59:8c:35:f9:f3:15:46:74:38:80:2c:76:0b:78:
         c4:81:bf:53:d5:e1:be:17:75:4e:d8:9c:2d:dd:38:08:81:c6:
         e9:4a:51:08:9f:38:f5:fe:48:55:ab:ad:d1:7d:b9:2c:c8:e3:
         a3:54:1d:87:44:70:c0:29:9e:1b:f0:f5:01:ed:58:35:d6:dc:
         e2:40:79:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:31:49 2026 by rpki-client