This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
File:                     4F855F6808FCD163FB20E5E5F939427253847DC2.mft (raw, json)
Hash identifier:          SdrfLkX6QPXV5L9j2NDjvFMtq1O9FA2oN/5qU3gXwKM=
Subject key identifier:   E3:E0:E3:7C:37:10:22:47:C0:4C:FE:D0:DB:C3:28:FE:AB:42:65:D7
Authority key identifier: 4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2
Certificate issuer:       /CN=4F855F6808FCD163FB20E5E5F939427253847DC2
Certificate serial:       67AFE0E1019075808C51B1C1D935143C27FDFA83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
Manifest number:          02C3
Signing time:             Sun 25 Jan 2026 11:59:40 +0000
Manifest this update:     Sun 25 Jan 2026 11:54:40 +0000
Manifest next update:     Mon 26 Jan 2026 12:31:40 +0000
Files and hashes:         1: 3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa (hash: 1HTD6y5UWBPqwd8LTvadEg1TbplgL7dF29d2W6epFAE=)
                          2: 4F855F6808FCD163FB20E5E5F939427253847DC2.crl (hash: uzo5s+ZETM04T1Fstx+zhhhIORFANCvMIV7QHtoakZg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl
                          rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:af:e0:e1:01:90:75:80:8c:51:b1:c1:d9:35:14:3c:27:fd:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F855F6808FCD163FB20E5E5F939427253847DC2
        Validity
            Not Before: Jan 25 11:54:40 2026 GMT
            Not After : Jan 26 12:31:40 2026 GMT
        Subject: CN=E3E0E37C37102247C04CFED0DBC328FEAB4265D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:00:a6:ad:8e:4c:e3:44:12:43:87:b0:b0:
                    dd:2c:8e:a4:84:3a:02:9a:60:28:16:d0:d7:a3:5b:
                    29:a1:18:98:ca:5d:7e:b5:0a:33:36:7a:e5:d5:f2:
                    09:dc:81:7f:54:71:62:db:9f:cf:6d:a4:46:9b:ee:
                    54:b4:e2:ea:22:77:07:6e:09:6f:e9:ed:05:c7:d4:
                    d1:23:98:85:a1:e6:2a:39:71:30:67:bc:e5:1b:36:
                    4e:e4:3b:f8:7c:d8:b6:95:d7:5f:a9:eb:ba:b7:e6:
                    e6:0b:ce:dd:2d:52:6e:23:81:a4:1b:8f:61:ad:74:
                    28:6f:43:ed:d3:11:c5:64:ff:1b:20:b7:75:0e:f8:
                    83:fb:cd:27:a3:de:8f:3b:a3:ed:a2:8a:72:60:74:
                    6c:02:f1:6a:44:cf:ef:5e:76:f2:a0:50:93:4c:54:
                    0c:a7:21:ed:c3:c4:91:76:1c:40:0b:e0:c7:ee:ca:
                    b9:f0:ed:d8:05:2d:1d:85:70:7e:5d:07:ad:69:04:
                    f8:cb:b5:81:2b:c1:7b:f3:2a:ad:79:fd:ea:e5:9c:
                    44:9d:fb:1d:96:6b:b5:bf:4c:ed:62:6e:11:ec:81:
                    f2:5b:07:52:b6:f1:ed:e8:14:51:bd:35:60:c8:52:
                    9c:e5:e0:22:80:60:50:9c:97:a3:c4:a8:c6:98:cc:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:E3:7C:37:10:22:47:C0:4C:FE:D0:DB:C3:28:FE:AB:42:65:D7
            X509v3 Authority Key Identifier:
                keyid:4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:4d:6e:53:af:ba:25:a3:a7:36:a5:46:15:dc:fe:cb:68:
         ee:5f:76:36:ed:14:54:fa:f2:6f:b4:db:76:26:58:d8:47:2b:
         ec:bf:b0:ec:a1:84:0d:d3:a8:8e:fd:8d:03:61:b5:e2:dc:ce:
         d8:aa:28:2f:f7:34:e7:5f:87:26:da:3b:b9:15:f2:80:6e:c2:
         9d:3d:07:6c:c1:a9:93:04:53:cb:90:be:3a:cc:90:98:30:95:
         cf:42:82:0e:9e:63:df:12:64:9f:e8:5d:91:ca:83:22:1e:ed:
         8d:5e:da:5f:9f:d7:ed:02:d0:99:50:e3:9f:0b:36:6d:87:cb:
         61:71:e9:9e:f6:f8:e6:d9:37:d7:49:39:4d:96:7b:48:e6:dc:
         1f:05:b2:b8:cd:69:62:d8:65:30:d0:7c:4c:de:a6:4d:19:a6:
         af:d5:75:84:b0:0c:df:1b:12:dc:24:e4:dc:2e:f6:a0:53:ba:
         47:6f:a9:a2:c1:ce:7c:14:dc:b2:71:1a:0b:84:d2:b8:d3:6a:
         8a:50:d9:28:77:48:74:9f:16:68:f1:0a:73:4f:57:b6:f4:f9:
         17:82:a8:ec:60:5e:b2:ce:b4:5d:7c:cf:bb:c4:d2:20:b5:e0:
         bc:40:16:2a:b1:10:7f:77:c3:05:e9:dd:2d:d5:1c:fe:d1:aa:
         5f:29:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:30:25 2026 by rpki-client