This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
File:                     A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft (raw, json)
Hash identifier:          NZs5gxUe9BCnSiLKG6itzC+Kz02BXKv4fsfl6tIisY4=
Subject key identifier:   39:EA:92:D3:04:05:AD:AE:59:DE:35:67:26:20:65:22:BB:A2:5C:70
Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Certificate issuer:       /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
Certificate serial:       579EB8C7793A30E471E57EF325B558135C648E94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
Manifest number:          0203
Signing time:             Sat 24 Jan 2026 22:27:32 +0000
Manifest this update:     Sat 24 Jan 2026 22:22:32 +0000
Manifest next update:     Mon 26 Jan 2026 00:59:32 +0000
Files and hashes:         1: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl (hash: fj8okzKi0tYUXO2P6AsJEAli7APBibiI0zbCgFG4pZI=)
                          2: 323830343a373865633a3a2f33322d3332203d3e20323731323734.roa (hash: foo6vsCunQYOdKozzV0vt6s5iK7OlpItZGBDpzbGTBA=)
                          3: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (hash: okARzhUwSA++CaIQiE7G5p/lPgXuBrz6+YAreZuSaj8=)
                          4: 323830343a373865633a333030303a3a2f33362d3336203d3e20323731323734.roa (hash: VXjFelkFSdFKx8Y2J6XhU5Ptn2Vi5wT4GfSbDJZEwlc=)
                          5: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (hash: bahN75Khgj6xlNi2kbbIn1LBVS+TPCRezuTrNZ9yFgM=)
                          6: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (hash: w/ttojJgIZcqEiQAlXRIgGEwx/SyE+eV3XcDR+wm3Ec=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl
                          rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 00:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9e:b8:c7:79:3a:30:e4:71:e5:7e:f3:25:b5:58:13:5c:64:8e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Validity
            Not Before: Jan 24 22:22:32 2026 GMT
            Not After : Jan 26 00:59:32 2026 GMT
        Subject: CN=39EA92D30405ADAE59DE356726206522BBA25C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:c2:2b:bf:66:09:57:e5:f3:81:03:83:63:
                    73:ab:a5:ee:fb:d0:c9:3d:6e:bb:9a:0a:3f:a7:1d:
                    c9:de:2e:5a:31:4e:77:da:33:ff:13:9d:7b:92:53:
                    8f:78:8e:e9:43:46:23:08:25:cb:ba:b7:42:6b:df:
                    6d:b1:99:f7:8f:2f:b7:e9:22:60:03:8d:2c:f4:1f:
                    4e:4c:b6:b3:18:8f:5a:34:35:be:90:57:23:8b:a6:
                    e7:d5:f7:14:c1:ba:42:5b:a1:5a:97:d6:9e:03:f2:
                    17:48:7a:96:66:35:32:dc:c3:20:45:76:9a:ba:25:
                    69:98:89:0c:73:09:c4:10:01:08:e7:7a:a1:23:ac:
                    0f:a5:80:84:75:8f:43:12:db:b6:23:53:47:fa:b0:
                    ae:38:c0:c9:d0:5f:3c:6f:8e:9b:82:77:b4:99:69:
                    df:b0:a6:1d:77:67:6a:7b:33:67:d3:1d:ed:a5:4e:
                    20:35:c4:80:6a:23:44:a0:8e:07:e1:08:c8:24:f6:
                    8e:da:94:d9:5c:05:e1:ea:d1:b0:6b:88:f8:c4:e6:
                    db:8f:e9:61:61:e6:d4:1e:c5:d7:cd:e8:71:c2:02:
                    e5:be:af:5b:c5:9c:06:6b:60:4f:d7:af:63:b8:3e:
                    a7:51:9d:1d:0a:09:a3:99:88:fc:0b:fb:62:f7:c7:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EA:92:D3:04:05:AD:AE:59:DE:35:67:26:20:65:22:BB:A2:5C:70
            X509v3 Authority Key Identifier:
                keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:82:d3:6c:0e:06:7c:ec:f9:0f:6a:a5:86:58:ea:89:b0:73:
         aa:04:aa:83:db:ea:af:ea:b8:40:c7:56:51:fe:4c:6c:54:c3:
         99:f6:72:65:54:a3:04:6a:60:dc:6c:80:d3:1c:cc:03:b3:92:
         c6:38:14:49:df:d1:7d:90:a8:f4:c5:53:71:91:70:80:64:bc:
         a9:1e:3c:f5:d1:49:be:36:0b:d8:0a:7b:48:f5:06:5f:76:df:
         30:2b:e0:e1:4b:20:70:bc:14:bd:a2:f8:35:ae:8d:2b:ba:87:
         4b:78:81:12:d6:75:d4:64:6f:5f:cb:18:c0:6f:f0:4a:fa:f1:
         ce:78:ef:c4:68:30:d2:9c:37:b2:e6:aa:1c:5e:f0:19:64:ef:
         74:48:5b:3e:1b:59:ad:a0:0c:bc:a7:f2:3e:da:15:2f:32:21:
         f0:da:7c:b8:0e:46:ea:e4:2e:c1:ce:c5:95:33:e1:2c:1f:51:
         60:78:fb:6e:7a:71:13:9f:ef:ac:0f:6f:51:e5:ca:48:7a:aa:
         78:0b:dd:3e:e6:03:40:1b:6a:98:aa:11:e2:96:86:39:a1:3d:
         65:38:0a:d0:00:fb:25:21:32:81:30:97:9d:c5:85:c7:16:f3:
         89:58:d0:ca:96:a8:e7:72:e6:00:04:f0:a3:b0:9f:f9:d5:80:
         e8:ea:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:33 2026 by rpki-client