This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
File:                     2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json)
Hash identifier:          p7seJq8OVV5+vUUZ8gLuH+tAPmxlQwuauk+jj5/Ad9g=
Subject key identifier:   E8:F6:BE:19:34:4B:BF:3C:9D:6E:46:58:3A:13:8B:89:19:BE:CB:61
Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
Certificate issuer:       /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Certificate serial:       4FA481286CA5C8564EC1D81BAC5A9557375A3A18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
Manifest number:          6C
Signing time:             Sun 25 Jan 2026 06:40:23 +0000
Manifest this update:     Sun 25 Jan 2026 06:35:23 +0000
Manifest next update:     Mon 26 Jan 2026 10:03:23 +0000
Files and hashes:         1: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=)
                          2: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=)
                          3: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: nEK/HxRB+MU6x13OUvjjQ/kVQ93Hkvr6U/eaYbN6s5s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a4:81:28:6c:a5:c8:56:4e:c1:d8:1b:ac:5a:95:57:37:5a:3a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
        Validity
            Not Before: Jan 25 06:35:23 2026 GMT
            Not After : Jan 26 10:03:23 2026 GMT
        Subject: CN=E8F6BE19344BBF3C9D6E46583A138B8919BECB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:8f:13:01:3d:32:ef:26:61:07:63:c4:50:
                    6a:32:37:07:83:0f:73:35:d9:88:1c:b5:53:46:90:
                    3e:87:64:3c:40:cf:e5:ac:5d:76:4d:0b:91:ef:52:
                    15:85:84:58:4f:a3:1c:fd:0b:e5:a1:e0:ab:de:9f:
                    fd:0f:95:8f:08:b7:68:7c:80:8d:c1:cb:6a:a8:d5:
                    1e:a7:ab:d5:4b:18:2d:6d:9e:dc:94:e8:a7:89:1b:
                    dc:e7:17:42:0f:64:de:ed:5a:d6:4e:00:ac:46:83:
                    a3:09:12:b5:d8:fb:82:25:94:95:0a:64:3b:e4:2a:
                    47:f8:32:52:4b:b1:99:cc:22:c4:d6:27:2b:c7:1e:
                    4a:7d:0e:3a:9e:2d:eb:f5:ef:a6:92:f0:ae:6c:8d:
                    69:3d:41:ad:f9:e3:17:db:90:ce:61:07:a0:7f:76:
                    0f:03:a4:05:83:a0:c9:6a:9b:4b:f1:07:6c:42:30:
                    12:6a:2f:8a:4a:59:cc:5c:6a:fb:45:59:15:1e:56:
                    bd:08:ac:2c:33:ee:d4:d1:88:33:69:8c:bd:50:7c:
                    78:6e:7b:6d:73:45:17:0e:e7:6b:25:03:d8:4d:51:
                    c1:d6:fd:2b:d6:e4:a4:3b:e6:46:8a:60:9f:7f:ff:
                    81:9a:45:87:6e:4a:a0:be:67:cb:f7:52:17:ce:4e:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:BE:19:34:4B:BF:3C:9D:6E:46:58:3A:13:8B:89:19:BE:CB:61
            X509v3 Authority Key Identifier:
                keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:73:bf:37:89:a0:44:14:3e:a8:51:86:c2:fc:0a:56:e9:7d:
         dc:9d:91:c4:14:06:29:12:56:bf:b8:af:9c:9a:97:27:a8:4d:
         d9:eb:ba:3d:33:68:49:7b:da:64:b7:61:55:4a:86:fd:18:1b:
         94:80:e5:d7:a0:9c:32:55:bc:5f:4a:8d:ec:74:63:6f:75:de:
         9f:5e:8e:0b:1f:ca:24:33:00:a5:f8:18:83:dc:48:a3:8a:0a:
         7a:89:a5:66:d9:c2:ab:21:f0:bb:cd:5f:b2:0c:c3:20:b8:bc:
         46:5a:f1:f6:5d:e3:2c:2e:c0:0b:bf:f2:d9:a6:c7:84:f3:20:
         eb:bd:3a:ba:f6:b9:e9:7d:55:7e:e3:85:90:3d:ec:0c:64:d6:
         ce:47:07:4b:2c:a7:f4:29:30:6f:95:d8:0d:0e:32:00:68:52:
         dc:64:c8:59:dc:3c:60:3d:43:17:b1:ae:89:71:3b:31:bb:16:
         62:47:4c:9b:9e:78:da:da:f0:65:0c:78:e9:b7:44:33:11:21:
         4e:60:2c:09:20:91:45:22:5e:ac:8f:e8:f3:ce:1b:37:f4:3d:
         51:8f:99:37:75:da:5a:93:c8:af:9f:82:89:44:88:49:bb:ab:
         82:bc:9b:a4:b1:f5:07:d3:1b:41:93:e8:89:e6:08:25:eb:35:
         9f:c3:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----