This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
File:                     DC566526072898BA252A37ABF91AC32DFFCDCB28.mft (raw, json)
Hash identifier:          opnUmKbWY4/ApZXTr2aww+Y5vG+HUsC0zD1D+NiqVz0=
Subject key identifier:   92:C9:92:1F:D2:3A:11:6E:0B:32:AA:E6:FD:93:57:F5:34:9B:2B:41
Authority key identifier: DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28
Certificate issuer:       /CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
Certificate serial:       679E05A5E33C4E68370327CDA155466F55B4B9AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
Manifest number:          55
Signing time:             Sun 25 Jan 2026 20:40:59 +0000
Manifest this update:     Sun 25 Jan 2026 20:35:59 +0000
Manifest next update:     Tue 27 Jan 2026 00:02:59 +0000
Files and hashes:         1: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: muO7hGKXHvC3T8bSCTNhPz+n78PR7f0AlhPMWQjify4=)
                          2: 323830343a336435633a3a2f33322d3438203d3e20323636353236.roa (hash: mH533Be2tht8K5psDXIQnJeE8QNu4JJ2clMQCKj33gY=)
                          3: DC566526072898BA252A37ABF91AC32DFFCDCB28.crl (hash: 0FOm/5Ypo6DmjMm25UC25WjTgbdzpmfdoutBineqXKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl
                          rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 23:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9e:05:a5:e3:3c:4e:68:37:03:27:cd:a1:55:46:6f:55:b4:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
        Validity
            Not Before: Jan 25 20:35:59 2026 GMT
            Not After : Jan 27 00:02:59 2026 GMT
        Subject: CN=92C9921FD23A116E0B32AAE6FD9357F5349B2B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4d:3a:50:17:d3:e2:9f:bb:dc:ea:c3:21:0b:
                    0e:94:75:29:45:ed:e1:1b:ae:60:2b:b2:6f:e9:bd:
                    52:3c:bf:7c:de:02:b7:12:8c:b4:0a:46:d6:2b:b5:
                    2b:48:16:49:28:46:7e:a4:0d:2b:28:69:0d:63:fd:
                    38:fa:12:8b:f2:9d:14:71:dc:4c:77:99:28:89:1e:
                    24:41:ed:bd:90:97:72:c4:b5:81:51:ca:0d:26:b1:
                    de:f5:95:05:ce:cd:73:94:b0:0b:af:de:68:c8:4e:
                    0c:90:23:8d:dc:fb:25:54:8d:e8:c9:71:67:79:9a:
                    2f:ab:86:a2:7a:32:d0:9e:e9:65:9f:a6:c7:a0:81:
                    94:db:6f:36:0f:fd:28:fd:5f:ba:e2:5e:2f:24:0d:
                    6f:7c:4e:cb:c8:ee:ae:ac:a9:1e:72:10:7c:0b:7b:
                    da:39:e4:99:fa:13:0d:6f:f0:12:78:3b:fc:41:b7:
                    0f:81:2d:d5:f7:44:46:d9:ca:ec:0c:c0:19:5a:4c:
                    da:14:65:33:5f:f8:d1:75:28:38:3d:02:54:fb:e5:
                    7d:3e:38:0a:44:fb:6c:f3:51:ad:c6:be:ff:87:10:
                    d6:30:ff:c2:90:ed:7e:3c:79:02:d6:1d:12:90:2f:
                    d4:1f:b0:e4:31:ee:c0:f1:7b:fb:fc:fe:f7:30:42:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:92:1F:D2:3A:11:6E:0B:32:AA:E6:FD:93:57:F5:34:9B:2B:41
            X509v3 Authority Key Identifier:
                keyid:DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:da:38:bd:70:2f:10:e8:a7:1c:07:c9:e8:54:5b:7f:7c:cb:
         25:14:6a:d5:1e:86:3e:d7:c1:90:18:fc:b1:42:c3:57:20:34:
         b1:f9:d8:ae:2a:e2:f0:f9:44:e0:ae:3b:d9:16:09:13:37:6d:
         4a:53:39:07:83:e3:6a:5f:93:6a:27:65:2b:5b:46:70:28:6a:
         89:39:06:9b:c0:ad:7d:91:b6:bf:9d:95:9a:b9:64:de:06:e4:
         c7:5e:38:83:9e:e1:93:e1:d1:10:44:e4:14:0f:6f:04:58:b0:
         93:64:d6:c8:d6:25:62:dc:df:85:e2:c6:15:a2:a8:e6:b7:ed:
         97:24:c7:e0:5c:c6:3c:31:2e:36:8a:7c:04:eb:b4:82:c9:b1:
         de:a1:38:df:6e:ee:fc:49:ee:8a:60:be:b9:41:55:2e:c1:fe:
         21:c3:90:be:a2:c5:55:91:ba:5d:62:12:c5:26:cd:3d:b4:fe:
         53:53:bb:89:44:07:10:b6:bd:4f:01:e7:e5:fc:c8:b8:88:f0:
         ac:72:cd:7a:ba:0b:49:11:ec:c1:b5:2b:82:85:ec:70:05:97:
         d5:04:43:2d:7d:b9:e0:1a:7e:f8:05:0a:cd:c3:17:0c:63:c8:
         c5:aa:1f:cb:bf:20:30:a0:26:d8:1a:d4:43:df:56:0d:1b:a7:
         f4:9d:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:21 2026 by rpki-client