This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft
File:                     D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json)
Hash identifier:          shTckyFuZfaSav/Ch2Zv7+hUhPhNqC+0qvH2fxoCbes=
Subject key identifier:   D3:B7:5B:8D:66:70:2D:E6:A7:9D:7F:8F:FB:3F:E5:2F:77:1B:A8:7C
Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE
Certificate issuer:       /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE
Certificate serial:       51A11ED3CF02669526E077C8D84C1D6421EA49FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft
Manifest number:          014E
Signing time:             Sun 25 Jan 2026 03:44:01 +0000
Manifest this update:     Sun 25 Jan 2026 03:39:01 +0000
Manifest next update:     Mon 26 Jan 2026 06:57:01 +0000
Files and hashes:         1: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=)
                          2: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: aAEKqavYPyiW+UR79P0q24nMRRQNwZKZSBpNR0sPSgg=)
                          3: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=)
                          4: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl
                          rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:1e:d3:cf:02:66:95:26:e0:77:c8:d8:4c:1d:64:21:ea:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE
        Validity
            Not Before: Jan 25 03:39:01 2026 GMT
            Not After : Jan 26 06:57:01 2026 GMT
        Subject: CN=D3B75B8D66702DE6A79D7F8FFB3FE52F771BA87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:3a:72:04:11:f2:f4:6c:38:4d:ae:e9:dc:
                    2c:74:42:6d:8f:cc:88:0e:63:06:d9:b1:27:47:39:
                    9b:db:24:b0:96:7c:a7:b7:9c:b6:9f:c8:30:f7:fe:
                    cc:38:2d:7c:8f:5e:28:5d:b6:8b:0c:ac:ff:4c:5a:
                    5c:b4:92:c0:96:9d:54:16:e0:1f:a9:80:f7:30:47:
                    5e:b6:99:69:87:0a:e1:9b:69:7d:06:0d:94:f4:51:
                    a2:8d:9f:4f:35:85:4c:4c:4e:44:5a:79:b4:53:ca:
                    66:34:f0:96:e7:91:f3:9f:44:bc:28:97:a9:f6:d1:
                    d0:21:3e:fa:57:3c:26:30:d4:e8:d2:79:06:b9:de:
                    88:bc:2f:b2:df:99:3e:ef:b8:7d:dc:6b:fe:4c:71:
                    66:1d:56:7d:57:af:f7:f6:ce:2b:bc:76:3a:0a:5d:
                    6b:57:0d:70:3f:e7:95:56:72:35:5e:ed:4e:bd:c5:
                    16:2d:a0:dc:f1:85:50:71:c1:69:66:f0:de:ef:14:
                    47:ce:1b:8c:36:d0:f9:fb:bd:65:17:cb:40:5f:97:
                    e0:c6:2f:14:14:c6:ea:c4:7e:41:92:9c:a6:11:39:
                    a6:6a:42:17:2b:f3:ca:e1:c3:8d:cc:aa:17:d0:59:
                    92:d3:b0:5c:b4:ff:94:94:01:f2:7c:d1:93:26:52:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:5B:8D:66:70:2D:E6:A7:9D:7F:8F:FB:3F:E5:2F:77:1B:A8:7C
            X509v3 Authority Key Identifier:
                keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:4c:dc:44:ab:79:25:31:83:ec:ea:18:0e:82:21:84:53:
         12:2f:02:9a:d2:fb:dc:dd:da:21:71:2c:c7:89:74:1e:26:c0:
         29:92:86:20:af:c7:7b:38:d6:cf:59:14:af:ed:34:35:13:95:
         c6:c2:20:c4:cf:77:76:08:50:ba:f7:9e:24:98:c8:33:61:96:
         c5:25:f9:a6:bf:0b:23:52:9b:7e:3a:6a:bd:00:1e:0c:3a:37:
         f6:53:4a:74:e3:ab:48:59:c7:4b:d7:5b:ea:e0:f4:4b:00:26:
         2f:86:93:56:14:d3:06:e4:99:31:e7:ca:91:6e:74:00:6e:12:
         53:b0:d8:9c:cd:a4:75:1c:1c:35:b5:3e:e8:10:c3:2a:21:88:
         c2:e7:0f:7a:2d:d2:80:4d:02:36:c8:af:46:f2:18:9b:fc:0f:
         62:3f:91:f0:79:5e:91:c0:bf:02:55:79:e0:7f:7b:e8:66:bb:
         03:4a:8f:79:27:12:49:8a:d8:c8:ed:ad:10:26:db:af:06:9b:
         b4:7d:05:de:ea:78:dd:fa:53:8d:b1:77:d8:2c:df:cd:6b:06:
         d7:d9:b0:f7:f4:b1:55:f2:43:87:14:fc:0e:e2:45:72:ef:2a:
         82:64:f1:47:57:72:04:37:4c:cc:09:a1:44:87:c4:01:f6:8a:
         2c:f6:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:30:23 2026 by rpki-client