This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
File:                     D27F46706288934EA75FEFCBDB933497E0E92077.mft (raw, json)
Hash identifier:          zOeGYtpr9ta3wxqP75P1q425EWAigtPxs5bDmvodmgs=
Subject key identifier:   A2:D4:B3:F1:15:88:D7:D1:F4:4A:55:5F:C1:40:BF:71:D8:BB:1B:D9
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       5B289DFFEC729902106769D2D8A14147AB0848E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
Manifest number:          0376
Signing time:             Sun 25 Jan 2026 09:48:41 +0000
Manifest this update:     Sun 25 Jan 2026 09:43:41 +0000
Manifest next update:     Mon 26 Jan 2026 11:39:41 +0000
Files and hashes:         1: 323830343a343133343a383032303a3a2f34342d3434203d3e20323636303130.roa (hash: cg1jl41BpyWpdDhJpE2N8Rxwe8o4kLVbfNXZvOkUWuc=)
                          2: D27F46706288934EA75FEFCBDB933497E0E92077.crl (hash: WDS/hRtzHbrwYBbGRGWEAyMguraBkX3EUZ5qrckldBc=)
                          3: 3138312e3139312e3131322e302f32322d3234203d3e20323636303130.roa (hash: bw1lcTX85wDUcUgNY48u1xEsYJt72cubg7EHZa5F7ro=)
                          4: 323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (hash: xzEnl3gtC8KA7OYBN4dSw4oRCvSszmBfEuZV4+TOdpc=)
                          5: 323830343a343133343a383033303a3a2f34342d3434203d3e20323636303130.roa (hash: 2pxEU75duhNAWIqEmuWaO+yhf8KHIV5cgXj4wbZ5FJk=)
                          6: 323830343a343133343a383031303a3a2f34342d3434203d3e20323636303130.roa (hash: YdWUvvxWDsaoDIQ14NU4wS6j/OAGJz9ksxPrmyLs7UQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
                          rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:28:9d:ff:ec:72:99:02:10:67:69:d2:d8:a1:41:47:ab:08:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Jan 25 09:43:41 2026 GMT
            Not After : Jan 26 11:39:41 2026 GMT
        Subject: CN=A2D4B3F11588D7D1F44A555FC140BF71D8BB1BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:22:a6:cb:78:ac:01:93:8d:a2:bd:94:b5:
                    05:a5:e8:3f:0c:9e:c1:f9:2c:33:07:f9:89:f4:5f:
                    ad:77:05:01:30:43:bd:07:b6:fc:8c:d1:ca:1b:28:
                    ca:3e:03:62:ba:89:10:e9:06:a3:1a:f8:93:ab:0e:
                    00:85:0d:24:46:76:1d:31:7c:8b:dc:22:ff:8b:9e:
                    fa:ea:53:a8:0a:62:18:d0:12:ee:c8:b9:0f:b7:e4:
                    f4:5b:c9:90:4b:19:45:34:ed:c3:49:a8:ac:e7:86:
                    b8:d7:9c:8d:4b:bb:1b:bd:b7:7a:6a:c5:c5:ce:09:
                    ad:ff:b1:73:85:1e:6e:f4:0b:7a:48:bf:75:33:96:
                    ef:1f:23:7c:2e:b6:be:8a:00:be:8f:1c:68:bf:c6:
                    09:e5:84:bc:8b:7b:84:30:da:16:24:7a:9f:4c:c0:
                    5f:84:b6:25:60:1d:db:27:9a:13:2a:7d:c1:0a:09:
                    2c:04:6e:47:00:2d:b6:58:1e:e2:53:43:a8:28:9f:
                    8b:c3:18:a6:14:75:64:10:0b:b6:fb:cc:06:a7:80:
                    de:c9:b6:64:2a:57:dc:4c:da:f9:4c:a7:32:58:f4:
                    e2:61:7d:25:68:f8:55:19:19:6a:41:41:3d:90:03:
                    81:d4:1b:41:d2:87:55:0a:ac:87:82:34:8f:96:a3:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:B3:F1:15:88:D7:D1:F4:4A:55:5F:C1:40:BF:71:D8:BB:1B:D9
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:11:97:f6:11:2e:85:c6:3a:b7:c6:65:b9:63:63:a8:d4:d0:
         49:fc:d5:a0:70:84:74:77:9d:ff:43:3d:b8:22:5c:6e:fd:11:
         34:fe:3b:5d:0e:dd:6b:62:50:77:22:6a:b2:bc:c0:b4:1c:e0:
         a0:bc:55:e3:00:3b:48:35:71:ce:18:77:47:3d:ad:82:c4:dc:
         13:bc:92:a6:47:6e:5d:91:2c:67:37:e4:22:71:32:39:71:0a:
         bb:98:40:30:7e:f0:2a:a9:9c:75:a6:2b:26:52:94:19:52:05:
         4f:c4:67:50:00:c9:f0:83:2d:ed:95:f3:7d:d6:94:bf:dd:a5:
         a0:fc:bc:44:02:da:5e:f2:02:86:f6:2c:fc:0e:e9:8a:21:29:
         32:3f:0c:28:60:d8:dd:80:0c:f2:d8:98:a9:e8:b6:a6:48:28:
         a8:85:f4:ba:d0:b0:08:4c:3a:8f:b7:55:e9:ea:05:ce:56:91:
         0c:01:7f:f1:a6:4f:d8:7e:bb:53:fe:41:2a:2b:99:5e:10:c7:
         1d:bd:67:c2:84:68:2a:b6:bd:50:38:e9:23:db:36:8e:b7:24:
         dc:3d:38:dd:ba:c2:ca:8a:1b:27:cc:26:dc:e4:ec:b2:6c:ae:
         fa:39:8c:78:6d:b3:82:c9:e9:58:99:06:03:2f:16:e6:03:04:
         67:ca:e8:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWyid/+xymQIQZ2nS2KFBR6sISOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3RjQ2NzA2Mjg4OTM0RUE3NUZFRkNCREI5MzM0OTdF
MEU5MjA3NzAeFw0yNjAxMjUwOTQzNDFaFw0yNjAxMjYxMTM5NDFaMDMxMTAvBgNV
BAMTKEEyRDRCM0YxMTU4OEQ3RDFGNDRBNTU1RkMxNDBCRjcxRDhCQjFCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYiKmy3isAZONor2UtQWl6D8M
nsH5LDMH+Yn0X613BQEwQ70HtvyM0cobKMo+A2K6iRDpBqMa+JOrDgCFDSRGdh0x
fIvcIv+LnvrqU6gKYhjQEu7IuQ+35PRbyZBLGUU07cNJqKznhrjXnI1Luxu9t3pq
xcXOCa3/sXOFHm70C3pIv3Uzlu8fI3wutr6KAL6PHGi/xgnlhLyLe4Qw2hYkep9M
wF+EtiVgHdsnmhMqfcEKCSwEbkcALbZYHuJTQ6gon4vDGKYUdWQQC7b7zAangN7J
tmQqV9xM2vlMpzJY9OJhfSVo+FUZGWpBQT2QA4HUG0HSh1UKrIeCNI+Wo+QPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUotSz8RWI19H0SlVfwUC/cdi7G9kwHwYDVR0j
BBgwFoAU0n9GcGKIk06nX+/L25M0l+DpIHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtrQkF2QnBZUng2ZnZ3V25KYzdtRFdxYWJtYVhRQWF5dXRSS1M3ZEZ5
TWkvMS9EMjdGNDY3MDYyODg5MzRFQTc1RkVGQ0JEQjkzMzQ5N0UwRTkyMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyN0Y0NjcwNjI4ODkzNEVB
NzVGRUZDQkRCOTMzNDk3RTBFOTIwNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtrQkF2QnBZUng2ZnZ3V25KYzdtRFdxYWJtYVhRQWF5dXRSS1M3ZEZ5TWkvMS9E
MjdGNDY3MDYyODg5MzRFQTc1RkVGQ0JEQjkzMzQ5N0UwRTkyMDc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcxGX9hEuhcY6t8ZluWNjqNTQSfzVoHCEdHed/0M9uCJcbv0RNP47XQ7da2JQ
dyJqsrzAtBzgoLxV4wA7SDVxzhh3Rz2tgsTcE7ySpkduXZEsZzfkInEyOXEKu5hA
MH7wKqmcdaYrJlKUGVIFT8RnUADJ8IMt7ZXzfdaUv92loPy8RALaXvIChvYs/A7p
iiEpMj8MKGDY3YAM8tiYqei2pkgoqIX0utCwCEw6j7dV6eoFzlaRDAF/8aZP2H67
U/5BKiuZXhDHHb1nwoRoKra9UDjpI9s2jrck3D043brCyoobJ8wm3OTssmyu+jmM
eG2zgsnpWJkGAy8W5gMEZ8romA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:34 2026 by rpki-client