This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          XR3UUYncv1zlDZoCVOxweNhBJcpS5//uH1NttU56r4E=
Subject key identifier:   D3:8F:AD:8F:70:8C:AD:A1:51:08:E4:E6:55:5B:7D:1E:00:F2:72:FD
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       529EA5F1379D8C96BA74BB00B53452CEF2664AE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          03EA
Signing time:             Sun 25 Jan 2026 15:20:00 +0000
Manifest this update:     Sun 25 Jan 2026 15:15:00 +0000
Manifest next update:     Mon 26 Jan 2026 15:20:00 +0000
Files and hashes:         1: CA2ED340034D0368230850867C30E245990118A2.crl (hash: J5ClzWInJuC9aSE+nuvS0Sut8cnl17x/NPTla0EwRDc=)
                          2: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          3: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
                          4: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=)
                          5: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=)
                          6: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=)
                          7: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
                          8: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          9: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
                          10: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9e:a5:f1:37:9d:8c:96:ba:74:bb:00:b5:34:52:ce:f2:66:4a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Jan 25 15:15:00 2026 GMT
            Not After : Jan 26 15:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:40:ec:13:3d:e9:15:0f:79:bf:a7:24:ab:
                    fa:5e:53:27:0a:09:9c:33:64:fe:06:86:fa:b5:41:
                    8e:71:67:0d:59:a0:b3:b4:0a:13:d7:66:a5:a6:90:
                    2a:fd:88:d1:e1:15:07:3c:11:f9:26:dd:39:6b:2c:
                    e2:7b:4b:55:25:e2:83:7f:3d:af:9c:c5:1d:2d:5b:
                    3a:66:0b:e5:90:56:51:ac:2d:e4:57:6d:4f:5c:1c:
                    85:04:f3:4b:2b:21:f3:a5:fe:b4:81:69:c1:1b:67:
                    21:30:79:ed:08:a3:83:58:79:59:76:37:94:e8:41:
                    05:07:df:3b:9d:d8:4f:71:dc:a3:81:52:33:66:c3:
                    be:c5:4c:3b:5a:bf:94:5c:b3:2a:aa:49:53:49:0e:
                    5b:8f:da:23:79:ec:b5:cb:e0:a6:f6:88:32:2e:63:
                    26:b7:9c:5d:e5:08:d1:a8:69:db:35:81:06:5a:41:
                    14:66:15:ba:49:2e:dd:07:ba:f5:b3:bb:76:d9:c0:
                    f1:f0:da:d1:aa:7e:15:e1:05:38:14:ac:9d:4e:58:
                    e1:c5:6e:4a:5f:63:c8:a3:84:25:14:b9:ec:64:a9:
                    4f:b8:c9:86:71:de:96:57:4f:88:cd:6f:d7:72:c5:
                    d2:a6:d3:88:2c:89:15:75:38:b5:c8:fb:7b:2e:00:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8F:AD:8F:70:8C:AD:A1:51:08:E4:E6:55:5B:7D:1E:00:F2:72:FD
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:15:a4:1f:7d:33:52:d0:09:60:d0:09:98:f2:36:b5:07:
         36:ab:f9:7a:a7:d8:30:22:6b:36:34:14:1d:f0:73:6b:54:b3:
         c7:1b:d1:f1:1a:47:5d:83:c2:da:f2:f5:3c:a0:c7:eb:ba:0c:
         a7:ec:f8:b4:23:8e:35:61:e0:d0:2b:84:24:98:e5:4c:41:0d:
         f0:1e:47:e8:4d:fe:cf:13:b4:4d:95:b8:ff:37:d5:7f:8f:d8:
         16:e9:16:c7:ed:6f:0c:43:74:ef:cb:5d:a2:30:5e:a0:67:f0:
         c0:7b:6b:22:83:83:2b:81:fb:ef:ce:8c:55:d3:55:4b:be:01:
         77:50:48:81:62:08:b7:81:e7:f8:4d:83:15:b1:53:46:25:91:
         a5:85:87:bb:be:a1:e2:20:55:f5:f5:41:48:45:e8:95:e1:32:
         8e:1b:22:53:59:2b:a4:66:ac:0b:7b:94:5d:05:30:f4:4a:0a:
         22:54:b2:1e:14:0f:91:dc:b0:ba:0f:90:cc:74:0b:81:94:50:
         8c:79:79:61:74:53:c7:ca:28:3b:19:95:9b:4a:17:21:94:55:
         8c:fd:2f:e1:3e:04:40:0c:8b:99:5e:95:70:16:53:98:1d:2c:
         12:10:6f:a5:0a:8c:eb:45:7f:75:1e:cd:b2:17:01:1a:e6:34:
         53:18:c9:ca
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUUp6l8TedjJa6dLsAtTRSzvJmSuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNjAxMjUxNTE1MDBaFw0yNjAxMjYxNTIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VDQTQwRUMxMzNERTkxNTBG
NzlCRkE3MjRBQkZBNUU1MzI3MEEwOTlDMzM2NEZFMDY4NkZBQjU0MThFNzE2NzBE
NTlBMEIzQjQwQTEzRDc2NkE1QTY5MDJBRkQ4OEQxRTExNTA3M0MxMUY5MjZERDM5
NkIyQ0UyN0I0QjU1MjVFMjgzN0YzREFGOUNDNTFEMkQ1QjNBNjYwQkU1OTA1NjUx
QUMyREU0NTc2RDRGNUMxQzg1MDRGMzRCMkIyMUYzQTVGRUI0ODE2OUMxMUI2NzIx
MzA3OUVEMDhBMzgzNTg3OTU5NzYzNzk0RTg0MTA1MDdERjNCOUREODRGNzFEQ0Ez
ODE1MjMzNjZDM0JFQzU0QzNCNUFCRjk0NUNCMzJBQUE0OTUzNDkwRTVCOEZEQTIz
NzlFQ0I1Q0JFMEE2RjY4ODMyMkU2MzI2Qjc5QzVERTUwOEQxQTg2OURCMzU4MTA2
NUE0MTE0NjYxNUJBNDkyRUREMDdCQUY1QjNCQjc2RDlDMEYxRjBEQUQxQUE3RTE1
RTEwNTM4MTRBQzlENEU1OEUxQzU2RTRBNUY2M0M4QTM4NDI1MTRCOUVDNjRBOTRG
QjhDOTg2NzFERTk2NTc0Rjg4Q0Q2RkQ3NzJDNUQyQTZEMzg4MkM4OTE1NzUzOEI1
QzhGQjdCMkUwMEM3QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzspA7BM96RUPeb+nJKv6XlMnCgmcM2T+Bob6tUGOcWcNWaCztAoT
12alppAq/YjR4RUHPBH5Jt05ayzie0tVJeKDfz2vnMUdLVs6ZgvlkFZRrC3kV21P
XByFBPNLKyHzpf60gWnBG2chMHntCKODWHlZdjeU6EEFB987ndhPcdyjgVIzZsO+
xUw7Wr+UXLMqqklTSQ5bj9ojeey1y+Cm9ogyLmMmt5xd5QjRqGnbNYEGWkEUZhW6
SS7dB7r1s7t22cDx8NrRqn4V4QU4FKydTljhxW5KX2PIo4QlFLnsZKlPuMmGcd6W
V0+IzW/XcsXSptOILIkVdTi1yPt7LgDHuwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FNOPrY9wjK2hUQjk5lVbfR4A8nL9MB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX
aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1
MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGZLFaQffTNS0Alg0AmY8ja1
Bzar+Xqn2DAiazY0FB3wc2tUs8cb0fEaR12Dwtry9Tygx+u6DKfs+LQjjjVh4NAr
hCSY5UxBDfAeR+hN/s8TtE2VuP831X+P2BbpFsftbwxDdO/LXaIwXqBn8MB7ayKD
gyuB++/OjFXTVUu+AXdQSIFiCLeB5/hNgxWxU0YlkaWFh7u+oeIgVfX1QUhF6JXh
Mo4bIlNZK6RmrAt7lF0FMPRKCiJUsh4UD5HcsLoPkMx0C4GUUIx5eWF0U8fKKDsZ
lZtKFyGUVYz9L+E+BEAMi5lelXAWU5gdLBIQb6UKjOtFf3UezbIXARrmNFMYyco=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:44:18 2026 by rpki-client