This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
File:                     4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json)
Hash identifier:          4mvGPR+uJBQ/GRyNLyYWwuCFuRupDSH7cLdnQ0TNmmk=
Subject key identifier:   0F:D3:31:36:C7:FF:3F:96:E5:17:D0:30:29:CA:0A:14:92:5F:79:F4
Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D
Certificate issuer:       /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
Certificate serial:       57299970DBAA186B56010BB26DAADF5BEE6BF503
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
Manifest number:          FA
Signing time:             Sun 25 Jan 2026 08:57:01 +0000
Manifest this update:     Sun 25 Jan 2026 08:52:01 +0000
Manifest next update:     Mon 26 Jan 2026 12:20:01 +0000
Files and hashes:         1: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=)
                          2: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=)
                          3: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: 48BFUQwNfrxut2+Q6NeHIFRUNJ1BrLODnwfzfHtsBXo=)
                          4: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:99:70:db:aa:18:6b:56:01:0b:b2:6d:aa:df:5b:ee:6b:f5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
        Validity
            Not Before: Jan 25 08:52:01 2026 GMT
            Not After : Jan 26 12:20:01 2026 GMT
        Subject: CN=0FD33136C7FF3F96E517D03029CA0A14925F79F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:0c:65:13:f3:c4:f7:37:07:f1:10:34:fb:
                    8b:86:9d:08:ad:ee:bf:17:a0:a8:ba:40:48:a1:83:
                    d1:38:79:42:08:a0:87:61:c7:49:c8:62:3b:e9:56:
                    33:8a:35:34:11:bb:be:a1:c5:42:9a:47:ff:31:93:
                    37:cd:40:d3:7e:e2:f4:56:d6:08:e8:dd:b9:ae:29:
                    d4:74:8e:5d:2f:ca:bf:2a:e6:15:bb:a5:c1:89:a2:
                    9d:63:87:c0:b6:95:22:b1:bc:e9:6d:2e:95:cb:c9:
                    0a:90:a3:c5:bd:f6:03:0a:69:11:18:7c:74:1f:f2:
                    35:76:70:78:4c:59:37:ef:61:2c:b1:af:a0:ee:d1:
                    03:7b:f6:bd:f2:df:29:bb:9d:67:52:a6:5a:00:89:
                    6b:fe:22:d1:2d:5c:13:4b:c9:fe:1d:04:c9:94:47:
                    a9:20:01:82:ac:56:2c:2e:26:6e:eb:9d:bb:d5:44:
                    d3:15:ad:d2:fd:3a:40:4d:e9:e3:a8:e5:54:21:e2:
                    e1:8d:c0:00:68:6e:7d:9b:76:b8:2d:be:e5:b7:ee:
                    9d:fb:49:71:6c:6e:48:0a:69:bf:7e:ed:33:7a:4f:
                    50:e6:99:f6:6a:98:92:88:9e:5e:ea:1c:87:2b:06:
                    d9:ad:39:46:d6:5b:2b:fd:b7:85:9e:90:5b:6e:8b:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:31:36:C7:FF:3F:96:E5:17:D0:30:29:CA:0A:14:92:5F:79:F4
            X509v3 Authority Key Identifier:
                keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:22:bc:a8:f5:00:9c:c3:1f:78:cc:c6:b2:58:da:b6:35:
         76:8f:b2:05:b7:73:e8:14:f4:04:79:a0:16:34:df:e5:18:6e:
         30:fa:7c:b5:69:71:ca:12:aa:e4:6e:5b:f3:62:8d:e4:25:49:
         58:df:b0:6b:7d:ff:fa:96:b4:b4:f7:ac:f3:2f:6b:ff:50:4c:
         f6:d2:8a:ca:98:e9:27:4a:dc:5f:54:ce:90:9d:7f:26:3e:e4:
         9d:7f:b9:1c:e5:5b:83:2c:16:6d:a8:37:b3:eb:3e:8b:85:ea:
         6c:ce:61:8f:d7:6a:63:e5:18:76:1a:1c:f9:3c:66:2c:af:3e:
         94:d4:0e:84:b8:e0:f9:7f:ac:0a:b1:d9:71:9c:71:3e:d1:57:
         55:d7:5c:dd:37:2e:0e:6f:17:3e:f5:c1:c2:31:96:f9:b1:d9:
         c3:14:9e:2c:1b:50:1a:1b:29:ee:21:4f:95:66:7a:c4:b4:fa:
         dd:54:69:44:3e:d1:7b:cb:23:2f:4c:f1:bf:da:6b:4b:f0:71:
         17:3f:fc:9e:f7:a0:db:19:d8:ab:ef:a4:03:0d:71:a3:64:58:
         14:6a:1c:6e:d0:cb:47:15:16:8c:93:14:5a:37:fe:83:7a:12:
         43:6e:66:28:13:aa:43:b2:44:3c:2d:bc:87:a2:17:3f:ca:f1:
         3c:13:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:03:37 2026 by rpki-client