This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
File:                     38025C3CE376357918C078D8E62D989FFD0406EC.mft (raw, json)
Hash identifier:          j8gEbN0SidNDuYvkupKtT2OmO7PiuFmFiz+/6W0OWqw=
Subject key identifier:   FE:49:D9:3F:79:A2:01:7A:49:BB:46:36:91:0A:D7:94:13:77:7F:10
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       469B1A20CE070C99FEB93073E77E7AC897ECAAED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
Manifest number:          01A7
Signing time:             Sun 25 Jan 2026 02:21:40 +0000
Manifest this update:     Sun 25 Jan 2026 02:16:40 +0000
Manifest next update:     Mon 26 Jan 2026 02:48:40 +0000
Files and hashes:         1: 34352e3138382e33382e302f32342d3234203d3e20323639353038.roa (hash: aa4+7l40yjEXMFYEWjKhiCZGQD2B3x1U7KlJQ2wJtZg=)
                          2: 323830343a363562303a383030303a3a2f33332d3333203d3e20323639353038.roa (hash: RO6nw0i1EKNlYGgEsHrSorj5JcmlZ307XZPB5fYAGMo=)
                          3: 323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa (hash: zLlviauGM91SL5Qzz9ahG7evmv7WcuR21o5AKs+HaL4=)
                          4: 323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (hash: iJvs8rfWE8S/PUFhBHvMlGo6J1eOCLRTzXMq483PAn4=)
                          5: 34352e3138382e33392e302f32342d3234203d3e20323639353038.roa (hash: LbKlUIYcNxtv5sYMZNyUAU2PljLlb0OdN553PBDCEyM=)
                          6: 323830343a363562303a3a2f33342d3334203d3e20323639353038.roa (hash: EffEsdxkAER0Fj0xM0pNsunwfYEswky56p5DS+4NX34=)
                          7: 323830343a363562303a3a2f33322d3332203d3e20323639353038.roa (hash: 5/Teq7VhHEqk1CmpJQNroEWzgLoeAwoLipvY2OZ6XjY=)
                          8: 34352e3138382e33362e302f32332d3233203d3e20323639353038.roa (hash: t+YZRhhtCELc5qgWprYNvxduaOTEixYcoSyrCx4TiuM=)
                          9: 323830343a363562303a3a2f33332d3333203d3e20323639353038.roa (hash: DyPwCo1vjapgoNi4InH3SoL/pvw8scLsjZb0vWIXauc=)
                          10: 34352e3138382e33382e302f32332d3233203d3e20323639353038.roa (hash: 5BAoKY7mIVJC41pKAc0RT4IItwg3WpuqNEstGETj12I=)
                          11: 34352e3138382e33362e302f32322d3232203d3e20323639353038.roa (hash: FvxGMqMkjxcDqPIQrrpPhMkznlxANXiP5oWUJ7//PLI=)
                          12: 34352e3138382e33362e302f32342d3234203d3e20323639353038.roa (hash: Ve0+wc2+YcRFqyJlVSGd4ST9l9dEKqWpxTN7pLJvXLg=)
                          13: 34352e3138382e33372e302f32342d3234203d3e20323639353038.roa (hash: GNFFn7GD0kT1CNLyNC0zlxkREJdG8hKhbDAO4oBIfyU=)
                          14: 323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa (hash: iiboG93cUwq9aiXqtF/C+qU239+P73vFA7fCFy9GPHA=)
                          15: 38025C3CE376357918C078D8E62D989FFD0406EC.crl (hash: E5hGuQ5ZhoX2u2NKTq2uGeZtRbbT3l9p5R5B5JSU11Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9b:1a:20:ce:07:0c:99:fe:b9:30:73:e7:7e:7a:c8:97:ec:aa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Jan 25 02:16:40 2026 GMT
            Not After : Jan 26 02:48:40 2026 GMT
        Subject: CN=FE49D93F79A2017A49BB4636910AD79413777F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:92:8e:97:c5:f2:49:b9:70:a8:a7:80:70:
                    14:e3:59:e9:ed:62:ac:e2:5c:98:5c:71:98:a3:31:
                    77:23:0b:db:0d:b0:76:c9:6e:37:9c:1f:2b:d2:f2:
                    ea:d4:da:d4:52:06:18:d8:48:eb:10:4e:cd:6e:5a:
                    47:de:c8:35:ba:82:32:ab:8f:bf:3f:ce:16:87:7c:
                    b7:9c:69:83:fb:d6:b9:84:dd:22:c6:b0:54:a0:44:
                    ef:f5:ee:c0:73:da:41:f8:ec:a8:e2:05:cc:6b:08:
                    0f:e1:bf:46:52:90:fb:dd:24:b1:d6:ab:05:b3:88:
                    f7:27:e3:87:77:3f:ea:ce:93:c9:0e:37:b5:d6:cf:
                    04:dc:7b:90:33:a6:f0:96:67:29:66:bb:1a:60:cf:
                    57:5b:c7:43:f0:f1:cc:01:4d:91:ac:c9:31:da:41:
                    aa:26:88:75:d5:c6:cd:bd:10:6c:93:02:39:fb:ad:
                    54:34:f3:8a:ef:ae:8f:41:25:ab:c6:91:ff:bf:b3:
                    c9:9e:cf:cd:51:62:c2:85:96:8f:4a:03:15:c9:8f:
                    e3:51:68:fb:b1:37:c6:e1:0e:bc:d9:4a:09:0b:d4:
                    43:83:30:10:da:0f:f4:a0:59:3e:c9:56:6e:3f:49:
                    03:e7:6c:3f:f8:91:ff:e3:03:2a:ef:9e:67:c4:4c:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:D9:3F:79:A2:01:7A:49:BB:46:36:91:0A:D7:94:13:77:7F:10
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:6b:58:23:07:b1:ad:9c:c5:b6:3f:0d:6a:2c:b3:80:f9:
         f6:cf:87:22:c4:a5:5a:b3:0f:04:39:77:76:ce:5a:39:90:9f:
         da:64:f7:19:2d:44:cb:0c:51:75:84:10:8a:f2:9d:a4:05:cf:
         3f:ce:59:ab:b9:26:1a:b1:83:63:5b:33:34:71:ba:5d:c7:bd:
         3e:55:d2:e5:fa:0c:70:dd:5d:c4:19:75:96:86:d5:3c:29:fd:
         ce:c9:24:4d:88:c3:99:b0:12:d7:ec:70:5c:6e:f8:94:5f:5c:
         e9:0b:89:01:73:67:17:4e:c6:50:ae:da:1a:6b:25:f1:54:e5:
         22:93:47:ec:67:76:a1:d3:56:21:cd:ce:c7:fd:57:18:e4:78:
         35:b7:fc:6e:90:cc:c3:8f:07:dd:d1:0e:56:9e:d1:f5:25:a7:
         21:56:3b:4c:96:08:6f:fc:cd:26:72:f5:b1:69:98:f8:b9:19:
         b2:73:45:75:a7:10:91:09:52:c0:10:5d:14:a8:dc:78:bf:51:
         cd:5f:f2:f5:f2:49:75:c1:74:1a:eb:31:d1:09:86:b6:3e:a3:
         bf:a2:38:c3:d8:08:7e:37:25:bc:73:06:8a:a0:17:be:25:03:
         d2:0b:12:db:d6:6d:92:d6:ef:51:73:29:d4:22:3a:2e:c3:21:
         2e:ba:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:41:07 2026 by rpki-client