This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
File:                     CDB4502328A17F5E10125CA4554E967C912340D3.mft (raw, json)
Hash identifier:          T38g2I1Q5jOef6ZJST9GNerxtCYWv/zLL3YmDMgl8a4=
Subject key identifier:   5F:D9:A4:02:AE:B9:60:56:24:CF:58:08:4C:86:2C:61:9B:58:68:BD
Authority key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3
Certificate issuer:       /CN=CDB4502328A17F5E10125CA4554E967C912340D3
Certificate serial:       2304B00F38B2FB1345F204E4BF3C0CDF68274AD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
Manifest number:          BF
Signing time:             Sat 24 Jan 2026 22:55:11 +0000
Manifest this update:     Sat 24 Jan 2026 22:50:11 +0000
Manifest next update:     Sun 25 Jan 2026 22:56:11 +0000
Files and hashes:         1: CDB4502328A17F5E10125CA4554E967C912340D3.crl (hash: mZREYcpWhOTOLWMsmClk3l/xpnMA4w+r8NGhyJGoij8=)
                          2: 323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (hash: ERlKqTm+47mLiWypT+aX8LH7xhbod7WTHoUYvN7TwbY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 22:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:04:b0:0f:38:b2:fb:13:45:f2:04:e4:bf:3c:0c:df:68:27:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4502328A17F5E10125CA4554E967C912340D3
        Validity
            Not Before: Jan 24 22:50:11 2026 GMT
            Not After : Jan 25 22:56:11 2026 GMT
        Subject: CN=5FD9A402AEB9605624CF58084C862C619B5868BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:d2:df:b5:98:5e:a9:3e:d4:3f:96:a1:46:
                    b8:08:af:3e:e9:11:19:37:67:0e:55:c4:d9:e0:c4:
                    71:3a:7d:57:52:5f:08:a4:29:df:b2:a3:52:9d:0d:
                    09:03:85:7d:8e:50:49:3d:bd:08:b8:68:76:b4:f2:
                    37:63:9b:1c:fb:4d:02:56:b6:8e:5e:ff:24:88:3e:
                    5a:cb:d9:d8:aa:f0:66:59:d9:c6:4b:cb:91:73:4c:
                    c1:25:78:d5:92:d6:da:71:a7:6b:41:73:67:c4:02:
                    24:94:c0:48:2b:2d:b9:87:59:a2:88:ee:f9:48:7d:
                    c6:a3:0f:26:a0:5c:21:31:90:33:f0:71:40:54:ac:
                    c4:e8:e7:18:87:bc:62:63:77:05:a9:f6:57:d3:f3:
                    7a:81:1c:21:6a:b6:bb:0b:52:f8:ea:3a:15:8e:ec:
                    f8:18:6a:2a:67:51:ea:23:65:4f:b8:ea:41:6d:79:
                    c8:7e:91:a1:c8:94:4c:aa:b2:9f:b0:12:f1:ce:f1:
                    50:dd:7c:29:eb:0c:84:a1:b0:73:f6:d3:16:24:f3:
                    52:78:3c:d0:0c:6a:93:6a:fe:0d:9a:45:8d:df:90:
                    22:4e:4e:7a:3b:f1:96:b3:dc:57:19:34:0b:fa:95:
                    be:c5:ac:d3:91:c3:87:94:35:d0:1d:69:db:ba:1a:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D9:A4:02:AE:B9:60:56:24:CF:58:08:4C:86:2C:61:9B:58:68:BD
            X509v3 Authority Key Identifier:
                keyid:CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:e3:26:9b:6c:61:8b:fc:b0:43:14:b5:49:db:40:49:81:
         9d:05:4e:e8:89:94:e5:1d:b3:75:fe:ed:bf:79:af:50:e6:6d:
         8a:11:40:42:13:83:09:50:32:87:35:11:c9:c2:d5:2e:0f:9b:
         4e:5b:7b:74:18:49:97:17:d1:ed:54:25:6b:aa:7a:47:c3:b0:
         f5:3f:4d:a2:0a:4a:c5:c2:1a:c7:78:e5:9f:47:07:9e:93:aa:
         b3:03:75:9d:2f:b0:34:3d:bb:6f:11:01:fb:99:df:9b:66:e4:
         2e:ef:1b:e3:c7:c6:bd:48:b4:30:6d:e5:fa:48:e3:f4:77:44:
         42:50:07:53:19:a3:2c:ca:87:b9:93:27:f5:93:5b:bf:b4:f1:
         8e:ef:e4:80:37:76:e1:ed:3a:9c:da:cf:93:54:e3:7c:b0:0e:
         e3:e1:05:bf:4e:bd:92:f9:c0:a7:96:0f:33:1a:b7:77:a6:2d:
         85:bc:01:a3:08:92:c3:55:88:72:ae:e5:72:b5:73:40:82:98:
         d1:a2:97:4b:e3:ac:1a:a1:40:a6:aa:55:15:9d:fe:47:dd:d4:
         c8:4f:b8:fb:83:62:72:9c:ba:f0:a4:a3:1d:bf:47:6b:9f:db:
         d7:76:2c:ae:02:0e:3d:0a:97:5e:5d:f0:f6:05:7e:09:88:53:
         05:56:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----