This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
File:                     DFBB164DBC72494619B08F0FA235F18F7F107520.mft (raw, json)
Hash identifier:          tG4ZvrlkHrD8LVpq4KGOJSCOEwIZfBNAEPqvrFZmwyE=
Subject key identifier:   21:38:93:A1:23:26:BC:D1:91:82:AF:BA:97:97:91:76:07:D9:AF:8B
Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20
Certificate issuer:       /CN=DFBB164DBC72494619B08F0FA235F18F7F107520
Certificate serial:       2DB2900696F7DA15BE0B4B4337CAD6F7510EF840
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
Manifest number:          01E0
Signing time:             Sun 25 Jan 2026 06:29:55 +0000
Manifest this update:     Sun 25 Jan 2026 06:24:55 +0000
Manifest next update:     Mon 26 Jan 2026 08:43:55 +0000
Files and hashes:         1: 3137372e37322e34382e302f32312d3234203d3e20323632353431.roa (hash: nWmuj4phma6WvF8Ml19h8Xm8XXmRBDsPTTbq1HChm4M=)
                          2: DFBB164DBC72494619B08F0FA235F18F7F107520.crl (hash: 1VdRMSXaIuY5op1DXsspKCHUCFGI7qHjsAeHKUB282U=)
                          3: 3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (hash: IPHv9O5Pug97aXu+8gkHhnDu0MN7EgfcGaRDHIk3+FU=)
                          4: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (hash: zjAZcmBZeLItDUB8YXVke5uQmycIa3e/w8aXnKf9Vdk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl
                          rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b2:90:06:96:f7:da:15:be:0b:4b:43:37:ca:d6:f7:51:0e:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520
        Validity
            Not Before: Jan 25 06:24:55 2026 GMT
            Not After : Jan 26 08:43:55 2026 GMT
        Subject: CN=213893A12326BCD19182AFBA9797917607D9AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:e6:11:16:ca:d0:b8:a5:b8:64:52:fc:27:
                    a2:b9:d5:08:8c:dd:a5:fc:ed:fd:0a:ae:12:75:aa:
                    05:e8:14:6e:56:39:90:ac:65:c9:34:c4:6f:c0:c5:
                    76:d6:da:f9:71:85:c9:e4:62:44:f8:75:7d:12:a7:
                    8f:1a:4c:10:a5:5d:2c:b2:92:a1:9e:5d:d1:22:77:
                    4e:52:f2:58:54:ba:03:f2:96:8d:d8:ce:ed:b9:01:
                    a7:d4:d8:0b:9e:db:9b:16:a2:13:fc:a5:a9:e0:32:
                    14:a7:af:42:92:76:30:f0:2a:28:f6:ae:bf:6f:5a:
                    9c:72:01:ee:11:93:c7:79:30:79:fc:3d:77:25:48:
                    10:20:a2:da:83:52:31:09:75:5e:4f:34:d5:cb:a5:
                    2c:08:d7:4c:d9:23:5c:48:76:17:4f:97:de:90:87:
                    50:4a:e7:4d:57:15:08:ff:13:1c:be:22:3e:d0:e2:
                    2f:d7:e1:fb:5e:55:0d:7e:26:2f:54:cb:82:3c:fc:
                    cc:82:b3:08:bb:4b:8e:4a:07:0f:48:14:81:4e:cf:
                    15:c7:17:66:67:09:b9:db:ce:c2:65:db:f6:ae:14:
                    ff:a7:99:33:0d:b6:47:ef:67:80:eb:3b:90:52:16:
                    32:a9:8d:ba:45:47:e9:f4:6a:8a:51:27:f1:8e:64:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:93:A1:23:26:BC:D1:91:82:AF:BA:97:97:91:76:07:D9:AF:8B
            X509v3 Authority Key Identifier:
                keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:14:05:72:74:7d:07:d2:26:5a:5e:a9:f2:27:67:fd:8d:2e:
         70:2e:81:0d:f4:d4:85:69:95:8f:c0:69:2d:33:b6:44:64:f9:
         f5:8c:ae:43:65:13:19:0d:39:1a:4b:dc:f5:30:83:ec:1f:77:
         75:ff:d5:f7:6f:fe:3c:be:45:02:c5:56:3e:19:ec:c6:3e:44:
         1d:24:41:4c:e8:80:7b:c4:3e:8c:48:10:2a:27:a7:40:0d:3e:
         ae:1c:da:b5:1f:f1:4b:a1:cc:02:44:53:76:39:58:64:5b:5f:
         7f:02:c6:f1:9a:77:59:18:33:68:a0:25:08:4c:3f:3e:d5:3f:
         32:e7:ca:68:63:dc:f8:82:f3:6f:71:77:41:1f:ac:c1:a3:a6:
         ec:85:2c:82:92:e5:b8:c9:52:01:ff:7e:52:94:f8:29:9b:77:
         0e:f2:1a:36:67:27:01:7c:0c:3a:a9:91:38:0b:db:d7:f6:10:
         d9:e8:99:0d:0a:c0:ea:60:00:5b:7f:c0:43:dd:9c:5b:90:6b:
         7f:4a:ce:cc:b3:7e:02:59:98:49:eb:0c:67:f6:88:85:4b:18:
         f1:08:08:11:48:18:ca:f9:26:84:9f:66:74:a3:90:59:86:65:
         b1:e6:92:48:b1:7d:b4:96:56:30:3a:2d:18:80:4d:33:1f:9b:
         0c:12:6d:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULbKQBpb32hW+C0tDN8rW91EO+EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCQjE2NERCQzcyNDk0NjE5QjA4RjBGQTIzNUYxOEY3
RjEwNzUyMDAeFw0yNjAxMjUwNjI0NTVaFw0yNjAxMjYwODQzNTVaMDMxMTAvBgNV
BAMTKDIxMzg5M0ExMjMyNkJDRDE5MTgyQUZCQTk3OTc5MTc2MDdEOUFGOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhOYRFsrQuKW4ZFL8J6K51QiM
3aX87f0KrhJ1qgXoFG5WOZCsZck0xG/AxXbW2vlxhcnkYkT4dX0Sp48aTBClXSyy
kqGeXdEid05S8lhUugPylo3Yzu25AafU2Aue25sWohP8pangMhSnr0KSdjDwKij2
rr9vWpxyAe4Rk8d5MHn8PXclSBAgotqDUjEJdV5PNNXLpSwI10zZI1xIdhdPl96Q
h1BK501XFQj/Exy+Ij7Q4i/X4fteVQ1+Ji9Uy4I8/MyCswi7S45KBw9IFIFOzxXH
F2ZnCbnbzsJl2/auFP+nmTMNtkfvZ4DrO5BSFjKpjbpFR+n0aopRJ/GOZArfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUITiToSMmvNGRgq+6l5eRdgfZr4swHwYDVR0j
BBgwFoAU37sWTbxySUYZsI8PojXxj38QdSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVh
NG4vMC9ERkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkIxNjREQkM3MjQ5NDYx
OUIwOEYwRkEyMzVGMThGN0YxMDc1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVhNG4vMC9E
RkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAURQFcnR9B9ImWl6p8idn/Y0ucC6BDfTUhWmVj8BpLTO2RGT59YyuQ2UTGQ05
Gkvc9TCD7B93df/V92/+PL5FAsVWPhnsxj5EHSRBTOiAe8Q+jEgQKienQA0+rhza
tR/xS6HMAkRTdjlYZFtffwLG8Zp3WRgzaKAlCEw/PtU/MufKaGPc+ILzb3F3QR+s
waOm7IUsgpLluMlSAf9+UpT4KZt3DvIaNmcnAXwMOqmROAvb1/YQ2eiZDQrA6mAA
W3/AQ92cW5Brf0rOzLN+AlmYSesMZ/aIhUsY8QgIEUgYyvkmhJ9mdKOQWYZlseaS
SLF9tJZWMDotGIBNMx+bDBJtCA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:41 2026 by rpki-client