This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
File:                     687A6048EF56F775209873731BED7BB7E087AB69.mft (raw, json)
Hash identifier:          osQR3gW0XOHYSUkXj7Ng9U0A+ZqvFMEOF5V9lCBODWw=
Subject key identifier:   B1:E9:6F:65:69:80:73:36:CA:2F:A6:AF:55:73:5C:62:14:B8:C1:CE
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Certificate issuer:       /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial:       4A1DAEBCCA8E53AEA3349820472CE4B07FEBD977
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
Manifest number:          8D
Signing time:             Sun 25 Jan 2026 11:01:44 +0000
Manifest this update:     Sun 25 Jan 2026 10:56:44 +0000
Manifest next update:     Mon 26 Jan 2026 12:32:44 +0000
Files and hashes:         1: 3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (hash: JX7Pdu25r7dXEE2keGtmwFR/OPLJBJ7iFLNr57lypDg=)
                          2: 3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (hash: RfI9XZuQj6gKm8IPfZ/OUFHP6iMQbotU/wIKwBHToN8=)
                          3: 687A6048EF56F775209873731BED7BB7E087AB69.crl (hash: 8kwIjXZI6F1jPfeEaks2LiPzIbidwFvkMRdbdkAlNB8=)
                          4: 3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa (hash: 3Ef2hhgQaSJa/nd/sZPTUkseKS9OSIlbQUi499mzr+M=)
                          5: 323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (hash: f27C5T+vOLtC67F9853TU+6fMSfriLRMBjXRflUWZtQ=)
                          6: 3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa (hash: byp4m7GwzFtXizKNIB10Y6S2W7hHiT2ASKgfSExDmqg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:ae:bc:ca:8e:53:ae:a3:34:98:20:47:2c:e4:b0:7f:eb:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
        Validity
            Not Before: Jan 25 10:56:44 2026 GMT
            Not After : Jan 26 12:32:44 2026 GMT
        Subject: CN=B1E96F6569807336CA2FA6AF55735C6214B8C1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:1d:8c:dc:c3:3c:1d:53:54:14:ee:96:21:
                    44:d6:3f:c9:e5:4f:5c:20:f5:b8:af:67:c6:78:18:
                    c9:3a:a0:54:d1:bb:08:56:b1:10:b1:b4:57:37:02:
                    21:ed:2d:54:b5:3b:90:a4:23:ff:aa:ec:cc:f2:ec:
                    e6:e6:60:78:b7:e0:42:da:e6:40:55:bc:82:59:44:
                    14:5b:ba:99:83:b2:fe:b9:36:7d:2e:3a:d6:17:db:
                    c7:02:f3:2c:5f:a8:fb:96:24:61:dc:92:65:97:57:
                    1b:34:71:d5:bd:ee:cd:a1:b7:43:f8:58:4f:f2:95:
                    19:3c:a2:eb:71:51:7c:29:42:ae:f0:b3:d4:f6:1b:
                    2b:e2:88:c3:2d:8e:81:d1:bc:b1:3c:db:2e:c5:f0:
                    f8:55:24:27:ec:f3:ba:68:4d:b1:f0:80:57:d2:9b:
                    0c:73:b0:ff:ad:5b:15:c5:8e:2c:12:b3:e6:ae:74:
                    2c:92:07:02:72:a6:aa:a5:67:c7:37:d6:56:3c:97:
                    a1:47:f2:ca:19:77:82:4b:69:64:d2:47:d5:b2:68:
                    f0:53:f0:a7:34:7c:14:5d:2c:83:af:b0:ed:c9:06:
                    9d:2d:53:8e:fe:f4:14:94:27:bd:43:87:61:9f:26:
                    18:ae:8e:2d:6f:75:a1:a3:06:d5:51:a3:0b:6d:f6:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E9:6F:65:69:80:73:36:CA:2F:A6:AF:55:73:5C:62:14:B8:C1:CE
            X509v3 Authority Key Identifier:
                keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:34:7e:64:d2:c8:c3:a9:68:fe:de:3b:76:4c:57:93:da:8b:
         33:64:b0:96:22:e4:3d:3b:31:10:68:1b:ff:67:07:27:f9:0c:
         c6:cb:8c:f0:51:d1:b8:fc:a6:5f:df:03:78:d8:ca:e4:94:c5:
         41:38:1a:aa:62:fb:56:5d:84:90:e0:77:1d:0a:ca:d5:b3:8c:
         a5:01:7d:20:e1:01:7e:b1:76:67:43:9f:2b:d6:b7:aa:91:b8:
         a4:94:44:f7:e2:da:90:42:96:e1:ca:e0:6f:18:80:a7:48:26:
         21:8e:4d:4d:d9:6f:ec:ea:d6:b6:51:95:62:3c:73:1f:0c:5d:
         78:3a:c6:34:02:c4:49:b6:33:50:58:b6:a1:1b:17:3b:07:84:
         7b:f1:27:64:9e:46:ff:59:48:82:b1:04:23:5c:bd:dc:76:2b:
         33:35:b9:98:ed:e0:55:d3:7d:c0:31:75:9c:6c:0e:3d:d5:1b:
         49:26:6f:9c:e3:e8:7b:2e:9c:f0:c8:8c:9e:bd:fe:32:bd:19:
         a0:83:03:f2:aa:39:5d:e5:96:5a:9e:20:e5:be:b8:3b:cd:9b:
         9e:ab:af:68:a6:ef:e3:d6:39:4b:ab:19:f9:59:72:bf:48:e9:
         17:45:24:cf:5f:b1:a7:e1:45:ad:7f:62:3c:2a:92:68:ba:20:
         be:9c:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:49 2026 by rpki-client