This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft
File:                     B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft (raw, json)
Hash identifier:          iDGZz3juNaA/7bRBJW0S6r1rV5wgqFnYKMKjNU2niAY=
Subject key identifier:   63:CD:C3:82:18:E9:15:2A:CD:6F:7F:D0:0B:70:6F:80:1F:89:18:D6
Authority key identifier: B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C
Certificate issuer:       /CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C
Certificate serial:       1FA7DDEF3FB94AC653C37D271A40CAD6A785FE04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft
Manifest number:          A4
Signing time:             Sun 25 Jan 2026 10:54:42 +0000
Manifest this update:     Sun 25 Jan 2026 10:49:42 +0000
Manifest next update:     Mon 26 Jan 2026 13:08:42 +0000
Files and hashes:         1: 323830343a323539303a3a2f33322d3333203d3e20323634323838.roa (hash: 916F6IYadG8a5DigzCzraiDt4J161Frs/6oclbTDEa0=)
                          2: B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl (hash: HBCrIRAXigwPQAdMgOzHY0FOkRCgsK8XnmwuodMFQ5A=)
                          3: 3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa (hash: XQ7DZeHPQyB89UHVLv4Cp/k4A0v1QwCnktw2XBdxuGM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl
                          rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a7:dd:ef:3f:b9:4a:c6:53:c3:7d:27:1a:40:ca:d6:a7:85:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C
        Validity
            Not Before: Jan 25 10:49:42 2026 GMT
            Not After : Jan 26 13:08:42 2026 GMT
        Subject: CN=63CDC38218E9152ACD6F7FD00B706F801F8918D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:27:bb:ad:d7:30:3c:4b:07:ae:d7:16:b2:
                    03:24:b2:a0:c7:11:98:fe:11:5f:bf:bd:10:e9:33:
                    7d:d5:a0:f5:37:25:4d:e9:c0:bd:19:67:91:32:a7:
                    aa:88:a1:ec:dc:a4:27:ae:0e:74:f6:4f:9f:43:40:
                    21:4e:6f:21:e4:dd:b2:fc:3d:cb:64:f0:45:5c:39:
                    fd:4e:1f:fe:da:d2:5e:37:76:c6:16:94:b4:b5:88:
                    3a:bf:4c:40:b2:5c:77:7a:69:58:08:9c:f7:8f:cd:
                    29:a1:23:ca:a9:2b:d0:1e:08:dc:71:75:fc:9b:d4:
                    b0:97:ea:1e:a1:15:26:03:be:57:f2:9d:60:36:19:
                    e0:c3:cc:5d:a4:27:4e:a8:01:5d:97:f0:b6:7a:d9:
                    d2:fd:56:28:b4:66:50:61:c6:c5:65:bf:26:14:9f:
                    86:8d:3a:a9:45:55:cd:2a:07:a4:d7:9d:bd:67:94:
                    d9:19:e2:c8:b5:c3:a2:e6:14:f0:60:4d:32:27:a9:
                    54:8b:77:07:85:50:13:81:57:2b:dd:c1:71:5c:c8:
                    db:00:2b:ff:3b:ce:55:e5:0b:79:e7:fd:08:be:f0:
                    ec:44:be:08:5f:65:ca:ad:d9:e4:af:ff:63:e7:67:
                    6f:a4:a4:02:1d:3e:18:36:fc:4e:a0:82:ac:30:1b:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:C3:82:18:E9:15:2A:CD:6F:7F:D0:0B:70:6F:80:1F:89:18:D6
            X509v3 Authority Key Identifier:
                keyid:B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:71:a5:5e:c5:68:ff:ed:10:eb:cd:89:1e:10:69:21:3f:
         d1:cb:14:c1:97:fb:96:25:5a:63:dd:92:b8:3f:30:aa:9a:69:
         20:04:6e:26:2e:83:5b:23:7f:1a:4d:e8:a8:8f:ba:83:78:b0:
         4b:45:4b:2c:eb:c3:8b:c7:68:2b:5d:e0:12:83:9d:08:a7:ad:
         26:0e:db:9e:60:60:f7:86:35:ac:05:fc:68:80:a2:c9:c9:7f:
         42:c6:cc:d1:12:08:60:5c:8b:67:7f:7f:b7:b9:a9:21:01:cd:
         56:2f:f5:af:86:1c:ed:cd:b1:38:24:2e:0c:73:0d:cf:0e:a3:
         eb:9a:02:71:c5:f9:28:61:8f:2e:70:ea:be:d4:35:9e:e5:ad:
         6d:6a:ce:43:6d:1e:2f:39:96:de:d9:a6:9e:b5:7e:40:c1:7b:
         e7:58:19:0d:a5:f2:4e:8d:8e:b6:ef:d7:d8:de:31:f1:99:c6:
         2a:38:2b:56:5d:b6:7e:c8:d8:a6:da:71:63:29:d4:b9:1c:04:
         b0:10:f4:4a:ab:34:ed:28:a2:8e:80:01:7b:15:3e:6b:e6:94:
         73:d6:9a:dd:55:12:01:4a:8b:8d:07:36:37:8e:8d:89:f2:0d:
         a6:8b:dc:55:11:a1:26:8e:26:d6:13:42:49:8b:d7:c2:75:8c:
         e4:9d:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:05 2026 by rpki-client