This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
File:                     BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft (raw, json)
Hash identifier:          iDKObgq7w3b1TFOdSSIYYu+PwSCI7Po4BYgaf/EkcZY=
Subject key identifier:   DB:19:76:EE:09:4C:39:F0:04:DB:87:60:47:12:03:74:75:01:0B:98
Authority key identifier: BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA
Certificate issuer:       /CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
Certificate serial:       263817A13BF454F5AE5A4687A11A023679BA560A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
Manifest number:          72
Signing time:             Sat 24 Jan 2026 22:18:00 +0000
Manifest this update:     Sat 24 Jan 2026 22:13:00 +0000
Manifest next update:     Sun 25 Jan 2026 22:56:00 +0000
Files and hashes:         1: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl (hash: CbH6YUVag32eriO3vKrdYNuHmjVyFsA3ujxRqnG5yrc=)
                          2: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (hash: YWHryjSdFBEBKqKmB1KLsmWcfwbalA7VAy9fcp5yQ3o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl
                          rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 22:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:38:17:a1:3b:f4:54:f5:ae:5a:46:87:a1:1a:02:36:79:ba:56:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
        Validity
            Not Before: Jan 24 22:13:00 2026 GMT
            Not After : Jan 25 22:56:00 2026 GMT
        Subject: CN=DB1976EE094C39F004DB87604712037475010B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:a1:60:ad:71:d4:28:26:a7:af:c0:df:16:
                    e5:dd:d0:39:87:f2:0f:a1:d7:48:29:b4:8d:46:73:
                    42:d8:7a:7e:3f:b8:25:5f:27:8d:54:a1:ea:00:9d:
                    09:60:bd:9c:66:c6:dc:48:92:5b:f5:21:f5:a0:7d:
                    b8:06:3a:51:07:2f:fc:c6:a7:05:ff:7f:cc:72:27:
                    da:75:67:d6:06:92:00:c2:8a:f2:a6:f3:3f:80:3f:
                    2d:3e:91:ba:fd:16:0d:67:7f:86:cb:af:72:ef:5e:
                    b4:df:0d:bf:78:0c:49:14:10:6f:c0:de:66:ab:dd:
                    f2:7c:04:e2:20:5c:57:95:4d:44:19:6f:79:81:32:
                    a9:27:0b:6b:c8:95:f2:40:36:3c:9d:44:8e:c6:dd:
                    70:1e:41:3d:c7:d6:a0:35:4e:61:09:5c:08:21:c9:
                    05:53:36:22:dd:6a:df:65:24:50:dc:b2:9d:56:fe:
                    bd:4a:58:99:3b:8e:7c:c5:6e:4c:32:e1:f2:f0:d6:
                    8e:ae:e3:cf:8b:b8:63:b9:57:90:01:9e:86:ea:8d:
                    90:23:84:90:20:74:75:51:72:b6:ec:36:b4:08:fb:
                    ce:09:11:70:83:16:4f:df:10:4c:29:72:c5:45:d6:
                    8e:a0:48:ef:56:76:30:7c:91:e2:6f:f9:fe:7f:f5:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:76:EE:09:4C:39:F0:04:DB:87:60:47:12:03:74:75:01:0B:98
            X509v3 Authority Key Identifier:
                keyid:BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:e6:61:45:27:76:1b:f2:96:4a:df:84:51:bf:ae:3b:cf:
         1b:ad:68:5b:a9:ad:b7:80:e3:54:51:8a:4c:46:ff:0c:79:c0:
         2b:bb:7d:da:20:74:f1:d5:b3:15:43:5f:73:ef:93:b0:ad:20:
         58:65:dc:18:3e:80:7b:21:f2:aa:2d:ef:d0:e9:9c:ce:b8:ad:
         78:36:01:e0:ea:15:28:38:82:62:7a:02:5e:60:6c:0e:4a:2c:
         9a:c6:c9:ed:b4:68:9a:09:48:74:d2:9c:41:99:e4:69:a3:9f:
         93:eb:2e:43:4f:52:60:63:30:24:dc:04:7a:eb:bf:6b:bd:43:
         27:9b:b2:86:f3:c8:da:95:c2:1b:d1:cd:4c:d5:6b:45:60:7e:
         1f:d6:5c:df:f0:5f:6f:64:3f:d6:ce:02:2b:f6:b2:a7:ba:03:
         8f:43:30:c6:ef:34:09:1d:5e:f6:3c:01:71:0c:c4:4c:00:bd:
         ff:04:52:62:de:1a:8d:75:56:07:58:47:f8:46:78:97:95:f2:
         47:7b:e3:63:bf:9d:0b:73:bf:37:f7:a7:d2:be:c4:49:1b:9e:
         27:7d:f2:42:2b:68:65:1c:57:13:8f:2a:f7:6c:1b:a5:53:21:
         c5:67:9e:24:11:69:0b:f7:c2:05:93:51:5c:16:bb:0e:2f:27:
         40:e1:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:55 2026 by rpki-client