This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
File:                     F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft (raw, json)
Hash identifier:          zKXvKuSFATuBrB28qdcSQyCPiX8DwCoj1i3pwjEO1Fs=
Subject key identifier:   32:2B:40:51:D6:C0:91:7D:D2:70:62:93:2A:61:ED:DF:94:40:30:A4
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Certificate issuer:       /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial:       1B0F3157EDA5E63405D6DCE163E8EFFF32716BEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
Manifest number:          4D
Signing time:             Sun 25 Jan 2026 11:12:39 +0000
Manifest this update:     Sun 25 Jan 2026 11:07:39 +0000
Manifest next update:     Mon 26 Jan 2026 12:41:39 +0000
Files and hashes:         1: 323830343a363462383a383030303a3a2f33342d3334203d3e20323639343434.roa (hash: KRAl7UxWI8rQx6Mwm8KZ2GB1ZSkurVndjk3SB1N2MYM=)
                          2: F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl (hash: nKwZYXsr/41969EaxK4QL+QZffPYrDCEJMkUeBh5R5s=)
                          3: 323830343a363462383a333030303a3a2f33362d3336203d3e20323639343434.roa (hash: px9nxvphIt90J5/ZKRKoRbT+pGJdKG6S4tGr/kTSvQU=)
                          4: 34352e3138362e3136372e302f32342d3234203d3e20323639343434.roa (hash: z/XyHE9eAux1RT4PiTjNnzqAiT76B3XC55efcKkfVNE=)
                          5: 34352e3138362e3136342e302f32342d3234203d3e20323639343434.roa (hash: 4lX4NhYaCLg7zTBZ3r9rXoXkNmlKBBVZu3pjhnTk8dg=)
                          6: 34352e3138362e3136352e302f32342d3234203d3e20323639343434.roa (hash: xh2JRk1D+vOWqx1MJXs2CiILsqK+wTxifLBUHsbxsLE=)
                          7: 323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa (hash: yFVKAi5aEglTEoIhBKdpR4Tj+Ojal+yy0N1oVAyAIXg=)
                          8: 34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa (hash: e0VDWuUuQUXBAgektx0uESLz5NGVVsC1UNvDE4BpMIM=)
                          9: 34352e3138362e3136362e302f32342d3234203d3e20323639343434.roa (hash: mET3hAidlXLn33iYurRx16rABXSSHXKDoDMLu2ZggXI=)
                          10: 323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa (hash: C6JEeq9UdPSNu6+WIUmi2Yn8g9OOoV+U5qoIWwhRX4g=)
                          11: 323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa (hash: UHZPl3r5A589EYndrBObmu6zFUsYzZHAsGIIxDzpojk=)
                          12: 34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa (hash: Y3MklqqDjVo5vwDZxh9tYAFq1tEMaamaFHOoH2SZg+Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
                          rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0f:31:57:ed:a5:e6:34:05:d6:dc:e1:63:e8:ef:ff:32:71:6b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Validity
            Not Before: Jan 25 11:07:39 2026 GMT
            Not After : Jan 26 12:41:39 2026 GMT
        Subject: CN=322B4051D6C0917DD27062932A61EDDF944030A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:fc:bd:e1:80:63:69:3a:90:03:ce:52:88:
                    b2:2c:10:8d:29:88:4f:30:14:c9:e9:be:03:bb:b2:
                    f2:18:e7:f6:ac:48:dc:5a:75:5b:27:c9:a4:0e:24:
                    cb:40:7e:ff:7e:0f:18:52:3f:a6:47:c1:0f:8e:45:
                    2d:fe:e7:5c:24:c0:ff:9b:63:36:a7:7f:61:7a:31:
                    02:4d:38:11:6c:2f:41:33:76:9f:8d:41:86:5c:af:
                    a9:73:0d:bb:93:e5:fd:49:a8:86:03:74:04:8e:0e:
                    ba:34:a3:86:1d:eb:0e:ab:ec:bb:8c:8d:03:87:85:
                    6b:5f:27:6f:b5:ce:fe:db:11:c5:3c:d5:41:9b:6a:
                    5a:b9:e6:1b:7e:2f:8e:1c:04:88:9e:6d:63:4c:6b:
                    19:bb:48:05:b5:b8:dc:bf:f1:69:88:79:3d:c4:5b:
                    38:aa:09:12:76:1e:b7:8d:44:43:9a:21:8f:c5:83:
                    07:95:06:72:d9:a4:ce:77:2e:8e:e8:07:5b:ce:cf:
                    01:c2:da:e3:07:a2:eb:eb:21:c0:64:1e:95:b1:02:
                    53:1f:2d:c2:0c:4d:82:56:e8:16:10:20:85:98:8d:
                    eb:9a:ac:93:a8:4c:66:48:0f:e0:2f:34:a3:73:e2:
                    d3:22:df:f1:f9:14:f7:1b:0e:64:82:19:73:d1:8c:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2B:40:51:D6:C0:91:7D:D2:70:62:93:2A:61:ED:DF:94:40:30:A4
            X509v3 Authority Key Identifier:
                keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:a9:03:ae:31:82:18:b3:a5:e3:a5:97:9a:a5:55:67:51:
         9a:74:6d:35:ae:4f:8a:a0:af:a0:d7:7d:13:b9:a7:01:6e:91:
         87:b3:43:00:ce:67:84:e2:fa:41:66:0f:3a:24:82:1c:39:0d:
         4c:c5:dd:19:09:a7:6d:df:85:af:c3:e7:7d:14:2d:4c:80:a1:
         76:4e:26:06:13:f6:98:34:68:58:c1:23:d2:5d:3c:27:6a:4f:
         4b:ea:87:d1:f3:4f:78:b4:bb:9d:4d:46:71:5f:14:34:94:41:
         8e:c1:56:25:14:0b:d3:1a:bf:db:9b:48:a5:6f:1d:ef:2a:0e:
         62:3d:71:97:62:bb:27:80:0f:5e:cb:88:ba:db:8d:c5:18:2e:
         25:11:87:c3:87:c6:38:77:76:66:ae:c6:08:16:34:16:88:1b:
         30:6f:a5:2f:c2:73:be:d1:7f:c2:c6:e8:60:be:53:28:0e:03:
         6d:8a:70:72:87:c4:39:87:77:53:df:ca:cf:fc:57:14:48:e1:
         8d:dd:34:d4:01:07:d7:8c:81:6b:2b:07:e1:ec:86:8f:07:c2:
         8e:ee:f5:f7:da:a8:aa:9e:2f:fa:91:16:aa:9e:8b:da:86:c8:
         ec:26:f2:24:33:f4:d2:45:f6:82:1e:26:fc:a6:87:54:b6:f6:
         c1:22:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:04:43 2026 by rpki-client