This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
File:                     28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json)
Hash identifier:          7nShnSowAYRZqfEgAm/nRul2ojdDAtyMgDwu0gIzEwA=
Subject key identifier:   23:C0:64:DF:A9:E6:4C:3E:DB:BE:EC:2F:E3:B1:96:D7:4E:F3:E5:BF
Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A
Certificate issuer:       /CN=28AEA4799AA16796C18CA8950931D4394F01179A
Certificate serial:       3B2B25AA9571BDF114228E371BC527E468C60D1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
Manifest number:          0135
Signing time:             Sun 25 Jan 2026 06:05:11 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:11 +0000
Manifest next update:     Mon 26 Jan 2026 07:51:11 +0000
Files and hashes:         1: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=)
                          2: 3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (hash: y3CoVEWObW7u+N074Y8vxEijHZnpu3jXbFZ4orw4uP8=)
                          3: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: vUSAu21lKBqZY7SstjPR3WMAJOFxO2CH/9PxTrt2SLY=)
                          4: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2b:25:aa:95:71:bd:f1:14:22:8e:37:1b:c5:27:e4:68:c6:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A
        Validity
            Not Before: Jan 25 06:00:11 2026 GMT
            Not After : Jan 26 07:51:11 2026 GMT
        Subject: CN=23C064DFA9E64C3EDBBEEC2FE3B196D74EF3E5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:5c:75:ee:41:8a:bd:6f:e8:b5:bc:ba:11:
                    62:e7:86:b8:9a:71:53:fe:3b:d7:7b:27:ca:5b:3a:
                    60:31:2f:b2:9f:a7:e3:4b:f5:65:94:09:87:66:43:
                    32:d0:0b:e2:68:17:19:21:57:6e:83:4a:07:81:fb:
                    8a:77:16:13:01:7b:a9:28:dc:53:0f:17:02:a1:26:
                    fd:fb:c3:98:98:0a:14:93:9d:cf:54:41:8d:26:b5:
                    c4:eb:7a:be:8a:53:48:3f:5e:8d:97:fb:a1:df:c3:
                    8e:62:ea:02:ca:fa:18:18:cb:67:86:f9:79:12:9a:
                    c4:f4:82:3b:45:1c:e9:3a:24:e0:87:ee:9a:58:ca:
                    94:44:55:63:de:ec:11:a2:bb:d6:2e:25:54:43:46:
                    dc:45:a2:49:10:a8:90:45:b0:f6:c7:57:6b:21:6d:
                    d1:da:22:0d:bf:54:1f:16:63:f2:d4:f9:af:e1:01:
                    ea:ad:5e:8f:66:8b:39:de:cf:65:b8:aa:aa:b7:5d:
                    07:8b:64:f2:ca:24:ba:2c:9e:d4:8d:d3:6a:10:ff:
                    a5:1a:3a:7c:86:40:b5:eb:fc:9e:11:64:d3:ff:7f:
                    19:4d:4a:2a:52:e9:48:40:07:f1:b0:f4:2f:97:03:
                    d0:ff:34:f1:d1:2d:7f:57:52:cc:24:73:15:90:40:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:64:DF:A9:E6:4C:3E:DB:BE:EC:2F:E3:B1:96:D7:4E:F3:E5:BF
            X509v3 Authority Key Identifier:
                keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:10:cd:b6:71:ec:b8:75:d6:c6:80:25:d8:f8:9a:48:7e:
         6c:7f:f0:5d:de:5d:70:89:36:53:97:46:4d:75:2c:84:04:62:
         9d:2b:de:cc:c5:fc:a7:ef:72:e9:95:01:61:7f:3d:a5:41:5e:
         c4:fe:4c:fd:83:2c:64:c0:f7:45:e9:6e:ad:e0:3e:2b:15:37:
         73:04:0e:07:6f:7a:c8:a7:b5:77:a0:48:3b:6a:17:3e:96:8f:
         80:ce:10:83:e4:dd:fe:66:93:68:6c:44:7f:01:09:ac:b1:30:
         62:58:38:73:8e:3f:a7:67:31:3e:8a:10:7b:f4:15:41:15:34:
         26:c8:7e:e1:88:ac:a6:04:ba:a7:21:e3:b4:d1:c5:89:08:cc:
         db:d2:0b:86:1f:9e:3c:f4:0d:79:23:24:f7:60:3b:75:c9:93:
         83:f4:fb:46:d5:22:bb:7d:4d:3a:f7:8d:bb:ad:75:14:bf:ed:
         d4:c6:04:05:9f:b9:30:96:9e:e0:2a:1f:de:ae:a1:0d:99:60:
         03:e3:32:38:66:ba:40:39:fd:10:c6:b7:b2:a2:13:1f:32:56:
         5b:9a:cd:05:a0:84:a2:18:b5:c5:2b:52:02:46:6f:3e:97:bf:
         ef:4e:55:c5:9b:23:c4:98:45:af:a0:4e:d5:cf:c0:c8:73:1d:
         4f:3c:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:56 2026 by rpki-client