This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
File:                     FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json)
Hash identifier:          QCfn6jwEIZnujm17/BqMZl5fenupaR9f1hOBsn9dbjU=
Subject key identifier:   D9:41:C9:0A:35:54:1B:3E:AE:C2:0D:E1:F1:F8:39:34:75:5B:58:37
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Certificate issuer:       /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial:       621E62883899C02EB97A80679D4D2537CE37A78A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
Manifest number:          0230
Signing time:             Sun 25 Jan 2026 04:11:37 +0000
Manifest this update:     Sun 25 Jan 2026 04:06:37 +0000
Manifest next update:     Mon 26 Jan 2026 05:57:37 +0000
Files and hashes:         1: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE=)
                          2: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: 7tqqmd3CiUJu4IKK7jT9TvtPhKE/DTdNVYPEeyRBsf0=)
                          3: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: kfg2dpneGGmCrUHXsBibXZqTKYQRGTWgwu5Dg9g6PyU=)
                          4: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
                          rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:62:88:38:99:c0:2e:b9:7a:80:67:9d:4d:25:37:ce:37:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
        Validity
            Not Before: Jan 25 04:06:37 2026 GMT
            Not After : Jan 26 05:57:37 2026 GMT
        Subject: CN=D941C90A35541B3EAEC20DE1F1F83934755B5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:fa:5b:74:a2:fc:4f:93:7c:9a:8f:71:3b:
                    87:6f:af:59:0b:22:59:b8:2c:ab:99:f3:08:d7:fd:
                    0f:cc:85:69:82:a3:5d:67:22:5f:1d:3c:9b:51:75:
                    fb:3a:5b:fd:b0:60:06:43:c0:13:eb:99:b1:b5:6a:
                    71:25:f0:fe:f5:30:21:86:a1:58:ad:bd:ad:78:f8:
                    8f:0d:89:b5:1b:a5:e9:a9:eb:fe:91:82:24:d7:ef:
                    0f:55:f3:f5:81:3e:84:a6:7d:f5:30:38:de:04:17:
                    a8:18:98:dc:a0:ce:6f:b9:38:66:44:8b:83:28:17:
                    80:e9:5d:37:ca:6c:38:4b:dc:44:94:04:fb:57:3b:
                    e0:ef:0d:b5:69:cb:16:fa:d3:58:69:39:9e:8e:f3:
                    a5:73:a0:87:e1:fb:b5:8e:f8:69:e4:74:97:0c:d8:
                    32:69:74:b4:b1:24:98:1b:59:c5:2d:32:fe:9b:d1:
                    a2:8d:f5:6c:57:b0:3c:ae:cf:f9:bd:21:1d:09:b8:
                    9e:25:5e:cd:0b:75:a6:48:4c:b2:8a:fd:51:eb:ae:
                    62:81:c0:32:36:b1:7d:c8:04:73:f9:8f:67:27:d4:
                    c7:4d:e8:25:10:58:b4:39:a3:3c:83:9f:e3:92:41:
                    33:66:49:fb:c2:3f:80:79:7a:63:59:b1:3c:59:b8:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:41:C9:0A:35:54:1B:3E:AE:C2:0D:E1:F1:F8:39:34:75:5B:58:37
            X509v3 Authority Key Identifier:
                keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:4b:09:26:69:0d:5a:8b:dc:fb:32:6e:99:a2:a6:6c:70:
         18:9e:6e:5d:0e:7b:a2:8b:07:d1:6b:eb:1a:6a:da:75:e7:02:
         12:a3:be:21:47:41:a7:04:6c:65:1d:13:71:ed:bd:de:5d:44:
         40:e8:52:b2:e6:02:ca:47:c5:c5:72:34:cf:c9:c5:de:9b:97:
         8b:02:11:56:f9:39:bd:b5:1b:6a:4a:20:d0:b7:10:58:38:0e:
         6f:32:7b:ad:37:bd:c4:8c:30:b0:23:bd:58:2b:e4:f1:de:98:
         70:7b:75:7b:c7:f1:28:1f:0f:18:06:7f:07:f9:5a:b6:b7:f4:
         40:c7:cf:3e:12:62:93:7f:84:67:84:4c:a0:4a:e9:6b:95:8c:
         47:47:6a:a5:81:08:3e:42:26:fe:43:19:bb:76:c6:62:4e:ca:
         84:ee:4b:7c:92:57:1c:48:8b:07:43:fc:d4:1a:d0:f1:47:e2:
         89:b9:a7:98:f3:05:fd:8e:50:d9:cb:8f:cb:1c:f0:92:b1:fc:
         77:72:52:28:9f:11:9d:36:29:fe:97:96:ab:11:ab:32:fe:35:
         f9:37:98:9e:3a:e1:6a:c6:a1:20:69:ae:bf:bb:9b:f4:ca:0f:
         3f:fb:b5:3e:86:ea:86:06:8c:af:f7:ba:22:48:50:ce:35:97:
         3b:1c:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:58:54 2026 by rpki-client