This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft
File:                     C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft (raw, json)
Hash identifier:          o5V2bAs7PfyLxkPUGdPrAnpkSFdxLe4hbjyn2LaqOUM=
Subject key identifier:   21:38:50:1A:E8:64:06:52:D4:8E:A2:FC:CB:28:89:DD:46:75:6F:38
Authority key identifier: C8:64:1C:9D:92:BB:A0:0C:B3:74:18:25:A3:F5:28:5F:CA:0B:35:87
Certificate issuer:       /CN=C8641C9D92BBA00CB3741825A3F5285FCA0B3587
Certificate serial:       0E6A3630277121E8F78392C2BEF8F037A5156A4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft
Manifest number:          1C
Signing time:             Sun 25 Jan 2026 15:55:37 +0000
Manifest this update:     Sun 25 Jan 2026 15:50:37 +0000
Manifest next update:     Mon 26 Jan 2026 19:51:37 +0000
Files and hashes:         1: C8641C9D92BBA00CB3741825A3F5285FCA0B3587.crl (hash: gGovyxaM8D6IYjPdQJCcFHo4BwOfKHMBPw0mUK/Av04=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.crl
                          rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6a:36:30:27:71:21:e8:f7:83:92:c2:be:f8:f0:37:a5:15:6a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8641C9D92BBA00CB3741825A3F5285FCA0B3587
        Validity
            Not Before: Jan 25 15:50:37 2026 GMT
            Not After : Jan 26 19:51:37 2026 GMT
        Subject: CN=2138501AE8640652D48EA2FCCB2889DD46756F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:bc:7c:35:69:3b:08:5b:ba:1b:de:58:61:
                    bd:c5:c3:82:a7:38:47:30:0e:af:24:8b:77:ed:bc:
                    e1:d7:4a:3d:3f:b5:ff:73:13:28:97:14:39:d8:24:
                    d6:10:e7:c0:e6:2f:1c:1c:fa:9b:85:4e:ef:99:1d:
                    34:de:26:72:dd:ef:ff:55:45:fb:38:2f:a1:1c:f9:
                    f2:91:d6:69:12:fb:57:8a:b2:77:12:7f:cd:1d:b8:
                    6d:d5:e1:7e:da:9a:c9:86:ea:28:06:c2:42:e5:d2:
                    d6:5a:ab:2c:e7:71:71:eb:1d:52:88:22:3c:a0:e0:
                    7f:8a:28:c1:8b:51:0b:98:e7:f4:07:00:0d:16:1d:
                    0e:ed:43:de:97:fe:13:ef:83:55:fe:28:99:d6:4a:
                    f0:f1:36:4e:bd:14:ac:85:e1:47:66:42:ef:2b:7a:
                    54:fb:2d:49:53:cf:53:c0:15:41:74:80:2b:c0:ed:
                    b8:56:df:a6:be:83:32:50:95:ae:e7:26:a7:5d:a5:
                    a8:5b:aa:27:ac:2a:b7:53:6d:6d:15:23:0d:fc:af:
                    3c:38:1f:84:6b:42:fd:4b:8d:e3:68:9d:5b:ce:64:
                    b0:8e:69:f3:10:f9:a7:66:aa:a9:cd:cb:8b:07:6f:
                    72:7c:a8:a0:33:d5:02:78:26:4d:96:fc:a1:bc:96:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:50:1A:E8:64:06:52:D4:8E:A2:FC:CB:28:89:DD:46:75:6F:38
            X509v3 Authority Key Identifier:
                keyid:C8:64:1C:9D:92:BB:A0:0C:B3:74:18:25:A3:F5:28:5F:CA:0B:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0f:8e:ee:b1:87:0f:e1:d1:c1:49:12:c3:72:a4:12:4c:da:
         ea:f6:8d:17:ac:c1:2e:c7:8f:14:a5:ab:5d:97:98:73:71:46:
         78:28:f2:7f:0b:9d:f9:39:6a:ba:c3:a2:88:02:4a:d7:81:76:
         ca:3e:b0:c9:11:7f:c4:d7:8c:3e:d7:13:e6:40:30:dc:d8:2f:
         3a:49:e4:40:e6:d1:7b:5d:ff:b5:31:e6:00:f9:bb:e7:a5:5a:
         83:e6:29:bb:6e:44:ef:21:d6:72:81:78:5d:bc:5f:cf:82:55:
         fa:ad:c8:c7:07:87:7c:d5:a1:91:d0:e6:8e:3d:01:83:a8:32:
         10:9f:70:71:6f:ae:de:4e:51:b6:d9:90:11:9b:17:17:24:c8:
         25:64:6c:6f:03:15:2d:cb:8c:91:c1:d9:f0:4e:9e:f5:be:57:
         50:2b:b7:90:14:75:ed:6b:cb:ad:09:55:de:de:85:97:f5:56:
         bd:14:f1:aa:1c:f4:73:2f:26:6c:13:db:f0:21:82:76:6f:4f:
         ee:e1:4e:da:cf:94:ec:a7:0e:7d:95:7d:1f:fe:a0:fc:c1:e4:
         71:18:03:aa:a2:09:f5:e8:c7:fc:6b:77:81:b1:67:28:e8:6b:
         7d:37:4b:73:f8:5b:9c:4e:44:33:a4:cc:d1:5c:97:24:7c:a7:
         ac:27:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:29:34 2026 by rpki-client