This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
File:                     BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json)
Hash identifier:          mKrZO9tsdo/UjV+BDdobooo/lcdnB1pChzImzHMSoUM=
Subject key identifier:   8A:63:28:A8:62:BD:39:8C:5D:35:E0:FB:17:6F:1A:7A:E9:45:1D:A0
Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E
Certificate issuer:       /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
Certificate serial:       6FF2203D74F6F885140EB9C6748D476CAFA380A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
Manifest number:          7F
Signing time:             Sun 25 Jan 2026 04:02:38 +0000
Manifest this update:     Sun 25 Jan 2026 03:57:38 +0000
Manifest next update:     Mon 26 Jan 2026 06:16:38 +0000
Files and hashes:         1: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=)
                          2: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: ZUVAk6gaNbfe6pehlz1nySrUDZ13LKf8obuckoo70wE=)
                          3: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:20:3d:74:f6:f8:85:14:0e:b9:c6:74:8d:47:6c:af:a3:80:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
        Validity
            Not Before: Jan 25 03:57:38 2026 GMT
            Not After : Jan 26 06:16:38 2026 GMT
        Subject: CN=8A6328A862BD398C5D35E0FB176F1A7AE9451DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:49:98:bd:14:cf:f6:58:28:8f:60:60:49:b3:
                    57:a2:d1:c1:bb:b9:be:cc:cc:e6:f7:4e:6f:16:da:
                    3f:e8:98:48:43:95:29:7b:9d:b3:6f:e3:e3:7a:1d:
                    75:d9:65:db:9a:d3:4b:a7:bd:d7:64:25:db:c9:5a:
                    fe:cb:c8:e3:a0:a0:db:a5:c0:d2:d1:da:17:07:a2:
                    1b:37:b3:be:8c:79:d6:5d:24:6a:a6:b3:6c:77:cb:
                    9c:a4:84:41:17:20:f9:28:cf:0c:d8:f7:a7:47:a6:
                    1f:ea:bc:c3:5a:31:24:dc:d6:1c:08:83:c6:b3:7a:
                    05:df:e1:83:87:61:37:b5:18:3e:db:ca:d3:68:1e:
                    78:65:b4:7f:41:91:54:a3:de:57:9b:95:af:1d:0d:
                    f6:e0:4e:8d:35:e1:9d:24:6a:bb:8f:9d:c9:9c:88:
                    86:e9:52:8d:2d:62:fe:4b:a4:b2:66:91:3f:a2:a4:
                    dd:7a:64:7e:ba:99:1a:92:0b:79:17:24:80:b3:ea:
                    64:be:00:1f:05:48:14:af:2e:5a:84:66:2a:96:23:
                    6d:d9:6d:5a:39:4c:81:2b:22:7a:e2:6a:46:39:39:
                    eb:20:4b:11:e6:84:4f:10:44:e6:c0:18:4a:d7:ed:
                    4c:23:2a:f4:08:09:30:de:90:c0:68:82:cd:d1:28:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:63:28:A8:62:BD:39:8C:5D:35:E0:FB:17:6F:1A:7A:E9:45:1D:A0
            X509v3 Authority Key Identifier:
                keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:c6:b8:f2:57:1d:aa:f4:dc:c2:88:9c:43:53:c0:de:32:
         4a:9f:5d:5c:0a:17:05:06:94:a3:b9:55:e6:69:39:72:ee:d8:
         06:92:5b:36:30:79:9e:76:9a:3c:d6:0e:30:fb:ae:81:07:f5:
         26:53:4a:9c:04:15:3d:9a:15:dc:be:04:a0:88:45:c9:35:d5:
         63:78:7c:c5:e3:f0:c6:e7:38:7e:57:6c:57:fe:37:56:1b:44:
         e2:f8:6b:93:3a:4c:4b:c3:af:eb:c5:51:5a:6c:ad:43:47:cc:
         7f:f1:ad:e9:61:b1:e7:c4:bc:79:61:20:65:36:d9:aa:b0:db:
         18:3f:07:33:dc:9c:4f:90:93:19:fa:18:ff:09:11:81:be:67:
         3c:f9:19:60:ef:19:d5:60:26:b4:48:ec:84:17:ca:a0:70:83:
         81:ce:80:5c:4e:a5:50:69:a0:a1:b4:12:64:af:ab:87:49:b8:
         6e:35:dc:ed:56:d3:52:fb:57:ef:42:e0:8d:81:c7:13:dc:d7:
         d2:7d:46:a9:9e:32:71:94:f3:67:e2:86:87:00:7b:06:23:7c:
         09:c4:09:20:a9:a3:1f:ca:fd:f3:90:83:7d:c4:90:d5:fd:70:
         02:82:10:de:c3:ea:33:9d:5f:21:75:73:69:df:cb:9d:e8:c0:
         f3:98:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----