This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft
File:                     AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft (raw, json)
Hash identifier:          qvrm4gZk4AM8pepSZOIc604mHG8AyZt0p/JDvlPHtjk=
Subject key identifier:   7C:6D:75:06:5B:DC:12:6B:31:A6:C0:9E:AF:CA:96:9C:7A:C2:14:46
Authority key identifier: AC:45:88:C4:94:20:9C:91:0D:FA:4A:A6:45:CD:CC:AC:7E:64:4D:58
Certificate issuer:       /CN=AC4588C494209C910DFA4AA645CDCCAC7E644D58
Certificate serial:       51B981886543E329BC07AB3810A54886F21C3F8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4588C494209C910DFA4AA645CDCCAC7E644D58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft
Manifest number:          15
Signing time:             Sun 25 Jan 2026 13:11:20 +0000
Manifest this update:     Sun 25 Jan 2026 13:06:20 +0000
Manifest next update:     Mon 26 Jan 2026 16:18:20 +0000
Files and hashes:         1: 3137372e37322e3134382e302f32322d3332203d3e203532383138.roa (hash: /ZdM4lDU8P9mokHqKeG6dQLe1AHcCHEmH8080+tLdmQ=)
                          2: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (hash: NMvIyiVZbuxEbSfqGswWXul2Cc92M+TQz8QP2c65Kjo=)
                          3: AC4588C494209C910DFA4AA645CDCCAC7E644D58.crl (hash: KKlouiW+TL54EQIrkhfZFRahGNI1sLVcr9JQG1jqs5k=)
                          4: 3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (hash: c2oqi/gQRDMd8LFaWtY6J6yi7GBvQldEwOV07r2BWKY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.crl
                          rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4588C494209C910DFA4AA645CDCCAC7E644D58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b9:81:88:65:43:e3:29:bc:07:ab:38:10:a5:48:86:f2:1c:3f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4588C494209C910DFA4AA645CDCCAC7E644D58
        Validity
            Not Before: Jan 25 13:06:20 2026 GMT
            Not After : Jan 26 16:18:20 2026 GMT
        Subject: CN=7C6D75065BDC126B31A6C09EAFCA969C7AC21446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:13:ba:72:b1:83:46:a5:a8:38:2f:fc:a1:
                    82:22:0d:0d:e7:38:f3:c0:0a:21:72:d0:b2:66:4e:
                    7e:30:0c:fb:19:95:4d:bf:d1:1c:91:05:14:56:92:
                    7c:17:2c:38:c6:1f:b8:6e:32:fb:e0:36:fa:c8:ae:
                    6c:76:5f:60:e7:cc:30:5e:61:89:c6:b3:b9:09:34:
                    f4:6a:86:63:43:02:fb:3d:74:41:d0:0e:a8:62:a2:
                    88:cc:c2:68:66:06:5f:00:df:a8:91:4a:8c:ad:bb:
                    80:8c:e2:de:fa:c2:c2:b5:3b:30:cf:4a:21:0a:d4:
                    4e:e3:54:85:ae:51:a7:a4:20:dd:0e:0b:e2:e9:4e:
                    08:43:7c:f8:a5:d1:40:f8:ce:5d:e9:7d:e9:29:93:
                    51:0a:4a:89:40:76:23:8a:d1:6f:b3:18:18:1a:ca:
                    b2:67:36:5d:29:b6:e4:23:8e:12:6a:f0:3c:51:a0:
                    ed:e4:fa:38:80:12:8b:bc:94:d3:2e:1f:08:39:db:
                    74:e7:67:9f:f5:08:90:76:0d:32:e0:e4:20:65:bb:
                    76:5d:38:bd:43:d9:77:33:d2:8f:40:9d:6a:38:8b:
                    a7:29:26:f7:4d:2d:54:4b:85:9c:ee:1f:07:09:bc:
                    00:ba:a8:b9:02:f1:60:3d:2a:2e:36:49:4b:c5:51:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:75:06:5B:DC:12:6B:31:A6:C0:9E:AF:CA:96:9C:7A:C2:14:46
            X509v3 Authority Key Identifier:
                keyid:AC:45:88:C4:94:20:9C:91:0D:FA:4A:A6:45:CD:CC:AC:7E:64:4D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4588C494209C910DFA4AA645CDCCAC7E644D58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:72:0a:2f:46:b1:76:90:6e:02:4f:78:19:95:e2:32:40:
         0a:14:f2:aa:c7:c4:a8:1a:63:69:d2:fa:db:1e:a2:52:3b:35:
         2d:ce:4f:ba:5f:c4:eb:d1:33:45:b1:4f:d3:1c:e1:cf:3b:ce:
         c8:69:66:b5:a3:81:61:57:ed:e0:2d:29:da:30:02:43:8e:cb:
         2c:dc:6e:ee:ae:0f:71:91:34:76:dd:9b:75:4d:84:5d:64:23:
         00:60:f1:34:54:c4:f9:24:10:7f:72:8b:ce:8f:3c:c6:bc:e1:
         84:47:e9:da:2f:4d:89:7c:1a:cb:26:71:b8:a9:15:2a:d2:2f:
         34:f5:01:ce:ce:f5:b0:d8:60:fb:73:91:7d:25:ef:73:cc:50:
         bf:62:78:7d:dd:53:fe:5b:40:5d:99:85:e5:d2:9b:dd:04:59:
         32:ac:df:42:3b:e2:ae:8d:1e:96:a0:00:34:55:87:80:c6:bb:
         25:a5:83:f3:c1:fc:87:de:23:91:4f:6e:4b:fc:9a:64:8f:27:
         24:3f:e1:ab:af:b1:c6:7f:79:bc:5e:fa:ec:a6:5a:37:bc:15:
         30:4f:39:e6:98:a6:52:bd:45:36:14:4a:2d:24:22:38:8e:83:
         33:90:82:bf:43:33:fd:72:54:5c:91:d3:47:d5:20:cf:15:15:
         f1:48:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:16:23 2026 by rpki-client