This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
File:                     71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json)
Hash identifier:          KCk7LmIbEHrKflaOJ5qf9a/TlbK0ny0NPCVHm1seovU=
Subject key identifier:   10:22:22:C8:3D:76:BB:94:2E:4E:AB:A8:D0:C4:5D:21:8E:9A:49:0C
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Certificate issuer:       /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial:       4568004EDCF209AF5CA2770A5EB99EFFE7592AAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
Manifest number:          5D
Signing time:             Sun 25 Jan 2026 07:31:41 +0000
Manifest this update:     Sun 25 Jan 2026 07:26:41 +0000
Manifest next update:     Mon 26 Jan 2026 10:34:41 +0000
Files and hashes:         1: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=)
                          2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=)
                          3: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: ddqeX0RdKOvnq3Btc31wB3WLLwpJq9LSmH3FGWzrXnM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
                          rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:68:00:4e:dc:f2:09:af:5c:a2:77:0a:5e:b9:9e:ff:e7:59:2a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
        Validity
            Not Before: Jan 25 07:26:41 2026 GMT
            Not After : Jan 26 10:34:41 2026 GMT
        Subject: CN=102222C83D76BB942E4EABA8D0C45D218E9A490C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:d6:fe:3b:f6:5e:d3:03:9a:97:a5:94:68:
                    69:77:08:3f:e4:ea:aa:fa:52:ac:62:68:e7:a6:82:
                    54:15:41:a4:ee:74:90:96:5e:09:71:a3:0a:7b:86:
                    58:62:42:f8:df:09:5b:da:b1:f5:93:08:98:2a:2e:
                    95:4a:e6:8d:e0:1d:b0:00:ad:3b:f9:18:e5:0f:88:
                    19:b6:88:ba:35:8f:4e:2a:37:96:db:f9:bc:2f:9b:
                    c2:eb:53:b0:f7:2a:2e:51:1e:1f:9e:7e:f2:e4:c4:
                    85:52:e4:d9:2e:19:d9:49:da:dc:16:e1:39:d7:ed:
                    3d:ab:87:28:55:fc:a6:f4:da:13:4b:ab:8b:55:ce:
                    de:ce:aa:42:26:9e:7b:75:b2:b6:f5:39:82:e4:f8:
                    8c:5f:32:35:3e:06:6d:fc:14:0a:73:44:a1:77:4e:
                    46:f3:3c:67:47:83:4e:f5:f0:93:7a:44:4b:47:8c:
                    3a:c8:fc:8d:36:d3:bf:44:88:51:44:f3:a2:a0:ee:
                    6a:2d:63:0b:5e:67:34:e7:7e:f5:20:ed:7e:8b:5f:
                    c6:07:dd:b6:de:0e:18:b3:ad:71:97:27:3c:09:6a:
                    cd:2f:88:bf:10:a4:c8:62:37:a0:ed:43:dc:d3:56:
                    dd:4c:c1:7e:72:7c:24:eb:06:80:3c:4e:6a:5f:53:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:22:C8:3D:76:BB:94:2E:4E:AB:A8:D0:C4:5D:21:8E:9A:49:0C
            X509v3 Authority Key Identifier:
                keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:5e:0c:fe:f7:96:76:da:68:21:48:94:61:32:9f:89:d3:
         ce:5e:10:9c:7b:82:63:40:4f:2b:b4:6b:8e:8e:7e:4b:67:e9:
         e0:f3:18:47:43:e6:3e:95:60:e6:5f:b0:74:3d:5c:74:0c:a8:
         8b:77:ee:59:f7:07:b2:41:47:e4:8d:62:ba:b5:07:21:0a:d7:
         cb:57:23:97:81:9e:95:44:70:59:98:bc:9f:58:24:ab:e7:d1:
         91:53:af:16:f9:4c:4e:40:ca:7b:c0:77:26:ba:06:52:e4:af:
         38:4b:d6:7d:23:ff:f8:13:f7:ad:a4:bb:92:c3:a7:9d:0d:ac:
         63:c6:e2:59:a5:73:68:5d:9f:5c:d5:8f:cb:81:87:2d:ff:f3:
         69:76:bf:b5:06:a5:a9:c8:7b:33:10:c8:e9:be:8a:80:75:36:
         32:70:54:35:87:5c:17:5c:d5:c3:25:f2:5d:e6:2a:98:19:e5:
         28:0a:76:dd:2b:1f:d0:1a:31:ae:30:72:fd:de:a9:55:48:b0:
         48:f3:6a:57:16:0d:d5:02:eb:cb:c4:1f:e2:80:66:0f:5a:88:
         64:74:0d:1b:e1:95:48:a9:d2:7a:c2:5b:19:ee:b8:5d:80:ab:
         22:c0:cf:27:d7:0e:78:bd:6c:70:6b:3c:c9:63:b4:cf:de:62:
         eb:75:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:56 2026 by rpki-client