This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
File:                     28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft (raw, json)
Hash identifier:          7H4inhNtKjNPEKYVzVt+AV0NYRB/IgVLNvcV+WXWV/s=
Subject key identifier:   77:B4:49:FA:05:B7:C8:29:C5:95:C6:17:DA:CD:1F:77:81:8D:D1:F3
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       37E015808F8730D750017FA1F03EE12573F6ABF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
Manifest number:          0283
Signing time:             Sun 25 Jan 2026 13:42:47 +0000
Manifest this update:     Sun 25 Jan 2026 13:37:47 +0000
Manifest next update:     Mon 26 Jan 2026 13:47:47 +0000
Files and hashes:         1: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: Irtvtjw9Qn1ROshMlDhm83Na66r4xtEJQ5KfElKCj/0=)
                          2: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: UJNsPzUGlFh3uo1vK3eQte0VyBK74waL1o+Je1X0+8k=)
                          3: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (hash: Ct5VU801pl/x69hQdUUaYoWlR+ugIyvMehViBYvWqsM=)
                          4: 34352e3233392e37322e302f32322d3332203d3e20313938393439.roa (hash: QhHBcgzwgektTva1wEMQkhEVRdv/pdT5zmZ0+cGwow8=)
                          5: 34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (hash: Ow2VMl3N0uWYaasHq7yrM+aWOjjPSUtNQ6/TwMRQTz4=)
                          6: 34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (hash: RYW2qyUG1NHMaCSvOLymsJBIwIHtivxwWrAiV1hktWc=)
                          7: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl (hash: ZWwEuVTMXiq/r2oDUPUZHJN4jEcHX/GVeaFOXhEZGUU=)
                          8: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: 1isfo61GZF2mzPimmWN25j3nSCQYU80433KkRIbJc1s=)
                          9: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: HFtPxATLX5EpbVFkw5GdmivQ5LTbLGy2fdMs9HhaMo0=)
                          10: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: d4TnNgLFV5QuFe7AGff4exdLMTnJ2LcNXSsUhygUe8Q=)
                          11: 34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (hash: 8nLSYCsU/RguhB4raTXQB/UdGmMilCsobE34zpYNDlI=)
                          12: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: 4GIAN6A0ztAgt+6zdfDVuh+yrYGA2FWm7BMrP7pPH78=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e0:15:80:8f:87:30:d7:50:01:7f:a1:f0:3e:e1:25:73:f6:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Jan 25 13:37:47 2026 GMT
            Not After : Jan 26 13:47:47 2026 GMT
        Subject: CN=77B449FA05B7C829C595C617DACD1F77818DD1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:28:ca:d0:79:0a:ae:dc:b4:6c:99:5c:d4:
                    77:14:16:50:4b:f4:27:bf:ca:ab:21:8f:75:96:15:
                    b0:fa:94:f4:27:b0:2d:d6:08:d9:17:6c:22:80:28:
                    a4:ab:74:17:50:20:47:89:5e:a8:79:a9:bf:a3:dc:
                    4e:fb:1e:f9:fa:f6:e7:39:22:14:8a:13:ed:00:b1:
                    dd:5e:f8:8c:7f:15:26:6b:ca:b6:d7:9c:e8:87:c3:
                    a0:fb:59:e4:99:0c:7a:5c:55:02:b3:15:2c:32:80:
                    2c:4d:22:df:79:37:72:1a:fb:3d:35:dc:62:7c:78:
                    c0:70:37:b1:67:eb:fe:38:de:5c:31:f3:fd:c7:4b:
                    f6:14:27:5e:2f:0d:3f:7e:b2:44:27:c7:fd:40:6c:
                    70:4c:96:37:11:bf:8d:c4:2b:5d:7c:fe:c3:2f:1f:
                    08:6e:67:44:f7:3a:89:78:83:5f:f5:76:8c:93:d8:
                    7b:c6:fa:2c:54:8b:96:a0:a2:98:e7:5f:e6:ef:ad:
                    bf:08:7e:1a:14:29:e6:14:3d:ca:c9:a4:11:d0:00:
                    80:24:ad:43:eb:50:a8:6f:35:f1:eb:4b:86:47:c6:
                    d6:fa:f1:95:45:0c:81:6a:91:70:8c:66:03:43:55:
                    74:e9:86:86:62:35:89:e9:82:62:e8:ac:ee:c4:97:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:49:FA:05:B7:C8:29:C5:95:C6:17:DA:CD:1F:77:81:8D:D1:F3
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:82:82:33:72:ed:ab:4c:fb:a2:1d:90:8b:1f:e1:f2:55:
         6a:0a:54:f0:3e:a6:47:13:66:3e:49:7c:94:3a:03:ba:c8:e8:
         19:64:72:0a:58:2e:b6:9c:e6:6a:13:ef:42:68:dc:2b:a8:38:
         92:5a:91:d3:2f:d4:a4:f9:6c:3f:4e:46:0f:62:a4:f6:a3:dd:
         3b:52:dd:d6:5d:c6:20:50:63:d2:9b:25:86:26:8b:cd:bf:0f:
         6b:54:05:bb:a0:26:b9:1c:d0:a3:e7:51:1f:02:ec:0d:79:aa:
         67:eb:99:2f:af:7d:31:de:d0:75:11:a0:21:91:c7:1d:d0:11:
         7e:4a:89:e4:06:cb:43:25:90:46:59:61:3c:37:33:47:23:b7:
         e3:96:33:35:41:8b:51:b1:a4:2f:1c:c7:e9:b3:c3:01:92:40:
         18:77:26:74:8e:7b:83:9a:fa:a4:9e:62:2a:28:ba:97:de:e7:
         7c:f7:48:97:b5:b5:b5:2e:89:1f:35:b5:42:07:93:17:0c:7a:
         1b:38:22:39:d9:e7:b5:be:5a:44:ba:f9:58:d2:cd:bc:ef:c1:
         e2:2b:d8:02:40:ae:64:2b:08:c8:64:44:a4:b4:bc:e4:e0:8a:
         22:12:a4:b7:28:a9:be:79:9c:41:8b:76:90:fc:e0:fb:c5:c2:
         2f:a6:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:14 2026 by rpki-client