This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
File:                     4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft (raw, json)
Hash identifier:          Hua827e/7RHWXVy6IsTQN7YNPt5PVoigbmNgVn27TvY=
Subject key identifier:   61:75:2E:25:D4:CF:2F:10:ED:8D:B6:E9:37:4D:59:99:6F:36:FB:FC
Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49
Certificate issuer:       /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
Certificate serial:       1058E9A66DE33B07B9171BCEACA9FE412818798C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
Manifest number:          0375
Signing time:             Sun 25 Jan 2026 16:11:39 +0000
Manifest this update:     Sun 25 Jan 2026 16:06:39 +0000
Manifest next update:     Mon 26 Jan 2026 16:29:39 +0000
Files and hashes:         1: 323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (hash: cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=)
                          2: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl (hash: tlttjxiz7tkdUXID76SSYJwoVf4r4FaiUteZ96KkdFk=)
                          3: 34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (hash: qPJDf0ZzOHhjuG0zLopodnYM0KBTlwwMbPfxeuoZ2to=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:58:e9:a6:6d:e3:3b:07:b9:17:1b:ce:ac:a9:fe:41:28:18:79:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
        Validity
            Not Before: Jan 25 16:06:39 2026 GMT
            Not After : Jan 26 16:29:39 2026 GMT
        Subject: CN=61752E25D4CF2F10ED8DB6E9374D59996F36FBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:52:0f:b4:a6:7f:4d:7b:73:3e:f2:07:7e:
                    b2:55:25:27:44:5c:01:c6:ac:5b:f0:43:0a:bb:77:
                    70:19:68:f0:f2:98:49:1c:aa:27:01:d8:82:e7:f8:
                    78:47:bf:93:e0:37:83:c7:3a:49:dc:98:f1:d7:a4:
                    71:ff:d8:fa:bf:bc:10:72:69:d0:6f:51:64:f8:c9:
                    dd:8e:81:15:84:f7:22:58:69:e4:0f:3e:f7:d5:c7:
                    a6:80:7c:3b:a1:00:21:31:56:bd:e0:29:e1:62:90:
                    43:7a:0c:00:f5:70:99:3d:f4:12:11:7a:a2:45:81:
                    e5:3b:18:c9:bd:1c:74:60:e8:b1:62:7b:ae:fc:0c:
                    3e:7f:4b:65:8c:6b:35:e8:90:b5:ea:67:f4:0d:ba:
                    5b:b7:54:17:c9:ec:59:fd:a6:99:fd:88:e7:f8:1a:
                    b4:2e:33:c8:13:f0:89:d7:86:63:2c:ff:4a:dc:51:
                    00:28:32:d1:24:bb:c5:87:32:4c:e1:62:ba:44:c8:
                    5b:bd:c0:c4:ec:65:03:31:ef:d9:72:bf:66:50:7f:
                    9c:b8:2c:02:5d:16:86:b2:bf:fa:77:c7:2b:9e:fa:
                    ff:47:61:94:b4:a8:e6:6a:81:a8:63:be:5f:66:d9:
                    a8:d3:ba:3e:7b:31:71:d7:c2:e1:f0:b0:67:ef:5b:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:2E:25:D4:CF:2F:10:ED:8D:B6:E9:37:4D:59:99:6F:36:FB:FC
            X509v3 Authority Key Identifier:
                keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:05:1c:93:38:3a:59:3b:8f:93:dd:f5:43:77:23:4c:74:
         2d:5a:d7:f5:31:66:37:4e:41:e7:40:7a:d3:ee:1e:7c:60:c7:
         82:7b:34:f9:b8:f4:89:a0:8a:4b:20:f1:9d:92:3d:de:b6:a0:
         1c:bb:c0:57:85:12:5c:d8:e7:ea:2b:3f:c7:ad:a6:0d:9b:61:
         65:d4:98:f0:c9:1b:00:85:79:fd:9f:b8:26:32:32:a2:09:db:
         24:8c:73:dc:32:bf:e4:59:7e:7f:f4:38:82:ad:3f:42:e0:72:
         5f:88:6b:94:d8:9e:f9:21:3c:28:9f:73:47:9d:02:2a:40:01:
         fd:a8:97:94:28:f3:be:b3:e0:51:bc:76:1e:49:9a:30:f6:63:
         77:ea:ff:fb:8d:ca:13:c2:1b:13:e3:9c:9f:41:43:e9:d7:c7:
         c5:62:6d:5b:45:a8:56:b7:b8:e4:6a:e7:89:b2:b3:a8:83:46:
         78:26:56:e2:ff:29:5d:e2:89:b9:b8:58:a4:62:0d:34:82:ef:
         62:bb:0c:68:cb:a7:47:49:2d:74:6f:1b:4d:21:85:0d:40:96:
         94:7f:28:65:ad:ff:97:b8:0f:76:d1:c6:55:7a:75:85:40:01:
         f9:56:54:30:11:71:94:d0:e0:a2:34:36:5a:4a:1a:69:dd:ab:
         0c:5b:41:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEFjppm3jOwe5FxvOrKn+QSgYeYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEExRkVCOENFMzA3QTAxMDY0OEZGRUUxOThEMkY2QUZC
RTY0NUU0OTAeFw0yNjAxMjUxNjA2MzlaFw0yNjAxMjYxNjI5MzlaMDMxMTAvBgNV
BAMTKDYxNzUyRTI1RDRDRjJGMTBFRDhEQjZFOTM3NEQ1OTk5NkYzNkZCRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTVIPtKZ/TXtzPvIHfrJVJSdE
XAHGrFvwQwq7d3AZaPDymEkcqicB2ILn+HhHv5PgN4PHOkncmPHXpHH/2Pq/vBBy
adBvUWT4yd2OgRWE9yJYaeQPPvfVx6aAfDuhACExVr3gKeFikEN6DAD1cJk99BIR
eqJFgeU7GMm9HHRg6LFie678DD5/S2WMazXokLXqZ/QNulu3VBfJ7Fn9ppn9iOf4
GrQuM8gT8InXhmMs/0rcUQAoMtEku8WHMkzhYrpEyFu9wMTsZQMx79lyv2ZQf5y4
LAJdFoayv/p3xyue+v9HYZS0qOZqgahjvl9m2ajTuj57MXHXwuHwsGfvW25FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYXUuJdTPLxDtjbbpN01ZmW82+/wwHwYDVR0j
BBgwFoAUSh/rjOMHoBBkj/7hmNL2r75kXkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVG
VUEvMS80QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMUZFQjhDRTMwN0EwMTA2
NDhGRkVFMTk4RDJGNkFGQkU2NDVFNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVGVUEvMS80
QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHkYFHJM4Olk7j5Pd9UN3I0x0LVrX9TFmN05B50B60+4efGDHgns0+bj0iaCK
SyDxnZI93ragHLvAV4USXNjn6is/x62mDZthZdSY8MkbAIV5/Z+4JjIyognbJIxz
3DK/5Fl+f/Q4gq0/QuByX4hrlNie+SE8KJ9zR50CKkAB/aiXlCjzvrPgUbx2Hkma
MPZjd+r/+43KE8IbE+Ocn0FD6dfHxWJtW0WoVre45GrnibKzqINGeCZW4v8pXeKJ
ubhYpGINNILvYrsMaMunR0ktdG8bTSGFDUCWlH8oZa3/l7gPdtHGVXp1hUAB+VZU
MBFxlNDgojQ2Wkoaad2rDFtBxA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:27 2026 by rpki-client