This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
File:                     2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json)
Hash identifier:          OGsYu2mK7qoYvfcGJNqUCAVw89nDLLr/QIzWrA6eTYs=
Subject key identifier:   DD:50:78:FF:AF:7E:F1:70:2E:05:F3:53:53:51:C9:9F:74:88:1C:32
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       3F3C94BF4BA3AB4F4FD4F47678A489155552B618
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
Manifest number:          03EE
Signing time:             Sun 25 Jan 2026 09:35:12 +0000
Manifest this update:     Sun 25 Jan 2026 09:30:12 +0000
Manifest next update:     Mon 26 Jan 2026 10:57:12 +0000
Files and hashes:         1: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=)
                          2: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: fsWp/NxcDauy4G66EwUPvt2+kTrPQ8zisQKhGyl4JtI=)
                          3: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=)
                          4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3c:94:bf:4b:a3:ab:4f:4f:d4:f4:76:78:a4:89:15:55:52:b6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Jan 25 09:30:12 2026 GMT
            Not After : Jan 26 10:57:12 2026 GMT
        Subject: CN=DD5078FFAF7EF1702E05F3535351C99F74881C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:ea:bc:08:3d:b5:99:7d:4c:af:85:fb:bd:
                    23:8a:41:d5:e4:fd:08:51:15:1c:9b:9f:0a:e0:a7:
                    6a:df:d8:06:19:02:68:cc:98:c1:95:3d:b4:7a:fb:
                    dd:02:94:50:b7:a4:d1:bd:99:e1:f4:0d:29:28:44:
                    20:65:80:60:13:fc:07:bf:bd:65:71:2e:ba:ee:be:
                    51:f5:34:d7:38:3f:2c:45:f5:c8:43:e6:2f:37:c1:
                    e3:89:2c:ba:8c:82:ee:05:36:cd:a7:5c:35:0e:05:
                    63:25:94:f1:27:72:22:73:81:c5:e8:82:b4:aa:c0:
                    3a:eb:55:f5:5c:66:00:4f:8c:a7:a1:3d:1f:8c:c5:
                    74:14:f9:2b:12:49:c3:d4:61:2f:4a:8a:bb:9f:88:
                    4a:68:77:b0:f0:25:24:03:5a:26:7b:f9:dd:13:01:
                    92:27:da:d3:ff:b7:e8:15:25:60:3f:4b:15:a5:16:
                    20:e3:d8:8e:ef:d1:d7:c2:e2:24:81:41:80:30:35:
                    35:ab:25:69:8d:47:f6:d2:2a:16:a1:47:89:01:1a:
                    64:30:28:36:dd:3f:47:a5:cc:2d:2d:4e:4a:17:52:
                    cf:88:19:5e:fb:8f:e8:1e:4c:86:d3:e5:ba:55:30:
                    01:40:08:7e:7d:21:c6:d1:24:8d:04:02:f4:d6:d8:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:78:FF:AF:7E:F1:70:2E:05:F3:53:53:51:C9:9F:74:88:1C:32
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:94:3b:cc:07:aa:9e:aa:cd:77:ac:d3:be:60:01:ea:85:6e:
         b6:5e:6f:ba:c4:5c:5a:4c:9f:6c:c8:64:08:a9:91:89:87:ff:
         79:70:80:f2:c4:ef:37:8f:d1:ad:62:71:cf:d7:62:b1:fa:8c:
         44:30:7b:cd:13:fa:f6:62:68:35:10:7f:a9:15:5f:a9:29:06:
         11:3b:6f:8e:1d:a2:75:fe:8c:78:a3:aa:6f:de:7d:3d:c4:d4:
         ff:2b:d1:6a:4a:92:07:c2:67:4c:07:44:6d:1a:ea:da:33:ee:
         ba:6b:6d:53:d2:99:11:c6:4c:df:ff:0c:b6:53:7a:8b:e4:e3:
         2e:0f:34:74:e6:62:48:a9:d9:ba:e5:57:21:5b:b6:53:e5:a1:
         49:f6:a5:51:51:e2:b3:c9:c8:ad:e5:28:22:23:9d:6d:35:e8:
         d1:d7:67:b2:5d:5e:f0:d4:5a:6d:ac:8c:16:63:fe:c0:2d:d3:
         ba:8d:d0:21:87:4f:f8:ab:15:bb:7e:2d:e9:1d:43:4d:4d:82:
         79:c3:52:94:3a:3a:6f:12:31:de:fe:e7:3c:0d:77:c2:49:4f:
         48:a7:ef:4e:7e:87:a6:51:c6:e9:1b:9b:7b:f6:db:5e:31:5b:
         b5:dd:ad:92:e9:f2:39:85:1e:66:25:44:8a:66:a4:22:04:3a:
         44:dd:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:41 2026 by rpki-client