This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
File:                     D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft (raw, json)
Hash identifier:          GStw9p6PUdUWM4CHZPzXWuZPdxCgrJKtO/ZuDBj5JL4=
Subject key identifier:   0F:93:58:F7:C9:A9:A2:5B:18:47:E5:EA:20:79:D2:AF:34:9F:3A:88
Authority key identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9
Certificate issuer:       /CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
Certificate serial:       7BD1443B016CCCF35E7B3A882067D682DF256A50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
Manifest number:          AC
Signing time:             Sun 25 Jan 2026 18:37:48 +0000
Manifest this update:     Sun 25 Jan 2026 18:32:48 +0000
Manifest next update:     Mon 26 Jan 2026 19:45:48 +0000
Files and hashes:         1: 34352e34322e3136302e302f32322d3234203d3e20333936353039.roa (hash: R8qUjIZ6ysKWvC5/eDGClxNbLjc/860MLitI4fgP5XI=)
                          2: D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl (hash: IaGIoR5EblKwOWIWSwdNjJQIkMU0Xza+1vt9s1QyWf4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:44:3b:01:6c:cc:f3:5e:7b:3a:88:20:67:d6:82:df:25:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
        Validity
            Not Before: Jan 25 18:32:48 2026 GMT
            Not After : Jan 26 19:45:48 2026 GMT
        Subject: CN=0F9358F7C9A9A25B1847E5EA2079D2AF349F3A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5d:1c:78:12:62:fa:cf:a7:ba:14:fc:0f:e5:
                    b7:57:28:46:ec:0f:ae:89:ba:4e:30:49:ff:e4:8f:
                    6d:0b:7c:6d:e6:a2:18:ca:8e:0f:47:6d:19:d2:d5:
                    22:83:19:aa:87:a3:46:aa:9b:08:f8:e8:d9:22:b7:
                    41:28:de:cb:e1:9f:5e:46:8f:7e:2a:6a:c4:72:08:
                    24:d8:ca:e6:c2:12:70:2f:0a:2c:ca:04:b9:9d:f8:
                    9c:33:8e:af:f5:28:a5:5d:f0:6c:f9:19:8e:03:13:
                    25:43:82:56:e1:62:17:de:fc:f3:73:c7:28:17:b7:
                    81:ea:bf:4e:85:f1:38:65:a4:30:fb:5e:7f:27:1c:
                    7d:40:b1:03:c9:52:61:f1:dd:c3:ee:d9:b3:c6:6d:
                    3b:29:67:8d:b1:c0:b9:6a:4d:b5:06:7a:4f:57:67:
                    82:78:6c:cb:19:e7:8c:1b:69:55:71:9a:4f:d0:33:
                    93:55:f3:19:4a:b0:a8:05:b1:9c:1f:33:8c:4c:89:
                    6d:23:43:9b:13:99:7b:b9:7b:5d:a0:41:bc:a3:07:
                    46:0a:4d:de:05:3b:29:22:b1:7e:9b:3d:2d:b9:08:
                    6c:5a:8d:ef:05:de:e9:b4:8c:45:48:3a:08:1b:07:
                    de:bb:54:08:26:90:1a:4e:f8:67:64:1e:98:70:1e:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:93:58:F7:C9:A9:A2:5B:18:47:E5:EA:20:79:D2:AF:34:9F:3A:88
            X509v3 Authority Key Identifier:
                keyid:D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:28:93:6f:54:11:93:e1:bf:56:4b:78:f1:b5:b3:e4:7c:05:
         6c:4c:6b:04:9a:10:a0:9c:aa:1c:be:3a:b1:c4:2c:40:65:09:
         ab:f8:bd:2c:6b:a6:df:51:49:dc:02:4c:8b:2b:7e:07:60:f0:
         7e:f6:02:1c:17:19:99:fa:8a:d7:21:f9:4d:fa:19:9c:af:11:
         d8:82:28:21:af:20:65:0a:11:d1:06:1f:47:89:ad:84:fc:db:
         0a:9f:68:37:26:10:43:21:ae:8d:2e:c6:c6:97:eb:1a:99:81:
         3c:ee:a8:bd:a6:69:97:c4:18:ef:0a:12:e6:5b:c9:96:a9:32:
         6d:e5:ec:42:aa:d9:b4:45:08:10:04:11:5d:9d:e1:4b:3d:80:
         f6:eb:45:1a:48:3b:c1:f0:ca:43:8f:57:ca:3c:5a:5b:5c:b5:
         b7:d4:4f:d6:02:dd:28:f9:ac:85:6c:d2:47:9d:49:5c:51:55:
         57:c9:ea:a1:58:89:d7:48:b1:2d:04:6e:c2:bd:14:f8:35:29:
         55:3b:28:31:0c:02:ec:3f:1a:2b:44:e4:46:a0:9d:9f:d9:6b:
         e0:25:f4:f9:82:09:cf:f5:4e:2c:1c:f0:4f:7b:6d:fe:6d:16:
         7e:73:cf:d7:c2:35:26:94:4d:b5:bb:51:ce:4c:ac:dd:25:ba:
         fc:8d:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:51 2026 by rpki-client