This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          A8JmTU1tBwWUbnaE0aCvhiWQQTWQ55ci44cHbAC0XRU=
Subject key identifier:   8C:71:E4:3C:31:51:B9:4D:84:6E:F1:85:06:3D:AB:2E:FB:A3:AB:C5
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       7D840A6632ADD6BE66E40D2A32B5ED77601C9213
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          0251
Signing time:             Sun 25 Jan 2026 11:14:36 +0000
Manifest this update:     Sun 25 Jan 2026 11:09:36 +0000
Manifest next update:     Mon 26 Jan 2026 12:07:36 +0000
Files and hashes:         1: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: 628iIDa+VWeWvRlSudZ1n1Q87UmPn/elvz8bbSiYf50=)
                          2: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: 5or+ffjF3ckLhryOsz3IIIYfCzvKN8SwjJrOnTxOTgw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:84:0a:66:32:ad:d6:be:66:e4:0d:2a:32:b5:ed:77:60:1c:92:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Jan 25 11:09:36 2026 GMT
            Not After : Jan 26 12:07:36 2026 GMT
        Subject: CN=8C71E43C3151B94D846EF185063DAB2EFBA3ABC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:67:6c:5a:f9:90:6e:c0:a1:7e:a1:b5:29:
                    df:55:bb:a8:a7:aa:cb:3a:9b:86:f6:f3:3d:54:3c:
                    de:2e:59:f2:61:0e:2c:3e:1e:c6:56:de:2d:ef:bc:
                    94:5b:0e:30:b9:d6:61:23:66:ad:46:6b:02:c3:64:
                    e4:34:67:19:b2:03:8c:2d:ec:0e:79:30:5a:d8:c4:
                    71:bb:a7:c3:56:cd:53:13:32:5c:4b:c3:80:60:9f:
                    c0:f7:0c:2e:a7:bb:a2:6b:c2:67:bf:fb:d0:62:8f:
                    21:06:25:e5:a4:9f:6a:43:38:2b:b1:b8:af:aa:05:
                    a3:81:09:66:bc:47:a3:c9:ec:79:4c:53:6b:6f:b8:
                    fc:1e:0a:58:e8:be:b4:67:3a:86:cb:c4:ba:aa:01:
                    e1:ee:3b:91:65:66:35:90:b9:27:74:56:b1:90:67:
                    f3:8b:28:78:51:40:68:39:a6:ce:19:a2:b0:d2:70:
                    09:e8:bc:6c:be:9e:61:f8:6f:2a:96:f6:27:c6:31:
                    78:13:5a:d4:10:95:f9:2d:9a:2e:ca:38:4d:2b:4b:
                    0a:73:e0:67:4a:5d:01:77:94:eb:05:74:41:4c:ba:
                    09:2d:ee:21:a3:9a:56:84:30:35:d3:c5:74:9d:95:
                    84:2d:18:6e:4b:0c:69:80:7c:66:a6:d1:44:48:e4:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:E4:3C:31:51:B9:4D:84:6E:F1:85:06:3D:AB:2E:FB:A3:AB:C5
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ac:e4:ae:b3:06:9e:7c:49:59:22:46:d9:b1:bc:82:e2:9b:
         57:7e:04:a0:eb:a3:19:48:c9:1a:9c:82:2f:7c:7f:87:38:42:
         c8:d1:71:3e:db:81:46:ef:7d:39:96:15:8b:ac:c0:03:c4:ba:
         c3:1d:aa:1c:64:3f:96:d3:26:5c:3b:b3:f3:16:04:8c:c2:4e:
         49:05:a9:6a:1d:bb:d9:82:fd:71:0b:22:cf:d5:d7:89:cc:09:
         fd:97:07:36:77:fb:76:35:d7:3a:7a:f4:b8:c4:9b:6d:90:1d:
         59:13:e1:a1:14:09:1c:39:27:d3:94:a0:c3:e1:d6:2f:13:17:
         74:bd:0b:b6:80:88:6d:35:76:b9:87:9d:1a:7e:29:8c:aa:86:
         cb:51:67:8e:6a:dd:6d:b6:6a:52:21:2f:f6:fb:3f:3c:85:e8:
         33:ca:ba:8f:79:d5:1f:88:b6:25:dd:04:93:31:d0:a0:f7:d8:
         9c:98:84:f7:bd:07:70:e7:85:83:2e:79:58:ff:a1:a9:b4:2a:
         5c:94:86:9f:68:22:c3:64:37:50:3c:fb:da:b9:fa:37:f4:b3:
         ae:30:70:3b:fa:60:55:a0:94:2f:58:9f:d9:a0:40:49:64:6b:
         67:8c:e3:01:df:ea:6c:c0:eb:6d:3b:4e:62:60:41:e2:b1:f1:
         46:c9:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:44:59 2026 by rpki-client