This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft
File:                     ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft (raw, json)
Hash identifier:          IC1y8VVLbo23vIkQs8Q5H5v0F9XOxSisisT/aIVSCAc=
Subject key identifier:   D8:00:A1:FD:37:30:1D:32:B1:CD:41:E6:7E:0F:BC:82:B8:38:3E:34
Authority key identifier: AC:A7:93:15:6B:D3:91:EB:85:0D:3B:1E:16:3E:FC:98:0E:D5:8B:1A
Certificate issuer:       /CN=ACA793156BD391EB850D3B1E163EFC980ED58B1A
Certificate serial:       7EFD593E934235939957DD3E8220EAADB2429AFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft
Manifest number:          0174
Signing time:             Sun 25 Jan 2026 12:47:39 +0000
Manifest this update:     Sun 25 Jan 2026 12:42:39 +0000
Manifest next update:     Mon 26 Jan 2026 14:20:39 +0000
Files and hashes:         1: 3137392e34322e34382e302f32322d3234203d3e20323731313238.roa (hash: fA8HP1NFQuT6h/A/PRUIAE3mH95KffVM++hvnXiLw04=)
                          2: 323830343a373662303a3a2f33322d3438203d3e20323731313238.roa (hash: yIb89OXxXL/lBFAcaqG7doslRxB3KCIuCLBC9DZa3Zg=)
                          3: ACA793156BD391EB850D3B1E163EFC980ED58B1A.crl (hash: APCDca+zAFglJakrZ9g2XWb+Z5v+qNhImzInFA4hW+M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.crl
                          rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:59:3e:93:42:35:93:99:57:dd:3e:82:20:ea:ad:b2:42:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACA793156BD391EB850D3B1E163EFC980ED58B1A
        Validity
            Not Before: Jan 25 12:42:39 2026 GMT
            Not After : Jan 26 14:20:39 2026 GMT
        Subject: CN=D800A1FD37301D32B1CD41E67E0FBC82B8383E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:a2:77:e7:e7:05:bb:6b:b5:d2:ed:e6:73:
                    1d:c5:10:3c:4c:64:8d:e7:ca:b3:19:43:eb:dc:8a:
                    fe:37:b3:ca:f1:db:50:7e:27:8d:b8:01:94:b9:21:
                    5e:b7:ab:8c:f5:be:7d:99:37:be:5c:ba:62:e5:51:
                    7d:e7:64:41:66:32:b0:d6:5f:72:0a:2b:7d:9e:80:
                    c9:ba:a5:ff:16:10:be:81:6e:6a:b6:b1:a1:4a:d1:
                    ff:72:54:8e:d2:11:a6:6c:f5:93:dd:f4:c6:dd:3b:
                    a0:f6:c5:e1:6f:47:f6:b9:1e:8a:dd:ba:10:0d:fc:
                    8a:b6:5d:94:ed:bd:8f:ca:cd:64:3d:19:9b:cf:a4:
                    66:42:47:96:db:1c:46:ab:cf:53:bd:fb:61:df:f5:
                    1f:01:e8:d7:72:6d:27:4b:0d:15:53:70:3c:4c:bb:
                    6d:a1:7d:51:3c:28:95:4a:46:70:ef:d3:af:a7:52:
                    d1:1b:6a:34:4c:a8:b8:29:25:6c:b7:b0:40:61:06:
                    cf:0d:e6:bd:ea:7f:f1:e4:0e:d9:9e:7a:39:54:cf:
                    cc:5d:cc:7e:10:31:18:19:2b:4b:b6:be:83:34:2d:
                    2f:24:e8:27:a1:f0:72:94:ac:e2:30:5f:52:71:22:
                    02:81:32:bf:de:4f:c0:45:d3:12:3d:a9:5e:d1:15:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:A1:FD:37:30:1D:32:B1:CD:41:E6:7E:0F:BC:82:B8:38:3E:34
            X509v3 Authority Key Identifier:
                keyid:AC:A7:93:15:6B:D3:91:EB:85:0D:3B:1E:16:3E:FC:98:0E:D5:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA793156BD391EB850D3B1E163EFC980ED58B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n9Aqhq4zXr8uvVzTx6stRjdsN8ukC1X5zVDNdeuJbae/0/ACA793156BD391EB850D3B1E163EFC980ED58B1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:86:11:89:91:65:a4:16:2e:e9:82:4f:b6:c3:89:7f:9d:
         e6:c7:90:fa:af:22:bb:f5:f6:b8:ed:86:09:e4:23:6b:cf:1c:
         b2:04:c5:1f:1b:a6:ac:c3:6e:64:1f:c1:1b:eb:0c:f7:43:ca:
         81:5f:c5:7d:e7:82:3d:3f:b3:17:84:29:37:6b:32:97:e0:f6:
         0b:67:a6:61:fc:b5:82:61:2e:1c:7f:a1:fd:79:f7:ef:3a:3b:
         14:78:cf:c5:1f:5a:1d:4c:48:a8:4a:49:c7:00:6a:66:28:de:
         c8:78:24:00:d4:22:56:ef:d8:1f:3e:05:bb:1d:75:4b:78:c7:
         04:98:6b:10:5e:3f:97:b6:21:94:4b:c5:7e:47:6e:5c:8e:1a:
         e4:71:7f:3e:d1:f0:12:75:07:66:8e:25:a1:3c:c8:fe:05:8e:
         13:2b:ae:f6:25:73:c8:6e:ca:7e:3b:2d:9d:12:e2:74:45:9d:
         d1:c9:89:9c:f8:ff:86:1d:6e:2e:9e:f1:fa:d1:f7:ce:a1:d0:
         93:3b:fb:7a:df:5c:d0:7a:07:1d:ed:6a:ae:ac:1b:ca:17:76:
         16:92:e6:f0:d8:ac:5c:e8:44:ad:14:b3:5b:63:f7:a7:20:e5:
         2c:a1:0b:09:94:0a:13:e7:8a:94:f9:6b:8c:70:b1:b0:64:ec:
         38:b0:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:34 2026 by rpki-client