This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File:                     28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier:          Owg/UUTCiYbdu5jVgEfq5n8PP+Y8dRSaAgPrpdpPc8Q=
Subject key identifier:   08:04:7A:D1:64:3C:A0:DF:96:02:10:08:02:64:41:61:B4:85:27:6C
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       0F440F4FA0754B63EC6ACE6E0DB71C75D5CBBDF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number:          02A6
Signing time:             Sun 25 Jan 2026 04:24:18 +0000
Manifest this update:     Sun 25 Jan 2026 04:19:18 +0000
Manifest next update:     Mon 26 Jan 2026 05:18:18 +0000
Files and hashes:         1: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=)
                          2: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=)
                          3: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: JW37KxgxKPqRuFOfbFSd2DyFfzU25PdH2t5rmHNO/G4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:44:0f:4f:a0:75:4b:63:ec:6a:ce:6e:0d:b7:1c:75:d5:cb:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Jan 25 04:19:18 2026 GMT
            Not After : Jan 26 05:18:18 2026 GMT
        Subject: CN=08047AD1643CA0DF9602100802644161B485276C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:b6:7d:2c:53:e8:c0:a5:e6:40:d3:2e:88:
                    06:bc:ae:89:fb:5e:b9:f2:d4:3d:3a:40:99:8c:86:
                    df:c1:84:0d:98:5d:73:f8:b2:4b:a1:9e:ee:27:23:
                    c4:fc:a1:2b:6a:79:54:fe:8e:ec:a7:85:b0:df:a0:
                    08:86:3a:82:11:72:f1:35:20:dd:7c:ae:83:4c:ba:
                    54:ec:36:74:c2:ca:06:80:a8:9f:e6:89:b8:01:ac:
                    dc:a4:ad:39:48:23:7f:34:e7:5b:e6:cd:ce:fe:76:
                    03:d5:72:5a:20:d2:7c:fa:70:8f:a3:06:99:64:72:
                    b6:4b:cd:6c:b7:64:ab:86:48:dd:1f:3c:3a:6c:60:
                    cd:36:9b:fd:9e:18:09:4d:8e:de:3d:bb:15:13:e6:
                    07:37:22:59:87:dd:fa:90:5c:21:20:a0:a8:77:e7:
                    b8:d6:d4:ec:68:06:91:73:1d:c6:98:0a:f5:3e:64:
                    71:00:d5:a5:81:04:43:5c:0d:1e:cd:42:a6:c6:03:
                    07:6b:ba:d2:35:c3:9c:5c:56:7c:3a:46:c8:96:03:
                    62:f8:88:b4:19:44:6c:68:8a:ec:81:28:61:43:ef:
                    b6:3e:1c:3c:6e:aa:b6:be:fd:dd:1e:28:a8:1b:ed:
                    9e:6e:84:36:39:79:d4:c1:86:4e:ed:7a:d0:5e:4b:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:04:7A:D1:64:3C:A0:DF:96:02:10:08:02:64:41:61:B4:85:27:6C
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:e0:41:77:89:8b:a7:80:f6:d9:19:32:42:66:34:4f:30:
         59:07:55:59:45:66:5e:a4:c7:e0:00:2c:e4:14:3c:83:3a:e6:
         0f:1d:4f:ba:0d:a0:dc:a6:03:6b:70:33:06:24:ab:d8:b0:8c:
         76:0b:05:96:49:9b:c8:3c:92:79:76:9a:b7:8d:fb:9f:c9:c7:
         b5:a1:ec:f6:2c:1a:48:1a:df:6b:ae:f0:73:e9:c4:75:b8:33:
         ae:48:09:15:3a:ce:59:3b:93:c8:f0:3b:14:d4:7c:14:b1:62:
         60:41:dc:40:b8:c7:ff:54:2f:2e:06:26:9a:d9:2c:d6:24:c8:
         be:07:05:62:5f:43:2a:ad:09:f6:83:b4:01:09:4b:fa:44:65:
         8a:9f:8e:fb:1e:ac:cd:db:30:73:7b:a7:f9:65:f9:84:60:d5:
         3e:65:27:1e:40:fe:d9:4d:d9:6b:07:32:f0:d3:68:77:37:54:
         9b:42:10:45:75:bc:45:4a:d7:3f:32:b6:ac:21:eb:f8:58:ae:
         28:26:7c:f1:74:33:f3:00:c7:08:c4:61:56:64:a5:83:9f:c0:
         72:14:de:7d:87:b6:47:eb:68:1a:e4:67:a3:eb:94:04:e0:e1:
         db:5e:d2:37:11:f2:7a:24:3f:a5:1e:06:42:6c:2c:f8:5d:d4:
         88:2c:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:49:02 2026 by rpki-client