This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft
File:                     BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft (raw, json)
Hash identifier:          fxZzsXF+C0geA5prQJH3zFfsHWicQxS8ztKUSNXpr60=
Subject key identifier:   06:02:45:B7:46:A3:23:F1:A6:A3:06:91:21:2D:A8:D0:5C:F5:62:CA
Authority key identifier: BE:A2:81:A7:EB:EE:36:19:E9:2A:DE:BD:79:54:99:4E:D1:4E:DA:A7
Certificate issuer:       /CN=BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7
Certificate serial:       7B4756D2DADDDF12F80D6CA549059AB1420CFFC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft
Manifest number:          0122
Signing time:             Sun 25 Jan 2026 06:45:18 +0000
Manifest this update:     Sun 25 Jan 2026 06:40:18 +0000
Manifest next update:     Mon 26 Jan 2026 08:54:18 +0000
Files and hashes:         1: 3139322e3134302e36342e302f32322d3332203d3e20323636353530.roa (hash: 0rJsVszqd6qJt2rd9U1tQfgux1bkgBfLlwLSdd0rwkI=)
                          2: BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl (hash: 3+ExUxu1j0jEfim8SNor4Gj8MBITEiQcB4oJliY+SOY=)
                          3: 323830343a336462633a3a2f33322d313238203d3e20323636353530.roa (hash: 4+r/CpNpGhUCGT+Jy5+kk15xLYy51n+dBTfZ5QP5rT4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl
                          rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:47:56:d2:da:dd:df:12:f8:0d:6c:a5:49:05:9a:b1:42:0c:ff:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7
        Validity
            Not Before: Jan 25 06:40:18 2026 GMT
            Not After : Jan 26 08:54:18 2026 GMT
        Subject: CN=060245B746A323F1A6A30691212DA8D05CF562CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:16:1d:ca:46:42:d0:fc:11:dd:96:a4:a3:
                    80:42:69:a5:08:8c:e5:9d:94:c3:d6:93:0d:8d:7f:
                    43:5e:82:b3:8c:71:e9:1f:9b:41:50:43:d9:ca:ea:
                    86:b8:e2:45:26:02:f1:0b:f5:d6:4d:e5:fc:5e:03:
                    08:31:34:fe:b8:20:f3:9d:d7:33:42:17:fc:14:f0:
                    50:11:0f:08:72:b2:12:1f:e4:aa:93:e1:f4:91:e5:
                    0c:a5:17:61:45:6c:01:7a:8f:8d:6d:8e:55:9a:e9:
                    9f:da:21:93:5e:21:ba:11:2f:df:4d:94:4a:1e:2f:
                    bc:01:f0:09:a9:aa:6b:ae:03:47:b7:11:65:d3:2a:
                    c1:cc:47:47:ba:cb:ab:d8:4d:6e:20:9a:a0:77:29:
                    9b:77:50:cd:3e:42:c5:aa:93:4b:fc:8b:12:cb:47:
                    bc:f2:20:ae:82:63:19:47:60:d8:f0:0d:ea:bf:c4:
                    03:5d:f3:a0:f6:54:a3:8d:93:a3:fb:2c:68:15:cb:
                    0e:bc:26:4d:03:d5:f1:8b:70:4d:19:65:74:b0:0f:
                    53:3e:a0:20:3d:33:9b:d7:94:94:ae:c4:c4:cd:7e:
                    e1:3f:1a:bb:7f:54:6c:11:94:5b:bf:ff:4d:f5:43:
                    3f:02:2c:9c:59:a8:6b:6d:d5:21:8e:59:54:44:61:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:45:B7:46:A3:23:F1:A6:A3:06:91:21:2D:A8:D0:5C:F5:62:CA
            X509v3 Authority Key Identifier:
                keyid:BE:A2:81:A7:EB:EE:36:19:E9:2A:DE:BD:79:54:99:4E:D1:4E:DA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:f7:c2:37:40:fb:af:2b:d7:79:ab:9d:8d:7f:53:1d:9d:
         29:e9:8a:71:83:a2:23:1e:bf:f3:f5:9b:3c:43:8b:2c:60:87:
         d7:0d:3a:a4:19:09:d5:5a:e8:86:fb:3f:84:b3:4b:24:aa:f0:
         82:df:af:b3:4f:d0:03:8a:30:58:cf:57:a1:b3:31:75:06:87:
         05:61:b4:d1:2c:7d:ed:b5:d0:f6:7d:f5:ea:71:74:7f:ee:1f:
         0f:c7:f2:b2:dd:4c:aa:cf:2a:26:9a:06:ab:47:f8:6e:7a:34:
         e3:4d:65:6c:e9:3e:03:2b:f7:bc:9e:19:e0:6d:1c:45:57:97:
         59:a8:f0:a8:76:43:58:f5:a4:c0:5a:6b:05:e7:c6:dc:84:6f:
         5a:c6:15:a5:57:10:48:05:48:64:34:7c:f2:26:a6:20:e1:93:
         36:07:28:b3:44:3f:ee:30:07:70:23:76:33:54:03:0d:de:4e:
         89:86:cd:2c:89:20:ed:cd:f6:18:ff:07:c3:f5:78:3c:a9:36:
         75:b5:c7:e3:7a:5b:88:c1:9e:30:de:d5:e3:51:c5:0a:a2:cb:
         5a:5e:c1:aa:70:3d:54:e7:77:af:9c:9b:6c:f9:f4:d0:bf:3a:
         cb:59:cf:e9:4d:27:e3:c2:6e:03:df:fd:6d:e9:9f:65:54:5e:
         9e:30:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:57 2026 by rpki-client