This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          Ec/CN2dg0YRb6wblUVOKjRsllDth38j9DPjUY5MGCQo=
Subject key identifier:   41:CF:8E:DE:99:4D:0C:B2:EF:8C:43:3E:A0:71:1C:8B:49:D1:97:BA
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       16100B3162048DB58253ED153DE9E5853D4BC4E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          03BE
Signing time:             Thu 01 Jan 2026 09:40:00 +0000
Manifest this update:     Thu 01 Jan 2026 09:35:00 +0000
Manifest next update:     Fri 02 Jan 2026 09:40:00 +0000
Files and hashes:         1: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: gmytMNlxeH3j9hJIGBJLZdvIvhQMZEwJGXACmpzXzXk=)
                          2: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: 308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: EcZjEZnagKSwYVtUrdeWPNoRUIpNIaXJMKo5SYgTnx4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:0b:31:62:04:8d:b5:82:53:ed:15:3d:e9:e5:85:3d:4b:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Jan  1 09:35:00 2026 GMT
            Not After : Jan  2 09:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:ef:9d:d1:04:ab:aa:bb:01:18:c2:4d:66:
                    63:89:65:c4:ed:7c:66:ea:01:c2:ab:d7:46:9a:d8:
                    e7:f0:42:5a:37:1d:ed:a8:7d:ad:d7:2a:6b:05:ea:
                    55:b2:1f:c9:7e:2d:49:96:04:cb:e4:95:90:b8:96:
                    1b:e6:1e:75:83:66:ff:61:7a:6a:f4:f7:82:02:b5:
                    5f:51:00:17:ce:db:22:15:a7:92:2c:06:c4:dc:9a:
                    a3:e7:5a:ec:75:3f:68:a7:ec:91:bf:79:6e:7a:46:
                    ed:21:ba:ef:c7:18:df:da:58:49:05:1b:7d:9c:1f:
                    a5:07:99:23:32:0f:ed:81:c8:3a:80:35:e7:1b:7f:
                    8c:97:fc:b7:c0:52:a1:78:94:70:77:6a:3d:81:1b:
                    62:a2:17:97:b9:f2:80:e1:f8:ca:34:43:74:1c:7b:
                    06:7c:d5:e8:3f:d9:d2:c3:7c:bf:d5:8a:80:60:a7:
                    5c:ab:84:96:06:40:d3:34:db:99:76:7d:6d:81:72:
                    e2:35:aa:22:37:dc:21:09:a1:d2:55:b6:06:30:07:
                    2a:e6:ce:ee:b8:90:ff:76:29:34:53:37:66:4f:cf:
                    89:87:07:eb:37:f9:e1:45:15:b0:50:a9:4d:0a:b0:
                    bb:2d:75:2b:95:13:be:8c:c0:8d:42:da:de:68:37:
                    2b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:8E:DE:99:4D:0C:B2:EF:8C:43:3E:A0:71:1C:8B:49:D1:97:BA
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:e4:ab:a2:f7:99:50:31:01:a1:9f:ac:1b:8a:a3:66:0b:
         a6:8a:7c:51:88:83:63:7b:cf:db:6f:fa:d4:07:c6:71:be:72:
         bf:33:2e:d7:dd:de:ba:d7:ff:7d:f3:15:b4:4a:10:39:4f:b1:
         1c:ba:32:e4:9c:da:75:3e:34:17:4f:84:fc:1a:ae:2e:cf:b0:
         c8:d1:52:8a:fc:af:25:b8:ef:91:87:c6:bb:30:e0:4c:e1:08:
         8a:33:d5:06:cc:33:48:e8:30:cc:eb:8b:ef:59:ec:5b:54:ac:
         65:9c:91:94:aa:29:53:18:22:f2:e1:0b:11:7b:8c:ac:7c:9a:
         82:9a:0e:f4:18:52:24:99:f9:20:09:dd:32:e0:3c:56:d2:d3:
         93:e5:3f:b8:a5:4c:5d:63:d0:ac:54:f5:d4:54:45:28:1d:56:
         46:c4:29:69:e2:b5:f6:cf:da:95:f6:51:d6:83:cc:00:63:83:
         e9:ea:58:45:c2:74:57:63:80:76:1a:33:29:3c:36:f6:c7:d0:
         41:89:3c:43:9d:57:46:df:1a:9b:93:59:6c:06:5b:8a:c6:6c:
         9e:cc:3c:76:39:76:63:16:d1:2c:cb:dd:cd:01:99:da:c7:b0:
         83:b4:1a:00:bb:92:cd:e3:27:2c:78:f5:51:f0:47:89:da:03:
         d0:53:87:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 1 16:00:14 2026 by rpki-client