This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
File:                     CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft (raw, json)
Hash identifier:          JfQESix2bOzL9ZW0YlzJipT7VgK5J/c+5dchI5C0/v4=
Subject key identifier:   30:A7:A1:3A:2E:9F:02:C4:E1:01:22:90:D1:26:31:FA:9B:6C:42:3D
Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94
Certificate issuer:       /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
Certificate serial:       4714F9789D33DBF682103C2ECDFFBDE567BFD41A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
Manifest number:          02D5
Signing time:             Sun 11 Jan 2026 01:27:13 +0000
Manifest this update:     Sun 11 Jan 2026 01:22:13 +0000
Manifest next update:     Mon 12 Jan 2026 04:20:13 +0000
Files and hashes:         1: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl (hash: b2cD/AONSWjdneUoGECMqTYAPB7hOhSYbfxWXmVRlp4=)
                          2: 3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (hash: A8kWvaltxYyvbnah0osFRp6KjhjI7+SK/5dGPfcjeoE=)
                          3: 323830343a366261383a3a2f33322d3438203d3e20323730343135.roa (hash: Gemcb4V5qPaojkbRamJOllDbJN0znPPuJTFFrmwzhmY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl
                          rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 04:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:14:f9:78:9d:33:db:f6:82:10:3c:2e:cd:ff:bd:e5:67:bf:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
        Validity
            Not Before: Jan 11 01:22:13 2026 GMT
            Not After : Jan 12 04:20:13 2026 GMT
        Subject: CN=30A7A13A2E9F02C4E1012290D12631FA9B6C423D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:bf:e0:93:ac:a2:20:3b:63:2d:33:24:7d:
                    7a:f8:e0:97:05:ac:2e:8b:b9:e8:60:37:4e:2e:1f:
                    c6:61:3b:ef:6e:73:6f:a0:04:52:c3:92:ae:cd:2d:
                    86:c2:40:02:0a:7a:e4:ba:42:e5:69:8d:31:98:b4:
                    eb:f5:e6:71:9f:58:0a:8b:98:68:5c:0b:4b:d5:56:
                    48:4a:14:03:28:08:9b:3f:1a:1f:69:d5:44:00:31:
                    3b:77:30:c8:a8:a1:14:52:fb:41:7e:1f:36:93:a0:
                    67:72:91:5c:db:12:58:07:82:33:ad:b2:ca:9e:2a:
                    ce:89:75:ee:ab:85:79:f7:7c:26:6f:53:e3:70:36:
                    a9:8f:76:cc:1d:eb:1d:69:22:14:80:34:00:6a:93:
                    11:83:0b:54:2b:6c:66:cd:8c:fd:f0:0f:ce:bc:47:
                    75:67:6f:bb:d4:ba:01:13:c2:b1:17:c6:e5:d8:56:
                    a6:86:14:ca:a4:1f:01:0b:95:7a:ef:f2:f8:5f:f1:
                    fc:90:f6:41:e5:65:e7:29:9f:0a:e4:fb:95:5c:1e:
                    0b:b3:a6:e7:03:36:4b:62:c9:3b:e8:d5:18:6e:29:
                    0f:c4:27:b6:b8:94:3c:b1:d6:a3:c7:87:6e:ac:a3:
                    ab:97:c1:90:64:d4:85:89:83:ca:76:fd:e4:13:20:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:A1:3A:2E:9F:02:C4:E1:01:22:90:D1:26:31:FA:9B:6C:42:3D
            X509v3 Authority Key Identifier:
                keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:65:38:d3:98:6e:ca:53:24:b4:35:ca:26:19:b8:9c:e5:fc:
         f0:a5:ad:75:4b:a8:bb:89:26:14:cd:1f:4a:6f:11:7c:50:49:
         88:86:4c:07:4b:22:f1:d4:26:b0:fc:ab:52:21:3e:d3:55:5d:
         0a:a5:b7:c3:bc:c4:fc:50:f0:ed:3d:65:0b:53:10:5a:7e:fc:
         ac:1b:ec:a0:ab:58:fe:f6:20:2d:77:0f:c6:9c:ef:7f:58:c3:
         6b:df:7e:87:9b:f5:b5:d3:51:3d:5f:7a:5e:49:17:66:98:7e:
         2f:18:62:73:fa:8b:46:e8:d6:21:1f:8f:dc:d0:56:00:6e:8a:
         ed:8c:c2:b2:7c:72:d5:29:a5:29:24:06:f0:b6:39:bf:9b:2e:
         f9:c6:13:a8:ea:78:27:26:18:f8:f9:82:32:d2:2a:3f:f0:cd:
         0f:1f:19:eb:7e:24:b2:6f:2f:11:5a:c6:68:dc:0a:a3:63:0e:
         37:c8:c6:bf:c6:7f:aa:5f:9f:1f:3a:1e:31:f7:8b:c5:d5:4a:
         af:93:3c:09:b9:11:b8:17:4b:57:9c:d8:09:9b:97:75:39:e4:
         8f:21:a5:9a:02:dd:97:d6:05:f9:5d:a9:f6:0b:d4:5a:75:bf:
         7d:68:7b:c5:e8:46:9e:b6:db:91:0f:a6:96:36:b7:3a:85:ab:
         cb:14:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:16 2026 by rpki-client