This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          aVoN6/lpHVMeCfqzv5J/dw8gadnMk/5/JsqM19TJRz0=
Subject key identifier:   D4:E4:FE:00:07:2D:8A:B1:6C:AF:B9:C3:39:63:C9:0F:3E:95:62:60
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       5DA27BEF4A05F5E2E493FE7623FE6E3751656BBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          035E
Signing time:             Sun 11 Jan 2026 12:30:00 +0000
Manifest this update:     Sun 11 Jan 2026 12:25:00 +0000
Manifest next update:     Mon 12 Jan 2026 12:44:00 +0000
Files and hashes:         1: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: CQP3HUS35Qz5oIEtwNHruBuoq7MQ+rM1a+MsTLoK+Cc=)
                          2: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: yrxgY//M5+mWvfVFpBjhbx1sSOwmgxonkXJBCznBSsg=)
                          3: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: NJXPg3F1laW5ItIIp22QI+IxMXIBDhivnZwY6ZphBEk=)
                          4: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: 5eXFDYcJ3nmPVI0tJflPeefx8uftXoBchJSt7T9eQNM=)
                          5: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: QzY77npnmYGWyIzQ3+0FGFQKMhe3QAwpJTvLcFhREWU=)
                          6: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: GjZYzmx5TCUVGrdtTOThdIs6uYKAGgPT+rqpsOg9iSE=)
                          7: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: yNr0zDiN3bjnLY8Fy1u65vTyl1BOcbFnxldXBGOX9HU=)
                          8: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: Y7ZBcvqoFAWwxe+SXHw9z0vDSZ2z/duDgO6FbCBXRr8=)
                          9: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: hLGz/D5soY3387SUgGsJs5xD6GDZUbWJ37e7fq9gkCg=)
                          10: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: F71ivpk+1NqQHvneGVzXJLNf3heVeNAS9Mm/s1aK1xc=)
                          11: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: L7mXU16WalNRvU/g3UN6EAKWiAxCDetlCh8cL1au8k0=)
                          12: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: cBphwTvrx3SCRnGJ4r7vVDC8gytBQc7VAhDDexBiS9Y=)
                          13: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: FrsRVS8utbon7oWH2AXVtR/Ng1ve2fGBZ7E7JLuIdI4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 12:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a2:7b:ef:4a:05:f5:e2:e4:93:fe:76:23:fe:6e:37:51:65:6b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Jan 11 12:25:00 2026 GMT
            Not After : Jan 12 12:44:00 2026 GMT
        Subject: CN=D4E4FE00072D8AB16CAFB9C33963C90F3E956260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:46:68:38:c1:8f:49:b7:04:1a:df:27:4e:4d:
                    3d:5f:f6:7f:fb:98:ea:c6:35:3a:2c:63:4d:cc:65:
                    f4:8e:79:06:82:54:24:1b:55:2d:ba:b3:06:43:68:
                    60:02:df:12:ca:1f:cd:ca:a4:16:70:f2:b1:bd:39:
                    04:7a:59:00:23:e0:9d:a6:72:12:b3:83:5c:03:07:
                    25:cc:32:00:41:7a:4a:64:55:f4:c9:8c:3f:56:26:
                    f8:29:81:87:e7:cc:2c:39:03:40:e4:f4:f5:d5:62:
                    d1:50:49:df:2c:02:62:3f:14:2f:c8:9c:58:fd:12:
                    1c:9a:f1:75:2a:ec:4e:34:15:a1:d4:b9:c7:cf:0b:
                    82:11:e1:6b:bf:ab:35:87:ff:4f:1c:c2:89:02:43:
                    c4:32:89:48:8c:82:a5:70:51:11:9b:87:c1:1e:f3:
                    af:3b:1a:58:67:0e:69:ca:79:f5:e2:35:f1:2c:b0:
                    5b:ae:65:c2:51:b8:82:5f:2b:78:db:a5:f8:b3:e1:
                    f0:59:88:a4:e5:6a:26:df:81:53:52:cb:80:23:75:
                    aa:fa:f0:60:05:ef:1d:47:e1:48:bc:e5:22:2a:28:
                    1a:b8:25:48:63:84:a6:09:2c:42:8c:9e:5e:9d:37:
                    8f:4a:dd:44:9a:6f:6f:a9:e7:e6:30:96:b4:d7:4c:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:FE:00:07:2D:8A:B1:6C:AF:B9:C3:39:63:C9:0F:3E:95:62:60
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:9c:af:85:e5:d5:7b:b3:ff:d5:e5:16:11:83:06:d7:3c:
         20:17:72:8e:00:c4:d2:03:6e:07:3a:11:0e:df:bd:2e:7e:94:
         3e:fc:78:e4:5c:fd:5d:45:45:20:69:a5:58:f5:80:8f:f0:8d:
         bc:04:d0:22:8d:3b:79:37:60:0f:73:ac:b8:fe:d3:a7:20:3f:
         b0:0b:18:d6:de:d4:bc:90:f9:8e:2e:d5:47:e9:05:dc:f1:cb:
         0d:df:f6:e4:57:c7:1f:17:43:20:75:40:fa:7c:84:49:ae:ad:
         65:f8:da:1d:0f:c9:90:00:21:f8:a2:21:9c:a2:12:a9:0c:19:
         da:77:23:f6:e1:4e:0d:3b:85:cc:e2:16:07:13:9e:75:53:65:
         57:38:c8:7a:f5:6d:93:63:39:99:1b:ea:3a:2e:60:1b:02:77:
         51:d3:f4:e1:4c:e6:21:09:9b:37:02:ad:43:eb:4b:ec:9f:1c:
         86:c9:68:89:17:1e:7f:7b:cc:70:e6:87:69:dd:43:cd:2e:ab:
         bb:7d:b6:f8:85:9d:cf:63:0e:59:06:fc:bd:95:8b:1b:44:82:
         09:e8:c8:8d:d3:9c:38:0b:e7:eb:d0:80:ca:10:8c:70:44:35:
         fe:09:de:c0:8e:34:05:f4:de:6c:f4:65:95:73:0e:87:b2:b0:
         b1:ff:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:20:37 2026 by rpki-client