This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          NhByaQlmHO0L6TzzgGAyZQogulE8z16BY0K+z2L65wE=
Subject key identifier:   20:B4:C2:CA:A7:02:63:88:48:8B:23:99:AE:F4:1C:D1:50:4C:73:AD
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       1D8B450DC7A5F9D75631109373792AD65707E4FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          02C3
Signing time:             Tue 13 Jan 2026 02:59:28 +0000
Manifest this update:     Tue 13 Jan 2026 02:54:28 +0000
Manifest next update:     Wed 14 Jan 2026 05:15:28 +0000
Files and hashes:         1: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: R+lJ3l7UdjCU7kkCR68kGkR301UIjRYBugRziVPE9yM=)
                          2: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: j1nslom0e916eBzyw+5Vl34iuI8TAS5aLHgLgLAY4IU=)
                          3: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=)
                          4: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY=)
                          5: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: 6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=)
                          6: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: EdNQOEWft7SIh82uDkeDlqX2eN1MwX0zWRm1VfSUr8k=)
                          7: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: iUhuZCqf+gxZqO/cM6ScZTXsH+jrXHXlfnCWGA2Il7o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 05:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8b:45:0d:c7:a5:f9:d7:56:31:10:93:73:79:2a:d6:57:07:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jan 13 02:54:28 2026 GMT
            Not After : Jan 14 05:15:28 2026 GMT
        Subject: CN=20B4C2CAA7026388488B2399AEF41CD1504C73AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:f9:71:a5:0f:4c:8c:a8:a3:fe:11:b7:13:
                    d5:cd:53:44:32:b3:0a:b3:5b:b9:c5:e0:cb:7d:db:
                    da:6c:2e:11:f0:c5:ee:84:8e:32:37:17:ae:43:50:
                    8e:cb:9d:10:c7:a6:63:82:86:86:a8:c1:e5:e3:81:
                    46:be:1b:be:56:38:af:14:f7:9b:69:fb:e7:f3:5e:
                    d8:e6:40:ed:31:22:77:35:23:09:44:04:64:9a:17:
                    87:96:44:85:da:7d:d6:40:03:d5:06:8f:1a:0d:dc:
                    ef:ea:d6:aa:8b:56:b7:8f:f5:ce:6a:b2:e9:92:8a:
                    33:4c:cd:64:f0:9a:58:22:b1:f2:81:1f:97:36:87:
                    17:b7:aa:5a:6e:91:9b:fb:05:cd:de:49:05:53:d0:
                    a2:e8:c4:02:0c:c1:25:0e:7a:81:29:e8:e8:ba:42:
                    af:4f:20:04:ef:fd:c5:b5:f1:df:05:c6:2f:0e:36:
                    a6:4c:6a:9a:69:e2:5b:b6:fe:ef:6b:1f:f5:bf:08:
                    eb:64:05:85:b8:a6:e1:47:6a:1c:95:22:83:c9:04:
                    36:4f:f2:9f:c4:11:3f:d9:bb:2a:4d:ec:da:f8:46:
                    ee:f3:d3:2a:8d:d1:1d:4f:3b:da:98:63:d1:bc:63:
                    34:28:e2:14:1c:a1:77:06:0f:52:52:88:37:ff:9b:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:C2:CA:A7:02:63:88:48:8B:23:99:AE:F4:1C:D1:50:4C:73:AD
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:c8:21:db:76:1b:06:66:d3:24:32:8f:cd:cd:e2:dc:57:
         8b:63:d1:8e:c9:33:8b:6e:39:ad:bb:b9:2f:62:f1:9b:b9:2a:
         e3:77:ac:5a:50:db:09:ad:33:f6:2d:36:a2:11:09:53:a7:71:
         46:c4:90:bb:10:06:84:56:c9:46:2d:09:57:4f:9f:8b:74:40:
         1e:05:a9:71:7e:ad:f8:67:ba:db:0d:45:bf:f4:91:35:03:58:
         62:24:1d:99:f7:81:b5:5c:a7:26:0a:16:57:58:dd:05:7f:7e:
         0c:20:63:43:74:e3:75:9b:3f:ce:6c:3f:d4:72:95:cf:1c:e9:
         0a:17:c0:65:71:84:cd:b4:18:bc:19:ba:16:56:4f:af:50:5e:
         ba:4a:2e:be:9e:f0:d6:57:e7:77:69:70:e2:ed:35:aa:6c:00:
         54:dc:b2:a1:07:fd:d1:dc:a3:41:7e:c0:f4:ec:c3:46:79:f6:
         7f:18:05:c5:69:c1:b5:59:44:dd:ad:92:db:9d:fb:a3:a8:d0:
         af:2c:11:74:ed:7e:37:e4:29:0d:c9:fb:82:29:c2:61:e0:82:
         ec:84:0a:cb:9a:9b:88:ef:9c:0f:96:4e:3e:cc:6a:3b:df:07:
         c3:6a:5d:32:ff:75:dd:97:48:8e:96:3c:81:39:63:90:6a:34:
         06:7a:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:52:03 2026 by rpki-client