This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
File:                     4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json)
Hash identifier:          hfV08lKmi87OGH6Ec3K6qgJaZYSpcx4T2kJqgjGvFWg=
Subject key identifier:   51:74:DD:B0:25:DF:38:B8:80:EF:E6:D9:87:76:42:0D:7F:F5:14:BA
Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65
Certificate issuer:       /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
Certificate serial:       17244F51040A42C551A6C31A7DE198675ADAA07F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
Manifest number:          0336
Signing time:             Fri 09 Jan 2026 15:59:04 +0000
Manifest this update:     Fri 09 Jan 2026 15:54:04 +0000
Manifest next update:     Sat 10 Jan 2026 16:47:04 +0000
Files and hashes:         1: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=)
                          2: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: CrP098yYRYxMrKQOwmd1fNnItIdJHlg+7hRjEKsKgok=)
                          3: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 16:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:24:4f:51:04:0a:42:c5:51:a6:c3:1a:7d:e1:98:67:5a:da:a0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
        Validity
            Not Before: Jan  9 15:54:04 2026 GMT
            Not After : Jan 10 16:47:04 2026 GMT
        Subject: CN=5174DDB025DF38B880EFE6D98776420D7FF514BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:09:42:93:dc:7c:ff:1e:1d:fb:c8:8e:76:
                    6c:0e:1d:2f:93:02:7c:00:4f:f7:5f:6d:65:cb:16:
                    06:7e:a2:e0:c8:0c:95:10:fb:69:0c:b8:de:5d:e3:
                    24:75:9f:73:ac:50:6a:8b:7d:3b:23:1f:ce:3b:fb:
                    77:44:37:ca:e2:d1:3f:fd:74:eb:ab:54:c3:cf:e8:
                    77:44:e8:3a:06:67:1e:a5:13:46:c4:75:a8:21:5a:
                    35:13:4f:bb:91:31:76:64:cc:a1:fb:6b:da:3e:e7:
                    b0:0a:d3:e2:54:6d:9c:ad:29:b1:c5:1f:98:b1:ff:
                    70:6e:37:11:ea:b8:ab:2a:65:c8:1c:c1:65:66:2a:
                    e1:1f:6d:66:d1:3a:33:e4:8a:4a:8e:9b:03:3e:a0:
                    62:7f:91:10:b8:1e:01:92:09:05:4c:f8:75:ba:65:
                    8a:3b:66:1e:a3:b2:37:31:ab:de:ec:82:dd:d5:d4:
                    09:d0:7f:1a:32:da:12:66:62:3c:6b:59:e9:61:6e:
                    67:62:f6:33:ca:fd:f7:0a:67:c9:83:27:59:45:90:
                    30:e6:d9:09:42:c8:97:3e:ea:1f:c1:70:a8:41:8f:
                    8e:12:62:18:cf:8f:cf:48:a6:bd:54:54:61:76:78:
                    91:69:e8:70:26:60:dd:21:51:ee:f7:f1:d1:dd:c5:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:DD:B0:25:DF:38:B8:80:EF:E6:D9:87:76:42:0D:7F:F5:14:BA
            X509v3 Authority Key Identifier:
                keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:35:4d:14:4b:11:ea:7a:4b:0b:08:36:5f:9b:06:96:8a:6e:
         2b:75:d0:94:f2:bf:ed:27:7c:91:1a:68:7f:ea:29:dc:72:27:
         e2:6c:cc:7b:ce:00:23:48:e7:40:95:67:4c:c9:a4:35:0b:d7:
         0c:16:98:02:a3:75:0b:e2:99:fd:77:70:5b:eb:07:03:68:65:
         a5:39:6b:35:e5:ac:62:9b:d5:7f:f4:de:68:d1:36:59:42:ae:
         fb:96:e3:28:db:92:22:23:1f:d0:73:e8:5f:6c:89:45:83:63:
         b7:71:9e:47:24:2d:7f:a6:e2:5b:d6:58:a8:34:17:9e:82:57:
         0a:f1:15:ce:3b:15:d1:ce:c4:b2:0a:96:05:d9:26:f6:49:f6:
         3f:86:25:3c:01:16:98:66:3d:97:58:1e:58:2f:96:a0:74:87:
         9c:2f:cb:e8:b0:c5:6a:08:2c:45:cb:24:ca:db:74:ff:59:a0:
         bf:0d:69:c1:4b:92:89:e8:66:6e:62:9d:fa:6b:c4:3f:cb:1c:
         ce:45:80:55:94:ae:e1:04:70:6d:d0:ad:f9:b6:5a:d9:70:1e:
         38:c5:e7:89:c3:6b:18:b2:e5:4b:14:85:87:a2:b4:38:42:b1:
         e2:f7:36:c2:99:5d:b0:5a:90:99:d0:e1:3f:5c:ad:98:6a:49:
         6e:8d:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:15:09 2026 by rpki-client