This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier:          s2acFD115T13vrdorJh4Kyt1r3PvNEd+y6L4vRQcouo=
Subject key identifier:   DA:0C:33:33:E0:C1:E2:51:CB:2A:0D:6E:EE:37:3D:1B:6D:FF:2E:33
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       7518C6D9BB01C3B7F99838F04723C6D745FDFDE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number:          011B
Signing time:             Thu 01 Jan 2026 09:43:00 +0000
Manifest this update:     Thu 01 Jan 2026 09:38:00 +0000
Manifest next update:     Fri 02 Jan 2026 10:00:00 +0000
Files and hashes:         1: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
                          2: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
                          3: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
                          4: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
                          5: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
                          6: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
                          7: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
                          8: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
                          9: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
                          10: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
                          11: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
                          12: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
                          13: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
                          14: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
                          15: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
                          16: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: XGF0d88koYHCdqhhMFqh6sndusbi5Evxuijuz7OzhlA=)
                          17: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:c6:d9:bb:01:c3:b7:f9:98:38:f0:47:23:c6:d7:45:fd:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jan  1 09:38:00 2026 GMT
            Not After : Jan  2 10:00:00 2026 GMT
        Subject: CN=DA0C3333E0C1E251CB2A0D6EEE373D1B6DFF2E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:02:99:b4:6b:c7:07:50:e7:44:1e:7a:d0:
                    d4:9b:4d:4b:17:0a:50:93:08:97:12:25:47:1e:9b:
                    30:be:9b:e4:01:79:af:d0:e7:e0:32:f9:71:8c:65:
                    ae:9b:52:e8:c0:ba:45:d0:69:b3:42:94:6b:3c:fd:
                    c6:d9:02:81:e9:1f:37:b3:88:4f:59:42:95:75:39:
                    14:8b:45:8c:be:d4:2a:88:ed:9c:70:55:d2:e2:9d:
                    cf:87:b2:b0:b8:65:f4:82:46:ae:a3:7d:75:3b:3b:
                    e6:76:2a:4a:64:3e:d7:70:f8:11:2a:e5:89:5b:9f:
                    32:60:39:a1:07:22:d4:bd:a5:8f:e3:aa:7e:6a:be:
                    c0:97:ef:b3:c2:16:b1:81:a0:2d:42:20:0b:6d:24:
                    ed:4c:92:e8:b2:cd:ea:cd:a5:4f:04:98:67:bd:83:
                    5d:6a:9d:23:93:fa:40:1e:5e:26:53:d9:62:d5:51:
                    17:91:d9:37:86:f1:81:5a:5d:a3:87:1a:3c:e9:f0:
                    cc:bc:c8:b6:05:d3:bf:4f:ac:78:aa:c0:63:4f:36:
                    28:34:7d:7b:d0:7b:6b:88:27:42:d2:39:48:e9:3b:
                    b5:5a:99:95:6e:31:1b:57:25:8f:24:66:54:21:6b:
                    c5:4c:27:19:d8:70:0b:d1:0f:e9:32:5b:4a:18:a8:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:33:33:E0:C1:E2:51:CB:2A:0D:6E:EE:37:3D:1B:6D:FF:2E:33
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:bd:45:61:8c:a1:01:d8:7c:70:b4:61:39:21:a2:e4:cb:
         2e:c4:bc:70:d0:73:36:45:2d:13:c9:d0:1b:0f:92:46:03:f0:
         c8:fa:b0:0c:eb:62:25:9a:7f:05:4a:df:c6:f2:3b:63:43:6b:
         2a:3c:3d:24:23:5e:10:c7:3d:29:97:9d:08:0e:d7:e9:25:14:
         50:5f:73:c3:b1:32:b4:a1:b2:14:52:85:32:d3:40:7c:a1:cf:
         fd:14:3c:5c:77:04:44:f0:88:ba:1c:bf:94:c2:34:8c:e8:e4:
         7d:31:82:46:81:b3:41:6e:74:60:b9:8d:95:02:ec:01:fa:47:
         49:f1:b3:97:c2:4d:d9:07:4c:54:f1:e7:93:be:7f:fb:ff:e1:
         7f:fe:3b:e8:2a:18:2e:ad:93:cc:3c:4c:f4:65:48:c7:be:0c:
         6f:c2:83:bc:f8:9d:25:e9:a4:34:89:10:5b:a7:71:2c:fc:bc:
         6f:42:b5:6b:2c:ca:7d:17:91:ad:4e:ba:66:34:e2:39:63:35:
         33:eb:4e:60:d2:5b:81:c6:6d:d7:6a:bb:86:f4:7a:40:75:eb:
         5e:2e:4a:15:d8:c1:52:a7:d5:e1:11:f7:27:6b:36:ab:88:40:
         cc:cd:5c:e4:80:07:9e:14:29:e3:03:93:39:25:86:ea:2e:11:
         44:db:83:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdRjG2bsBw7f5mDjwRyPG10X9/eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNjAxMDEwOTM4MDBaFw0yNjAxMDIxMDAwMDBaMDMxMTAvBgNV
BAMTKERBMEMzMzMzRTBDMUUyNTFDQjJBMEQ2RUVFMzczRDFCNkRGRjJFMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYgKZtGvHB1DnRB560NSbTUsX
ClCTCJcSJUcemzC+m+QBea/Q5+Ay+XGMZa6bUujAukXQabNClGs8/cbZAoHpHzez
iE9ZQpV1ORSLRYy+1CqI7ZxwVdLinc+HsrC4ZfSCRq6jfXU7O+Z2KkpkPtdw+BEq
5YlbnzJgOaEHItS9pY/jqn5qvsCX77PCFrGBoC1CIAttJO1MkuiyzerNpU8EmGe9
g11qnSOT+kAeXiZT2WLVUReR2TeG8YFaXaOHGjzp8My8yLYF079PrHiqwGNPNig0
fXvQe2uIJ0LSOUjpO7VamZVuMRtXJY8kZlQha8VMJxnYcAvRD+kyW0oYqE0TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2gwzM+DB4lHLKg1u7jc9G23/LjMwHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5GQkcvMC9B
MENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAipa9RWGMoQHYfHC0YTkhouTLLsS8cNBzNkUtE8nQGw+SRgPwyPqwDOtiJZp/
BUrfxvI7Y0NrKjw9JCNeEMc9KZedCA7X6SUUUF9zw7EytKGyFFKFMtNAfKHP/RQ8
XHcERPCIuhy/lMI0jOjkfTGCRoGzQW50YLmNlQLsAfpHSfGzl8JN2QdMVPHnk75/
+//hf/476CoYLq2TzDxM9GVIx74Mb8KDvPidJemkNIkQW6dxLPy8b0K1ayzKfReR
rU66ZjTiOWM1M+tOYNJbgcZt12q7hvR6QHXrXi5KFdjBUqfV4RH3J2s2q4hAzM1c
5IAHnhQp4wOTOSWG6i4RRNuDWw==
-----END CERTIFICATE-----
Generated at Thu Jan 1 12:50:34 2026 by rpki-client