This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
File:                     B6CC812D59F4308FCB1D2239555678B476218767.mft (raw, json)
Hash identifier:          NFdyIvMehDbQTEpxZyA8yHDZV9sQ+b4WfEgKGdgoYCw=
Subject key identifier:   D2:8D:13:7D:24:BC:53:2A:E9:86:19:7F:E1:53:F7:18:DB:74:8F:33
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       476B81D58923CAB98CE31C1A32A8769BA28A39B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
Manifest number:          035D
Signing time:             Mon 12 Jan 2026 10:18:57 +0000
Manifest this update:     Mon 12 Jan 2026 10:13:57 +0000
Manifest next update:     Tue 13 Jan 2026 11:59:57 +0000
Files and hashes:         1: 3138312e3233322e3136352e302f32342d3234203d3e20323731333131.roa (hash: PdoL7Ye5SJgTwdMrhqKRKTqm6ljfhzuJecfMD73tWK4=)
                          2: 3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa (hash: 0Dq3Ki1JiDs2pZFgbcQ0OK6nwyLP4M5uBeqZwDmHdjs=)
                          3: 3138312e3233322e3136372e302f32342d3234203d3e20323731333131.roa (hash: 1CoE7S+3ScoJMiAZXavqVdeMl7wbwLNihgTpNptxtq0=)
                          4: 3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa (hash: iQgUNRt/uPfTbBiv/dtHlvywb6cr2ljgd6f1gvyK3VA=)
                          5: 323830343a373938383a3a2f33322d3332203d3e20323731333131.roa (hash: Zk/zjOzmof0cVVHHfHusuduRVXiedM4Mt62mwp5ZAb4=)
                          6: 323830343a373938383a3a2f33332d3333203d3e20323731333131.roa (hash: /EKmyU9cngNkpQsuuKgai8Lxcg85cyG4bmeEbPUoBl4=)
                          7: 3138312e3233322e3136342e302f32342d3234203d3e20323731333131.roa (hash: dPDvrb4dZ5u1uKgrsMdPJ3wQYgCjyT1gA7AhqZcCIbo=)
                          8: 323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa (hash: ag1u+f92wAWxiTHG6jKHNGOhe12c1HPys+w84C5FKJA=)
                          9: 3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa (hash: ZXpBki1Is3NDhXfKcI7ak9WrhRJRhIxCZfcm31o3dD0=)
                          10: B6CC812D59F4308FCB1D2239555678B476218767.crl (hash: 5X9kBEV5VPVE5Bl3ze/X9enOupDR0Wje4I88OJ+TIj4=)
                          11: 3138312e3233322e3136342e302f32332d3233203d3e20323731333131.roa (hash: mSBCDsoFtziBhlhjjPXZGoVNkYUcWizs1zbOONr1Tno=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 11:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:81:d5:89:23:ca:b9:8c:e3:1c:1a:32:a8:76:9b:a2:8a:39:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Jan 12 10:13:57 2026 GMT
            Not After : Jan 13 11:59:57 2026 GMT
        Subject: CN=D28D137D24BC532AE986197FE153F718DB748F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:e8:fc:86:58:f3:e3:e3:f0:d3:de:f5:54:
                    ee:a9:e3:fa:7e:a0:91:ad:2a:cb:f1:a4:70:b9:30:
                    f9:a3:e3:96:fe:d0:67:f7:52:c3:70:41:93:44:ca:
                    3d:63:32:dd:82:62:36:2f:5d:3e:76:e7:57:63:3f:
                    a5:c9:b9:6e:99:3b:fd:c1:ce:f7:4f:e3:2a:6a:85:
                    78:26:41:8a:2a:80:82:6b:65:8e:a7:9a:aa:55:9c:
                    62:66:1f:c2:18:bb:55:bf:13:02:73:e7:bf:38:54:
                    0f:62:64:7e:a4:25:b8:85:90:a8:66:93:35:fc:ba:
                    f4:cf:36:e0:1f:62:ca:ca:a0:cf:b9:3a:c9:a3:e7:
                    12:15:77:79:ec:27:cc:1b:94:a6:71:68:d3:ea:ca:
                    e9:6f:69:68:ef:74:e8:a5:fa:0a:61:36:1a:e1:2f:
                    a3:ae:62:49:91:c9:63:3a:e9:9b:dc:0f:75:71:ab:
                    51:c4:5b:ae:96:c4:d9:44:89:d4:00:39:65:cc:40:
                    31:fe:5b:e7:55:75:fa:95:e3:4a:1c:bb:cc:0c:44:
                    f4:a9:aa:1f:34:8d:b0:cd:d3:1f:0f:f0:eb:1f:2c:
                    2e:f7:ec:81:7d:18:ec:ad:c3:8a:6b:ed:a1:f6:f1:
                    2e:0a:35:cb:a0:0f:a1:97:a1:e6:1e:0e:12:13:e3:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:13:7D:24:BC:53:2A:E9:86:19:7F:E1:53:F7:18:DB:74:8F:33
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:09:67:e1:81:96:56:7d:f2:c8:f8:7a:78:30:f7:21:2e:5b:
         0b:05:64:f3:1c:fc:33:42:3f:c1:4b:44:f1:b2:4c:5b:93:d7:
         9b:2f:29:e3:70:54:74:f8:c4:c3:e8:41:bc:e8:38:36:b3:7e:
         82:78:7f:1e:b8:9f:07:7a:6a:72:5e:18:2a:01:af:af:29:7e:
         ef:05:a6:01:99:14:84:d3:c3:a2:11:71:ce:5e:1d:ae:54:e7:
         57:f3:3f:94:12:7d:25:dc:85:21:74:b6:20:77:84:21:21:07:
         9b:cc:4e:dc:26:0a:88:1b:96:a5:a1:dc:0a:e7:05:95:b8:17:
         85:07:cd:be:4a:ae:84:13:46:bd:fb:fc:c7:63:7b:b1:67:c4:
         91:44:ba:6c:b6:f8:17:5f:0a:46:ba:c1:50:05:e7:90:4d:28:
         68:fa:6d:5e:ad:1e:e9:62:b6:33:93:30:b8:e9:db:36:9a:fa:
         bb:45:22:81:8f:df:6a:19:47:8b:0b:a0:18:8a:99:e8:ab:66:
         1f:d8:17:5b:82:54:1e:74:f5:5c:57:43:75:e9:ed:1a:b3:b3:
         34:0d:c9:1d:09:50:18:81:3e:ca:0c:d3:6c:fd:e8:6f:6c:86:
         88:ee:3c:47:92:e0:78:8c:c1:b7:d8:3d:c0:d1:94:44:b8:3c:
         00:f8:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:25:23 2026 by rpki-client