This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
File:                     875E06F9E7034F27BB17B17F859BD523F124DED9.mft (raw, json)
Hash identifier:          Y/RngiEZJoVYeWbg3GHghH54O6aPcePk45/r2MJ4ErM=
Subject key identifier:   47:1D:ED:E9:0F:D5:B1:AF:C7:24:9F:24:5B:61:A7:54:A9:F5:62:74
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       47DBE01E5C0300263CC50EBA884877C9363D5280
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
Manifest number:          0173
Signing time:             Sun 11 Jan 2026 16:42:11 +0000
Manifest this update:     Sun 11 Jan 2026 16:37:11 +0000
Manifest next update:     Mon 12 Jan 2026 20:41:11 +0000
Files and hashes:         1: 3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa (hash: dtLW+BKAXyh0XbtqxhyJwFT61qqx+1ewdQmC8tdwffY=)
                          2: 875E06F9E7034F27BB17B17F859BD523F124DED9.crl (hash: pwhRgnxC3uiOw5vdHB3ZntXEW/v8Wz99sgzYml54/Rk=)
                          3: 3136382e3230352e3230302e302f32322d3234203d3e20323632363433.roa (hash: 6hYL1AScEenC1R3PomvWNbwxg863EWC/9H1CMG413UI=)
                          4: 3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa (hash: ajD4Kp5vkLb88kXcqGYZjNrIHeoaWOLwL+xcCtKorEA=)
                          5: 34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa (hash: +FrAGbNXAdYP8Pg/39Rwp2kCBHQmS+GNecRIK54X8DY=)
                          6: 323830343a313439633a3a2f33322d3438203d3e20323632363433.roa (hash: MZySJ9O65lOMB41izMUoiG2UbNQhdh7QbaXRVWlgOJE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 20:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:db:e0:1e:5c:03:00:26:3c:c5:0e:ba:88:48:77:c9:36:3d:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Jan 11 16:37:11 2026 GMT
            Not After : Jan 12 20:41:11 2026 GMT
        Subject: CN=471DEDE90FD5B1AFC7249F245B61A754A9F56274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:0b:4e:c9:5a:52:89:7f:1c:50:bb:db:bc:
                    6c:3d:57:a1:9d:c5:f6:ce:15:b1:ba:11:6c:ac:39:
                    cc:22:0a:bc:8f:fa:e5:1d:5a:89:c5:4b:2b:2e:bd:
                    7e:fb:a1:7b:4a:de:b9:fc:e0:dd:4f:a1:a8:24:b2:
                    39:fb:7e:d5:2e:79:f4:4c:12:54:13:b1:a4:bb:29:
                    e8:54:07:20:f9:ab:38:6c:96:27:59:f9:b9:75:9c:
                    c0:5a:a5:b6:65:3a:fa:b3:f5:17:d5:f1:a9:60:b2:
                    67:5a:4e:68:d3:d4:27:1c:0b:ee:e6:42:07:1c:22:
                    13:8a:e0:53:42:a9:08:f1:b9:6d:17:7a:d6:2f:ca:
                    fa:7b:f4:4d:6e:d3:a7:6d:20:9a:d4:5c:d4:d2:ec:
                    2e:b3:06:33:2d:11:70:60:c5:71:47:05:b1:93:94:
                    92:9a:09:48:5f:72:ca:ef:80:ad:c0:94:24:45:be:
                    12:92:3f:60:74:92:30:c0:45:c8:26:f5:a9:32:1e:
                    1c:bd:60:fa:d8:9a:7d:71:e5:3e:45:5d:56:c0:c2:
                    c0:a5:94:45:25:f4:ba:6b:f8:fa:2d:05:27:cd:db:
                    b0:3e:6d:ef:32:ab:b0:28:21:0f:6e:88:f7:f7:d2:
                    7e:0b:c9:bd:72:59:8c:db:8d:13:ff:08:1e:a4:80:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:ED:E9:0F:D5:B1:AF:C7:24:9F:24:5B:61:A7:54:A9:F5:62:74
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:36:21:97:97:dc:af:a2:5e:3b:a3:95:49:f3:a5:a9:55:
         67:07:e4:63:a3:9e:54:d7:ea:02:f3:d1:2c:9f:05:be:6d:3d:
         4b:51:5e:ff:5f:69:a1:be:cb:a5:0c:14:82:ad:03:85:1e:43:
         41:2a:9f:a6:6c:21:5d:a3:0c:01:01:4d:e4:29:40:e7:85:5c:
         56:8a:78:a9:08:f0:e5:80:ed:77:9a:43:da:de:88:9f:5e:1c:
         53:65:5b:e5:36:92:e3:8a:e6:34:fd:11:2b:cf:74:47:45:d3:
         ee:c8:bb:23:eb:7e:de:2a:54:0b:d3:9d:94:a5:a9:c3:d2:c2:
         62:a6:f7:f5:9f:93:7a:5c:41:0e:6f:5e:02:03:ad:73:71:db:
         c9:31:fe:d6:73:48:0d:ff:a1:ca:ee:c3:52:68:01:a8:57:57:
         e8:b3:d7:ab:06:df:dc:5b:96:f8:8a:27:1f:b8:6b:ca:74:95:
         0e:d7:91:87:a1:0b:cc:a8:57:d4:dc:79:19:3e:c9:7b:45:8d:
         7f:42:90:56:fd:a8:9b:4f:78:52:ff:00:73:52:0b:00:96:ee:
         9e:62:9b:96:e0:68:c7:4a:fd:6c:c9:ee:9d:d5:78:3a:8f:d0:
         bc:d5:5a:c8:a2:03:5b:df:ba:a6:ad:b6:18:37:05:a5:62:cc:
         d9:c6:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:39:14 2026 by rpki-client