This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json)
Hash identifier:          w1hOp+kRP96qE+VeL+GmAqxGGp3zizYrqaEeuOf5PvU=
Subject key identifier:   20:45:0F:63:73:34:16:3B:F8:72:06:26:11:4C:9A:EB:4E:DA:39:C3
Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Certificate issuer:       /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
Certificate serial:       494185DE511E8757B20FA72F0762FBF69CC47FDA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
Manifest number:          0296
Signing time:             Mon 12 Jan 2026 04:00:00 +0000
Manifest this update:     Mon 12 Jan 2026 03:55:00 +0000
Manifest next update:     Tue 13 Jan 2026 04:00:00 +0000
Files and hashes:         1: 323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (hash: DvD9mUDQGbID1Fj3RmQTkwTUsJ5MXscX3LhKAmPGVSc=)
                          2: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: jgbbgKtHppG5PeZLnwFd/kYD0kxepzf7OtzRf+R4m70=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl
                          rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:41:85:de:51:1e:87:57:b2:0f:a7:2f:07:62:fb:f6:9c:c4:7f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Validity
            Not Before: Jan 12 03:55:00 2026 GMT
            Not After : Jan 19 04:00:00 2026 GMT
        Subject: CN=3082010A0282010100E310FC90BDD8C398C0849E5F68DDD37FCC80334CD2C179E7B1935DCDB6BE4B61940E09B42BF2DB89636267F6E8951564AD774CCCBE37143DB2066301235869E62D07F7BBF0D8A7A29BB5C81DBBA343D2759AE61393D1609C344421EEE42EA79C54565768441855416E3C40EC84C1C945DE64BB14BD4BFC9996B9DBDE3FB965767D8BC91E56D408547F94AC5538BF776F9C18DB401A3C99E89E3BF3E9AD01A758862AAFFF2B108BC2CAB9972F6601BB5C616E00218FFFA81E4B90474A144E76FA6F230F247BA8C85189359A441AD6204D4BCB7CED2A22B4C7DD835CBD1593F21D7FE57CC113CBBF94BB9891DAD25EDA89FF6AF9E1BCE883B4E7D78F6F4BEB735B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:fc:90:bd:d8:c3:98:c0:84:9e:5f:68:dd:
                    d3:7f:cc:80:33:4c:d2:c1:79:e7:b1:93:5d:cd:b6:
                    be:4b:61:94:0e:09:b4:2b:f2:db:89:63:62:67:f6:
                    e8:95:15:64:ad:77:4c:cc:be:37:14:3d:b2:06:63:
                    01:23:58:69:e6:2d:07:f7:bb:f0:d8:a7:a2:9b:b5:
                    c8:1d:bb:a3:43:d2:75:9a:e6:13:93:d1:60:9c:34:
                    44:21:ee:e4:2e:a7:9c:54:56:57:68:44:18:55:41:
                    6e:3c:40:ec:84:c1:c9:45:de:64:bb:14:bd:4b:fc:
                    99:96:b9:db:de:3f:b9:65:76:7d:8b:c9:1e:56:d4:
                    08:54:7f:94:ac:55:38:bf:77:6f:9c:18:db:40:1a:
                    3c:99:e8:9e:3b:f3:e9:ad:01:a7:58:86:2a:af:ff:
                    2b:10:8b:c2:ca:b9:97:2f:66:01:bb:5c:61:6e:00:
                    21:8f:ff:a8:1e:4b:90:47:4a:14:4e:76:fa:6f:23:
                    0f:24:7b:a8:c8:51:89:35:9a:44:1a:d6:20:4d:4b:
                    cb:7c:ed:2a:22:b4:c7:dd:83:5c:bd:15:93:f2:1d:
                    7f:e5:7c:c1:13:cb:bf:94:bb:98:91:da:d2:5e:da:
                    89:ff:6a:f9:e1:bc:e8:83:b4:e7:d7:8f:6f:4b:eb:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:0F:63:73:34:16:3B:F8:72:06:26:11:4C:9A:EB:4E:DA:39:C3
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:97:96:0d:f1:ae:73:a9:8d:70:9a:38:c5:c8:32:32:0e:
         bf:98:72:b7:ab:19:49:f3:76:92:32:f7:46:0b:6d:ef:69:d7:
         ac:5d:a6:a2:fb:0e:26:40:21:35:3a:09:5b:48:20:33:d9:09:
         6f:7d:8a:6f:61:48:da:1c:76:45:58:d3:5c:37:16:1d:43:8c:
         4f:81:ab:c5:a3:c9:03:6a:16:60:24:34:58:c5:46:4d:94:92:
         ab:1f:20:4c:75:9a:81:0c:da:53:fd:74:c8:c8:64:d8:4d:f9:
         e8:5d:84:6b:e3:16:e5:6f:64:4f:f4:a6:c5:43:82:a6:63:b9:
         2b:5a:6c:30:d8:e3:cc:48:a8:a0:b7:5d:0d:ac:fb:bc:39:04:
         30:77:76:45:b4:cf:7c:0f:d9:0c:ef:06:50:bb:ae:07:3b:e0:
         19:e9:f7:5a:d4:8e:f3:d0:9a:a3:ac:8a:d9:53:32:15:72:15:
         13:1a:a3:a3:3c:c3:80:e6:7e:1f:73:5d:f2:00:c0:a9:8d:a5:
         b1:3b:1d:85:ea:61:4c:a9:7a:f4:d9:22:71:31:06:a0:3b:7c:
         80:8a:b4:27:b9:87:48:c0:5d:fc:84:1c:24:ec:6d:cb:cc:23:
         3a:b3:79:72:09:21:a1:41:5f:b6:f8:4e:e7:df:51:b2:5d:c8:
         3f:04:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----