This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
File:                     D296B69B93C13271557656EE54E2511823349A12.mft (raw, json)
Hash identifier:          fvrkvFZ2A+umr2Ha+foFVI8sXc4RaR7CaXoba3Ylpj4=
Subject key identifier:   0C:F7:D4:90:B0:AA:D4:3E:D4:81:EA:85:85:34:AE:9E:26:49:DB:63
Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Certificate issuer:       /CN=D296B69B93C13271557656EE54E2511823349A12
Certificate serial:       1F5D68F277EB8EC1B3E9CC82E8CE4E7E6BB995B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
Manifest number:          03CE
Signing time:             Tue 13 Jan 2026 03:34:00 +0000
Manifest this update:     Tue 13 Jan 2026 03:29:00 +0000
Manifest next update:     Wed 14 Jan 2026 03:34:00 +0000
Files and hashes:         1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: CIXA/34n4BETgYaPEJkQqPssmWZzzuUIMajaMl1s+yc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl
                          rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 03:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5d:68:f2:77:eb:8e:c1:b3:e9:cc:82:e8:ce:4e:7e:6b:b9:95:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B69B93C13271557656EE54E2511823349A12
        Validity
            Not Before: Jan 13 03:29:00 2026 GMT
            Not After : Jan 20 03:34:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:7e:6d:68:5b:a7:ea:c1:80:60:ce:9a:ca:
                    07:0a:02:ab:2e:ba:8c:6e:4b:12:2c:ab:67:97:1a:
                    64:78:c1:59:2e:10:28:92:df:88:77:95:1c:04:6d:
                    d9:28:61:b6:52:69:0b:1b:11:47:b2:be:cd:f0:1c:
                    df:21:c6:50:f6:69:e7:1b:d9:fd:1f:ae:16:24:ea:
                    1f:5a:e4:d0:8b:6d:49:ec:cf:92:5a:83:a9:47:d8:
                    55:4d:67:75:71:d9:72:c2:9c:20:ff:a4:d7:d8:a9:
                    a2:f4:6f:e9:ab:06:90:c6:5b:a1:33:e5:34:a4:1f:
                    73:41:c9:7a:8a:97:78:43:6e:b5:a0:08:58:90:81:
                    aa:49:51:45:24:24:68:3a:3b:d6:4b:81:5a:e0:b4:
                    09:6c:7c:e4:c8:13:ba:50:69:8b:a8:f6:26:7e:9f:
                    e3:0f:95:9a:cb:c6:e1:7c:c8:99:8c:e0:0d:ed:2c:
                    bb:e2:23:0e:df:4c:7b:01:04:f9:05:1a:a1:92:2d:
                    d5:ac:05:b5:21:c6:d7:3b:1c:07:a6:8b:ca:a6:e8:
                    46:b3:83:6a:7e:28:19:9b:60:7c:9e:b7:62:c6:cc:
                    63:37:98:8a:c1:e0:f8:75:3b:35:2d:86:94:ae:88:
                    01:85:19:da:56:0f:01:b5:71:86:bb:2b:56:71:70:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:D4:90:B0:AA:D4:3E:D4:81:EA:85:85:34:AE:9E:26:49:DB:63
            X509v3 Authority Key Identifier:
                keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ff:86:69:a5:97:03:48:0f:1b:23:05:3e:fc:2d:c3:38:66:
         41:bf:0a:54:c9:98:08:e5:cd:75:2f:8a:9a:8c:1f:8d:cb:e0:
         69:9a:e5:8a:d5:88:c0:05:34:aa:3e:c6:d7:53:4b:e8:61:45:
         e9:2c:bf:61:f6:90:33:14:d8:97:81:b8:7e:24:91:51:18:ef:
         c9:00:7c:d7:7b:52:6f:03:31:00:f8:7c:55:0c:4a:e8:30:42:
         d4:82:43:6a:ba:48:cc:3f:e1:7d:96:0d:e1:4e:4c:8a:ac:3c:
         1d:f8:89:92:d7:6f:40:97:42:1f:a8:8c:ff:5b:55:3f:31:da:
         33:ac:15:92:2f:c1:6c:5d:ff:b7:5b:1c:b1:93:f1:ac:77:9d:
         bd:51:b8:44:1f:6d:b5:63:fd:05:cd:80:9a:a6:dd:bc:9c:9a:
         d2:56:8c:40:26:be:d1:58:1f:62:56:fc:a8:2a:3b:6f:8b:bb:
         44:97:aa:88:30:28:e2:b6:c6:0b:88:db:1a:23:b1:ca:ee:84:
         f4:6d:3d:85:1e:8e:21:de:ad:2b:cd:b8:5f:fb:c4:46:7a:22:
         86:da:c9:af:94:a1:95:12:34:de:3c:6a:13:b6:2b:17:e0:91:
         94:6e:c9:41:61:bc:9d:b0:9d:b9:af:3c:d6:55:78:be:e0:0a:
         6d:ef:4a:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----