This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json)
Hash identifier:          ABntU35UN2wsYWrqmkdp5OaBzO1qfpLs3kkZZ4sEypw=
Subject key identifier:   71:DD:23:51:D7:08:A3:97:00:E5:61:79:84:44:10:34:9B:1E:BF:0B
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       27B0ED7CC13D95A4FD4146A668863E81358BC8E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
Manifest number:          0208
Signing time:             Sun 11 Jan 2026 02:34:06 +0000
Manifest this update:     Sun 11 Jan 2026 02:29:06 +0000
Manifest next update:     Mon 12 Jan 2026 03:43:06 +0000
Files and hashes:         1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=)
                          2: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4=)
                          3: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA=)
                          4: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: DHwLTfVuvkRYcLc+6G1DrbGnx0/cHgcgweMZ96yWRsA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 03:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b0:ed:7c:c1:3d:95:a4:fd:41:46:a6:68:86:3e:81:35:8b:c8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Jan 11 02:29:06 2026 GMT
            Not After : Jan 12 03:43:06 2026 GMT
        Subject: CN=71DD2351D708A39700E56179844410349B1EBF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:0f:22:5d:54:2e:7b:07:61:32:3f:ee:b6:
                    17:b4:1b:9e:95:01:60:89:96:c1:7a:f1:f8:0b:2e:
                    8c:49:d9:63:05:2c:2f:7c:83:e9:54:4f:5c:b4:94:
                    40:25:00:00:a7:a7:63:eb:7e:c2:3c:1a:05:4b:1f:
                    2e:0b:9a:1d:68:f0:fe:58:a5:c0:73:7a:03:1d:63:
                    fb:c3:0a:69:cf:23:3f:9a:3f:c6:5b:83:9e:ab:18:
                    18:63:23:6d:cb:cd:b7:36:4d:07:d6:17:d7:ab:cc:
                    4c:b2:01:7a:a0:8e:4f:4b:eb:6d:39:b0:f3:e1:f9:
                    5b:9c:e0:38:fe:6c:3d:a2:67:7a:b6:9e:23:d1:48:
                    25:63:f0:3b:7f:53:96:b0:35:10:74:4e:75:1c:49:
                    51:46:36:10:3b:de:86:ff:3d:72:78:fc:f1:c7:03:
                    b6:71:6d:80:c6:8d:1f:b2:6d:67:bf:1c:90:cd:0a:
                    16:6e:3d:26:28:3b:ca:42:68:d9:38:09:72:f5:41:
                    90:83:89:3e:87:24:16:2c:3f:3d:b0:44:36:37:fb:
                    b1:41:9b:60:12:68:af:74:19:f6:5d:72:3c:ca:34:
                    dc:97:63:2e:8b:57:f7:78:52:79:e3:ed:67:0d:d7:
                    8b:2d:80:fd:d8:ae:f6:a5:63:53:94:68:fa:12:a6:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:23:51:D7:08:A3:97:00:E5:61:79:84:44:10:34:9B:1E:BF:0B
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:b0:9b:29:49:4a:d3:19:97:4c:47:23:9d:41:30:25:bd:
         d3:85:9c:29:d1:5c:32:30:83:cc:bd:6e:6b:8c:c3:11:a3:fd:
         d8:e2:a6:03:cc:d2:ea:9c:5d:8e:f5:cf:9b:3a:b4:58:ed:8e:
         43:59:94:77:12:1d:4c:e0:13:42:bd:89:d8:a0:7e:50:80:37:
         5d:29:c6:73:0f:cd:ff:ea:7e:07:51:82:ec:6f:9d:8b:72:00:
         c2:6a:3a:42:da:99:ed:97:a9:ef:13:90:c8:7e:03:0a:dd:04:
         ab:bd:81:df:3d:69:09:fb:98:84:b0:42:5d:05:93:66:6b:76:
         06:de:22:39:15:d0:9d:59:42:51:69:54:06:4e:9b:07:ce:cb:
         8b:1f:63:c9:76:df:0e:b6:a8:fb:94:c6:ce:24:59:3e:b2:7c:
         81:8a:8e:2f:35:66:56:19:24:8c:67:11:f0:bc:06:20:87:96:
         bf:74:41:c2:76:59:94:7c:a2:36:1c:a5:4d:9d:62:3d:fa:01:
         9d:6d:db:d6:32:23:05:04:06:b0:56:fe:df:71:82:ed:51:d2:
         dd:f0:2a:e8:53:b2:59:3e:cf:49:47:11:75:4b:f1:ae:14:51:
         e1:1a:22:cb:84:0b:f0:ab:89:0c:9d:35:ed:0e:53:49:0a:75:
         5f:a8:83:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ7DtfME9laT9QUamaIY+gTWLyOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1
OUQ3MTEzQTAeFw0yNjAxMTEwMjI5MDZaFw0yNjAxMTIwMzQzMDZaMDMxMTAvBgNV
BAMTKDcxREQyMzUxRDcwOEEzOTcwMEU1NjE3OTg0NDQxMDM0OUIxRUJGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27A8iXVQuewdhMj/uthe0G56V
AWCJlsF68fgLLoxJ2WMFLC98g+lUT1y0lEAlAACnp2PrfsI8GgVLHy4Lmh1o8P5Y
pcBzegMdY/vDCmnPIz+aP8Zbg56rGBhjI23Lzbc2TQfWF9erzEyyAXqgjk9L6205
sPPh+Vuc4Dj+bD2iZ3q2niPRSCVj8Dt/U5awNRB0TnUcSVFGNhA73ob/PXJ4/PHH
A7ZxbYDGjR+ybWe/HJDNChZuPSYoO8pCaNk4CXL1QZCDiT6HJBYsPz2wRDY3+7FB
m2ASaK90GfZdcjzKNNyXYy6LV/d4Unnj7WcN14stgP3YrvalY1OUaPoSpiZXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcd0jUdcIo5cA5WF5hEQQNJsevwswHwYDVR0j
BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi
eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC
REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B
RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFNawmylJStMZl0xHI51BMCW904WcKdFcMjCDzL1ua4zDEaP92OKmA8zS6pxd
jvXPmzq0WO2OQ1mUdxIdTOATQr2J2KB+UIA3XSnGcw/N/+p+B1GC7G+di3IAwmo6
QtqZ7Zep7xOQyH4DCt0Eq72B3z1pCfuYhLBCXQWTZmt2Bt4iORXQnVlCUWlUBk6b
B87Lix9jyXbfDrao+5TGziRZPrJ8gYqOLzVmVhkkjGcR8LwGIIeWv3RBwnZZlHyi
NhylTZ1iPfoBnW3b1jIjBQQGsFb+33GC7VHS3fAq6FOyWT7PSUcRdUvxrhRR4Roi
y4QL8KuJDJ017Q5TSQp1X6iDlQ==
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:23:56 2026 by rpki-client