This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
File:                     CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft (raw, json)
Hash identifier:          T59sCJ4UX7nuoWtYesKVVZP8C/0BnDq9gLG2KFGIW80=
Subject key identifier:   4B:82:06:40:B3:55:3B:03:D1:BD:4A:C8:0D:0D:B1:50:7D:F9:DF:32
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       6CCBEC09A995A8E9A880C2275D90013D15D9F162
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
Manifest number:          0352
Signing time:             Thu 01 Jan 2026 11:50:05 +0000
Manifest this update:     Thu 01 Jan 2026 11:45:05 +0000
Manifest next update:     Fri 02 Jan 2026 12:40:05 +0000
Files and hashes:         1: 3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (hash: VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I=)
                          2: 3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa (hash: 76In6FY6+iuAeEYRByeAicyXGMlVYFf2X3CYH3s/a1Y=)
                          3: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (hash: G21rYQorQc2vMjNSJNaeitlhvIhWXGxuqhbE6L3iV9I=)
                          4: 3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (hash: 01D5qhjJLkkhNf3Sz3aZcGRoiRACCWeyCYEQrfnlp+c=)
                          5: 323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (hash: 8VEpB0xd0VX/j49eruyLM4U0ob1UYw5ULKbATLfjNDk=)
                          6: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl (hash: hdMcKbrspHdFdYPeCnvCquE12jmRWy8NkGZHYnQlh6k=)
                          7: 3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa (hash: fVRhOOtcOeieEVXaAUm+KUqKVK9Kq80KJlnipzsXd8Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 12:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cb:ec:09:a9:95:a8:e9:a8:80:c2:27:5d:90:01:3d:15:d9:f1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Jan  1 11:45:05 2026 GMT
            Not After : Jan  2 12:40:05 2026 GMT
        Subject: CN=4B820640B3553B03D1BD4AC80D0DB1507DF9DF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:35:4e:63:e8:85:7d:e5:d2:7e:f0:1f:49:
                    d7:09:90:5a:27:0b:dd:f0:63:64:b0:b2:68:2d:27:
                    52:0e:67:85:ce:48:2e:ff:23:93:47:6d:12:75:93:
                    58:5b:29:57:f9:27:1f:e7:db:35:64:bb:2a:a3:36:
                    99:00:6a:af:2d:ba:64:ef:7a:8b:29:22:16:53:da:
                    42:0c:bc:c0:4d:e0:94:17:79:ca:c4:16:b7:5e:d0:
                    ea:f0:42:4b:67:49:32:c6:bc:7b:d0:38:87:b1:2c:
                    38:c5:4d:0b:9d:3f:49:6a:96:91:d4:54:d5:23:18:
                    a7:63:ba:53:83:3d:79:4e:71:7d:ed:74:7d:a7:07:
                    0e:49:24:67:b4:82:9f:8b:c2:9e:ae:de:67:26:73:
                    89:a6:6c:69:bd:15:56:eb:7c:7f:16:0a:1c:2f:e0:
                    3d:70:f6:7e:f8:63:6b:5d:07:55:00:af:7d:16:54:
                    81:e8:e3:28:56:6b:3e:1f:ec:f3:71:1c:8e:c4:a3:
                    f2:bf:d3:61:69:18:21:7a:aa:b3:56:0e:68:96:5f:
                    7d:f9:97:1b:8b:81:62:f1:fc:ec:66:c2:b6:61:bd:
                    8e:e9:d9:61:d1:56:c5:bb:1f:9c:9e:61:0e:85:c4:
                    b4:40:5c:c8:d3:f7:0b:0a:bb:1e:7d:23:00:61:12:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:06:40:B3:55:3B:03:D1:BD:4A:C8:0D:0D:B1:50:7D:F9:DF:32
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:cc:75:a2:36:e2:77:10:37:aa:92:0f:1b:8a:13:93:f6:
         fa:b2:2a:23:05:ce:93:d7:08:7b:f0:ff:ee:61:bf:2f:89:1c:
         c7:e2:36:12:d8:3c:81:b0:1a:2d:ac:f0:4a:2b:23:2c:ca:73:
         e9:0c:56:90:2d:3c:49:f7:79:dd:3c:d7:7c:3e:fc:ab:b4:be:
         69:5f:a9:4c:fe:0a:a4:6e:5d:3e:d1:4f:71:a4:74:58:c5:f5:
         da:47:96:01:28:79:26:6a:2c:e6:9d:ba:bc:9c:e3:1f:5b:c2:
         70:3e:c9:e8:5c:8b:ca:a2:5f:98:0c:54:23:e2:9e:c5:4c:ca:
         3b:a4:04:f2:af:ba:44:7e:a2:29:16:f6:83:0a:2d:34:da:9a:
         39:1b:ac:a4:5b:ad:c9:00:1c:42:54:58:4a:bf:7c:dc:f4:f5:
         89:0c:27:c3:a0:85:9a:43:60:49:e8:bf:52:cf:c3:68:78:ae:
         a6:3f:67:62:e3:54:9a:21:93:0e:86:10:77:72:b9:12:c4:1d:
         35:af:0f:c8:49:7a:a5:09:16:40:b0:f2:80:b5:9c:64:3d:9d:
         8e:2f:06:ab:fa:de:d6:dd:14:3f:b3:2e:06:fe:fb:b8:4a:53:
         79:6a:43:f2:f8:1e:e6:5c:8f:d6:ec:eb:8e:cc:8d:70:d4:02:
         08:76:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:41:45 2026 by rpki-client