This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
File:                     F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft (raw, json)
Hash identifier:          VeCqeEOW6GNdOsU6PnakhDlaEmy3SJVItkTE0F+j5dQ=
Subject key identifier:   2E:AC:34:22:F3:4C:8B:FB:B5:2E:F9:40:81:4C:2D:0D:FC:45:B2:94
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       7F5A0932BCAEE098652D3FC1BF3413E2BE06D789
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
Manifest number:          03A5
Signing time:             Sat 10 Jan 2026 19:36:23 +0000
Manifest this update:     Sat 10 Jan 2026 19:31:23 +0000
Manifest next update:     Sun 11 Jan 2026 21:58:23 +0000
Files and hashes:         1: 323830343a326330303a3a2f33322d3432203d3e20323635313837.roa (hash: MHPkO+LE8ChgE+3BoMJufsig4O/GsIiMuVQp8skgwcY=)
                          2: F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl (hash: 5T4r/NkDgb9ULXFzg2A5Xv/hinUnNF07UHZmG7kT9Ts=)
                          3: 3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (hash: 3nnWp4z0u0F/ZBeeps01X/Te4+igufch9fuAk1P89do=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 21:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:09:32:bc:ae:e0:98:65:2d:3f:c1:bf:34:13:e2:be:06:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jan 10 19:31:23 2026 GMT
            Not After : Jan 11 21:58:23 2026 GMT
        Subject: CN=2EAC3422F34C8BFBB52EF940814C2D0DFC45B294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:cb:b3:80:0e:a3:05:de:4d:48:13:11:7a:
                    3e:0f:82:8f:84:fd:70:9a:cd:96:65:b4:12:d6:96:
                    29:1a:50:41:60:23:71:ee:32:f4:ee:3a:7a:bd:76:
                    f3:4a:07:9b:33:58:d1:20:5b:d7:69:b6:c8:9d:c3:
                    43:49:75:46:7b:91:f2:0f:cf:07:64:a3:85:81:cc:
                    37:15:aa:b3:75:c5:e2:88:25:88:4e:07:54:c9:c9:
                    17:73:73:20:51:fc:ba:35:b4:ea:91:ef:27:b1:f5:
                    12:a5:a8:ed:bb:1b:a9:b2:3e:04:7a:6f:1d:a2:dc:
                    ec:21:80:48:ed:97:8e:51:ed:58:e9:06:d9:8d:01:
                    18:ff:fa:b8:63:d4:b1:93:d1:21:be:21:b6:04:8d:
                    31:7e:eb:3f:1e:bd:52:03:c5:85:f9:18:a1:27:af:
                    42:e2:f7:b3:cc:eb:c7:99:58:00:4e:0b:9c:ed:93:
                    a8:7d:71:46:6a:38:4b:8a:8f:a0:96:8e:e9:d0:0b:
                    96:75:2f:f9:06:83:7a:24:81:af:cf:f8:43:b6:1a:
                    2d:99:b2:a8:c1:68:2e:e9:b0:e4:35:16:5d:30:a4:
                    d1:01:6f:d4:52:f7:72:64:f3:c6:fd:89:ac:9f:c2:
                    e3:66:19:4a:fd:e7:b8:63:39:dd:b4:39:43:ec:d3:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:34:22:F3:4C:8B:FB:B5:2E:F9:40:81:4C:2D:0D:FC:45:B2:94
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:25:cf:cd:97:02:18:7f:13:b1:59:f4:32:b9:e6:1d:82:
         bc:a5:42:1d:e0:e8:02:18:fd:f8:fd:87:ab:4b:b1:4d:31:e8:
         ba:d3:77:e6:a2:55:6d:5e:f7:09:12:a9:5b:69:09:ac:1a:9b:
         18:88:7a:ca:90:c0:6c:49:29:9c:d9:ff:d5:7c:87:59:89:1d:
         fa:7c:f4:54:46:5a:2a:bf:b2:c0:03:31:bf:6e:af:2c:b8:ad:
         3e:60:7c:98:9d:3e:0f:27:f9:a6:7a:de:b5:d1:71:0d:b6:14:
         96:5e:df:59:ac:d7:b9:15:ee:40:fb:02:35:ab:18:d2:ab:b5:
         25:48:ac:aa:47:1b:f0:da:70:a4:62:08:2b:59:4b:15:dc:a4:
         19:9b:9f:79:41:f9:6c:c1:dd:51:7f:0d:fa:f4:ab:bf:d4:19:
         c2:0f:ee:2e:a3:06:12:83:47:b3:10:d8:bb:fe:36:cd:f3:a3:
         40:a7:ed:ad:f2:fc:61:e0:0a:8d:68:80:5e:b2:f1:a3:4b:4e:
         72:28:26:81:75:6c:dd:40:31:1c:7b:89:be:48:eb:86:67:12:
         b2:3c:8c:6d:0f:e8:a5:a7:cf:49:b9:75:69:c7:39:2f:1a:64:
         9a:98:ac:7e:1b:3c:17:8b:c5:fc:dd:3d:31:17:8f:43:e7:40:
         df:04:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:10:30 2026 by rpki-client