This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
File:                     8B5B625A528EC464925ACB69248E90494483E3F7.mft (raw, json)
Hash identifier:          vBNS34BB67vzy6ksbtW50nltY4kGpY4WtRAhWnjL8Us=
Subject key identifier:   49:B1:42:8D:A5:05:D5:58:3E:94:98:B0:8F:64:B4:FD:A0:54:BB:03
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       3A2F8D7CFA2E740729506092D9F7E40C2CAD3CA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
Manifest number:          0358
Signing time:             Sun 11 Jan 2026 00:02:55 +0000
Manifest this update:     Sat 10 Jan 2026 23:57:55 +0000
Manifest next update:     Mon 12 Jan 2026 02:30:55 +0000
Files and hashes:         1: 323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (hash: +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=)
                          2: 8B5B625A528EC464925ACB69248E90494483E3F7.crl (hash: 0vU9OzI80hOv/UZSeTs1XwWSQns77ReTyxeYGEik3jo=)
                          3: 3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (hash: ObqAafyNZ+1poxt3i+2GRujB4s5MDqvrCcZ2DXBseOg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 02:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:8d:7c:fa:2e:74:07:29:50:60:92:d9:f7:e4:0c:2c:ad:3c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Jan 10 23:57:55 2026 GMT
            Not After : Jan 12 02:30:55 2026 GMT
        Subject: CN=49B1428DA505D5583E9498B08F64B4FDA054BB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:21:2e:8c:ff:02:c7:6d:32:0f:fb:91:be:0d:
                    d8:4f:1c:e9:1f:49:f3:29:f0:e0:d7:19:1b:96:84:
                    67:4d:04:04:20:15:8a:f2:20:64:91:34:7a:73:b3:
                    10:b5:3a:d1:06:0f:c7:48:dc:78:89:17:01:e0:fe:
                    6f:e5:4c:0e:75:32:d3:12:25:5d:e0:78:06:1f:e9:
                    41:c6:92:c9:18:20:13:a4:21:9e:89:be:64:4d:75:
                    9a:c5:7a:0f:c5:e0:3c:70:76:71:67:16:45:35:cd:
                    f4:30:bc:d6:93:d8:d6:61:be:54:cc:51:19:e9:b5:
                    db:d1:1c:cc:2f:41:7a:d0:3c:62:22:72:3a:1a:01:
                    4a:6f:29:d4:e9:3a:68:c5:93:0d:d9:5f:60:c4:9f:
                    75:70:04:8b:6e:bb:3e:a1:2f:a1:69:2f:a6:5a:81:
                    94:05:83:9a:8a:19:ca:49:93:bf:16:4f:00:6c:96:
                    5d:3a:eb:1f:10:21:9a:b2:85:56:4c:80:36:dc:55:
                    2d:12:47:f6:9d:92:11:f3:d4:34:a2:47:00:5d:3e:
                    cc:64:e2:b1:42:e5:8e:af:dd:41:33:81:fc:ff:31:
                    46:db:3f:0e:a9:c8:62:ac:40:dc:24:98:9a:49:ac:
                    2c:ff:33:7e:39:6e:82:a5:9c:ba:47:68:49:d2:33:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:42:8D:A5:05:D5:58:3E:94:98:B0:8F:64:B4:FD:A0:54:BB:03
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:00:f7:3d:86:a1:da:e2:93:e9:65:33:21:44:fa:71:f5:
         8a:4b:d3:c9:94:16:82:d2:2e:e7:57:f7:44:be:d6:35:2e:4f:
         04:b6:b8:8d:78:23:43:6c:fd:40:f6:05:8a:e4:51:89:5c:59:
         a8:94:66:d9:46:52:f1:3a:3d:50:4c:53:6a:08:aa:d0:50:86:
         fc:8e:7a:6e:a6:c8:66:cf:64:97:12:72:cc:f8:bf:a1:d9:d6:
         f1:93:6f:ab:54:7f:64:95:ff:3c:e0:86:19:e5:63:ff:8a:a7:
         36:bf:fe:8b:1f:2b:c0:ae:4e:da:47:d7:25:8c:5a:d4:12:cc:
         1a:6e:cd:d5:e1:51:17:f4:a5:9d:fe:1e:d8:9c:55:8e:0a:72:
         91:85:69:98:b2:79:ce:54:91:65:46:d3:2a:35:d9:81:e7:d8:
         38:01:fe:a4:14:39:cf:7f:5b:07:7f:d0:d2:4a:8a:4b:69:c8:
         32:19:89:4b:4e:92:e2:b7:77:f9:0c:d4:6a:b2:76:aa:d0:6d:
         96:68:b7:03:68:a7:32:f4:4d:47:ea:23:79:d3:23:a2:a5:49:
         3d:e5:86:ca:e3:9c:ff:cd:9a:fe:79:90:e1:63:6d:aa:a6:be:
         c1:38:88:92:04:f7:01:75:11:3f:11:3c:1c:dd:d8:a6:fb:ed:
         73:79:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:06:13 2026 by rpki-client