This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
File:                     ACEF8FA1F536657A209246B168B346C65044943D.mft (raw, json)
Hash identifier:          9WFjPmzZ4kXs9kat9BXkg3orRAmEAoNd2vFTS67/d+o=
Subject key identifier:   9D:30:70:01:AE:55:B4:A4:AC:5F:E1:4E:25:FB:4B:2C:9C:46:5D:0C
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       3E45BFA073F26D9E373C2D33B2E4231996BE9781
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
Manifest number:          020B
Signing time:             Thu 08 Jan 2026 23:58:47 +0000
Manifest this update:     Thu 08 Jan 2026 23:53:47 +0000
Manifest next update:     Sat 10 Jan 2026 02:07:47 +0000
Files and hashes:         1: ACEF8FA1F536657A209246B168B346C65044943D.crl (hash: kBEs1EpXRyh767tSOSaW0LpSG0Tlo2BnWLfb6pJfhBQ=)
                          2: 323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (hash: VvzsXJ1P0K2tmrTTpNDGBPavWc+CcDTt5BNXrk6USCo=)
                          3: 3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (hash: sxe5yirDbez2iY1rLQASF5iHCTpgfZb8DExVYg49l64=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 02:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:bf:a0:73:f2:6d:9e:37:3c:2d:33:b2:e4:23:19:96:be:97:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Jan  8 23:53:47 2026 GMT
            Not After : Jan 10 02:07:47 2026 GMT
        Subject: CN=9D307001AE55B4A4AC5FE14E25FB4B2C9C465D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:c0:9b:d3:70:5e:b8:a0:21:f5:b0:17:f7:
                    12:b6:60:b3:1a:8c:56:58:9e:b3:23:cc:00:a6:9f:
                    e4:88:6c:d5:70:a8:56:da:12:9a:c3:eb:35:39:2a:
                    ad:d0:e1:d1:24:49:8d:07:a4:44:a4:94:78:be:f7:
                    23:bb:fc:ab:eb:ec:82:d9:a8:f9:ef:4a:89:26:7d:
                    30:ca:e6:af:17:f0:d9:63:c9:93:16:e9:92:ba:85:
                    56:79:97:95:80:a0:e8:38:cd:ee:29:5a:5a:19:51:
                    06:0f:96:81:96:d5:7b:29:98:01:0a:6e:30:58:ca:
                    85:72:5d:32:ff:ff:1c:5d:02:f0:d2:fb:86:4f:99:
                    c7:22:bf:31:41:09:ad:10:c8:1e:0d:de:29:80:e1:
                    f7:ca:00:2b:b5:35:76:6f:7e:6c:a4:43:14:6f:b7:
                    6b:e9:c3:56:b9:59:b8:f7:63:c8:72:a0:a4:40:99:
                    6e:d2:60:68:a2:ae:13:35:af:31:66:6f:72:69:e6:
                    30:e3:4a:e1:6a:9e:e1:3d:a1:cf:3e:e7:8b:68:1d:
                    27:45:91:71:5a:41:b1:8b:1b:56:d2:c7:69:83:ea:
                    0c:a3:a3:90:7d:9c:8a:14:10:93:93:1c:c6:54:4d:
                    8f:89:24:d0:0d:c5:0e:b4:6b:c6:2d:33:62:bc:73:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:70:01:AE:55:B4:A4:AC:5F:E1:4E:25:FB:4B:2C:9C:46:5D:0C
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:31:d5:31:c9:98:51:ef:d5:26:b4:52:f8:41:0e:75:df:e2:
         66:8d:20:16:b3:bc:41:9a:5a:54:65:41:3f:a2:7e:cd:98:35:
         d4:40:b5:3b:30:11:f0:18:7c:55:f0:21:a0:4d:53:66:46:c1:
         2a:91:42:d7:e5:87:19:f7:e3:cd:5b:92:2c:a0:af:ea:e7:29:
         78:e9:fa:d7:c0:65:6b:96:b7:21:f8:0c:3f:23:16:00:92:87:
         5b:6d:ca:43:c1:1b:3f:02:c7:64:8a:41:15:bc:bb:04:a2:ab:
         c6:1f:b1:9f:78:63:2f:ee:c6:ed:5f:30:ba:7b:50:7b:81:6a:
         80:8d:5f:37:d1:2e:10:f3:2e:4d:98:c9:d8:3d:e7:e7:3a:04:
         ba:ac:ee:bd:ff:24:c4:26:b8:8d:12:21:33:b2:5c:3f:78:79:
         f3:a6:55:17:08:f2:79:33:ee:6e:bf:2a:5b:08:5f:32:6b:0a:
         bc:34:f6:bd:3d:92:72:7c:9c:88:4a:53:4a:7e:1c:c9:ac:29:
         f6:a2:67:89:a6:85:0a:b1:93:0d:c3:27:cc:62:04:79:e0:1f:
         48:3c:87:a4:e3:33:da:54:df:91:a1:f3:7c:4c:05:77:ea:b3:
         4b:1b:cc:fa:af:38:85:40:10:88:3e:04:8e:ea:f8:de:09:3b:
         f3:23:2c:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPkW/oHPybZ43PC0zsuQjGZa+l4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFRjhGQTFGNTM2NjU3QTIwOTI0NkIxNjhCMzQ2QzY1
MDQ0OTQzRDAeFw0yNjAxMDgyMzUzNDdaFw0yNjAxMTAwMjA3NDdaMDMxMTAvBgNV
BAMTKDlEMzA3MDAxQUU1NUI0QTRBQzVGRTE0RTI1RkI0QjJDOUM0NjVEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcsCb03BeuKAh9bAX9xK2YLMa
jFZYnrMjzACmn+SIbNVwqFbaEprD6zU5Kq3Q4dEkSY0HpESklHi+9yO7/Kvr7ILZ
qPnvSokmfTDK5q8X8NljyZMW6ZK6hVZ5l5WAoOg4ze4pWloZUQYPloGW1XspmAEK
bjBYyoVyXTL//xxdAvDS+4ZPmccivzFBCa0QyB4N3imA4ffKACu1NXZvfmykQxRv
t2vpw1a5Wbj3Y8hyoKRAmW7SYGiirhM1rzFmb3Jp5jDjSuFqnuE9oc8+54toHSdF
kXFaQbGLG1bSx2mD6gyjo5B9nIoUEJOTHMZUTY+JJNANxQ60a8YtM2K8c3bNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnTBwAa5VtKSsX+FOJftLLJxGXQwwHwYDVR0j
BBgwFoAUrO+PofU2ZXogkkaxaLNGxlBElD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpvTENlY0Q4UlhSOFRudzRZaHBHMWhHaFhza2Z3WGVycW5Kd2FjZ2tS
OGEvMC9BQ0VGOEZBMUY1MzY2NTdBMjA5MjQ2QjE2OEIzNDZDNjUwNDQ5NDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUY4RkExRjUzNjY1N0Ey
MDkyNDZCMTY4QjM0NkM2NTA0NDk0M0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmpvTENlY0Q4UlhSOFRudzRZaHBHMWhHaFhza2Z3WGVycW5Kd2FjZ2tSOGEvMC9B
Q0VGOEZBMUY1MzY2NTdBMjA5MjQ2QjE2OEIzNDZDNjUwNDQ5NDNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAADHVMcmYUe/VJrRS+EEOdd/iZo0gFrO8QZpaVGVBP6J+zZg11EC1OzAR8Bh8
VfAhoE1TZkbBKpFC1+WHGffjzVuSLKCv6ucpeOn618Bla5a3IfgMPyMWAJKHW23K
Q8EbPwLHZIpBFby7BKKrxh+xn3hjL+7G7V8wuntQe4FqgI1fN9EuEPMuTZjJ2D3n
5zoEuqzuvf8kxCa4jRIhM7JcP3h586ZVFwjyeTPubr8qWwhfMmsKvDT2vT2Scnyc
iEpTSn4cyawp9qJniaaFCrGTDcMnzGIEeeAfSDyHpOMz2lTfkaHzfEwFd+qzSxvM
+q84hUAQiD4Ejur43gk78yMsYg==
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:05:04 2026 by rpki-client