This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
File:                     433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json)
Hash identifier:          5N6eXNWgqOgPjzDRKL4VxBPX1iUZR+Uf4+YeOjEYFVA=
Subject key identifier:   17:90:9C:B5:39:99:D1:DD:D6:F4:13:A7:B9:15:73:00:CF:2C:C2:31
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       4CA272DD24B1DF2118E52382629A39DCCDE916E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
Manifest number:          016B
Signing time:             Thu 01 Jan 2026 15:57:08 +0000
Manifest this update:     Thu 01 Jan 2026 15:52:08 +0000
Manifest next update:     Fri 02 Jan 2026 19:19:08 +0000
Files and hashes:         1: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=)
                          2: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: O9pUg3tO3NgUwYf00qQqYYgY3+LPVQZMZgWYXvF+d30=)
                          3: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 19:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a2:72:dd:24:b1:df:21:18:e5:23:82:62:9a:39:dc:cd:e9:16:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Jan  1 15:52:08 2026 GMT
            Not After : Jan  2 19:19:08 2026 GMT
        Subject: CN=17909CB53999D1DDD6F413A7B9157300CF2CC231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:17:41:e4:8a:c7:2c:e3:cf:59:bb:a9:ea:
                    8b:3c:80:43:7e:5b:1e:37:d8:da:6c:e6:7f:38:7a:
                    d0:85:12:9f:d5:3e:91:95:cc:8e:5e:f9:de:3c:49:
                    94:e3:00:58:35:59:dc:5b:ad:ad:67:f2:8d:c3:18:
                    18:8c:c2:a5:5b:1f:08:7f:87:5f:67:b7:d6:b2:4d:
                    4a:95:16:31:b6:d5:0e:5b:62:26:7b:16:c8:0b:d8:
                    f5:28:a2:a6:50:ca:65:7f:1b:e0:15:8a:29:eb:d1:
                    f4:15:dc:12:e9:18:e9:3c:95:57:a9:33:37:c7:36:
                    e4:be:75:2a:14:2c:f7:e6:e7:53:a1:fd:59:7a:83:
                    43:59:bf:d3:44:d8:08:de:42:59:8b:e4:33:a4:de:
                    c1:b0:d1:e3:3e:ad:02:f0:46:99:d3:fa:2d:86:c6:
                    d4:a2:98:e4:76:1e:b7:1e:b6:56:ab:8e:96:7e:9a:
                    78:ec:68:cd:b1:cc:8e:cd:8b:3c:ba:1c:9a:f6:06:
                    79:fe:b1:c2:8b:f2:f0:e2:8f:50:f8:6c:8f:3d:74:
                    b4:8c:cf:ad:f1:cf:cb:15:1a:82:c5:85:56:35:08:
                    38:b7:36:98:e7:b0:98:cb:e4:a4:b9:58:e1:5a:0e:
                    c2:31:1a:8d:7a:fa:2c:20:f0:e9:dc:05:61:bb:dd:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:9C:B5:39:99:D1:DD:D6:F4:13:A7:B9:15:73:00:CF:2C:C2:31
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:25:22:90:e3:d7:64:78:a1:c5:b9:da:cb:18:7b:46:b0:
         2b:fa:0f:d6:dd:99:ea:d8:8a:73:90:f3:fa:1c:0a:31:02:20:
         f3:3d:41:da:25:92:0b:99:0b:75:37:6c:fa:c4:6d:13:bf:7d:
         49:f4:0c:b4:74:c3:35:49:c5:2f:ad:c2:6e:04:9e:a9:ef:58:
         42:60:2b:12:12:9c:fc:0c:d3:06:ef:03:db:3d:44:47:05:29:
         d5:6f:4f:4c:92:57:c9:34:25:eb:f7:ec:31:4a:66:f7:6e:88:
         70:75:6c:4c:64:0c:e5:8a:8b:03:ee:c9:cc:3c:d8:34:03:4a:
         39:07:b3:5d:69:8f:58:e6:3b:99:50:57:5a:d3:68:82:6a:38:
         09:65:6d:01:8b:33:66:fc:da:69:7b:da:dc:0d:08:64:fc:0e:
         0d:2f:00:4e:0b:f2:bf:e5:2b:15:2c:ac:96:ac:d0:c8:ac:94:
         01:8f:81:95:d5:f9:18:77:fd:29:0d:27:f5:64:5e:bf:d4:aa:
         1a:7b:36:46:3b:f8:ce:36:c7:d7:fe:ac:48:ba:ba:f2:2b:c9:
         e6:2f:f2:07:d7:ba:a8:83:df:7d:e2:80:5d:5d:80:6f:4a:7b:
         09:de:87:46:6d:b4:dc:e2:44:10:ea:38:80:d0:26:c8:3c:76:
         cc:ed:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:05:22 2026 by rpki-client