This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
File:                     DFBB164DBC72494619B08F0FA235F18F7F107520.mft (raw, json)
Hash identifier:          7m35K2lbnyhbK50LkWih+2R0Tb1Dq2tKqO+v8/o5E+A=
Subject key identifier:   A0:79:80:73:D5:ED:73:77:A6:4D:A3:6B:62:4A:DA:C3:85:ED:BF:8A
Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20
Certificate issuer:       /CN=DFBB164DBC72494619B08F0FA235F18F7F107520
Certificate serial:       4178421B4619CD3128CFF8723DC1DCC171957156
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
Manifest number:          01C4
Signing time:             Sun 04 Jan 2026 18:33:28 +0000
Manifest this update:     Sun 04 Jan 2026 18:28:28 +0000
Manifest next update:     Mon 05 Jan 2026 21:56:28 +0000
Files and hashes:         1: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (hash: fzNeJlyzQ/5gNIi831p8psFpjajO/6NKFVdt9eenWSk=)
                          2: 3137372e37322e34382e302f32312d3234203d3e20323632353431.roa (hash: k7yG3rwBHYiWNCTrjcmWrZ2xUsrjw2FtXhCpxKNLYI0=)
                          3: DFBB164DBC72494619B08F0FA235F18F7F107520.crl (hash: VvWeO8Aj0+s3vtaP+Rg1jkkETHA1IyyPzhtSMZrqhdc=)
                          4: 3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (hash: IPHv9O5Pug97aXu+8gkHhnDu0MN7EgfcGaRDHIk3+FU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl
                          rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Jan 2026 21:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:78:42:1b:46:19:cd:31:28:cf:f8:72:3d:c1:dc:c1:71:95:71:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520
        Validity
            Not Before: Jan  4 18:28:28 2026 GMT
            Not After : Jan  5 21:56:28 2026 GMT
        Subject: CN=A0798073D5ED7377A64DA36B624ADAC385EDBF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:c9:de:c6:f1:6d:d4:ae:8b:37:63:68:8a:
                    b7:59:4d:e6:31:14:3f:73:10:74:2d:ed:87:50:38:
                    99:86:53:82:9b:42:c9:b8:eb:f2:29:7f:03:7d:87:
                    f6:f0:1f:5e:52:ee:07:66:93:9b:a8:4c:b3:77:8a:
                    5d:07:0a:9c:12:cf:fd:96:d8:94:03:e8:10:26:61:
                    39:6d:3a:12:79:5e:f6:cd:4c:2f:22:54:21:84:89:
                    7e:5c:ec:96:7f:bf:86:60:5b:bc:18:4f:1a:07:2a:
                    d5:50:48:21:22:15:a1:25:b1:db:e9:67:2e:04:d2:
                    10:99:5a:e4:02:d0:44:84:31:d7:a2:da:70:da:00:
                    4a:04:b6:ff:26:0b:73:34:c9:ec:eb:0b:34:92:51:
                    55:fe:ac:ca:3a:05:ae:83:da:f4:b6:f3:1b:00:94:
                    b1:e4:96:f5:7b:21:e4:97:ec:88:34:ee:5c:e7:2d:
                    e5:9a:de:59:4b:b8:1a:1d:98:35:c7:ea:f9:c3:32:
                    41:0a:30:18:32:77:7a:a3:53:44:75:ad:22:80:9e:
                    88:12:92:33:10:d8:66:f7:73:53:e2:ab:c1:33:37:
                    65:bf:7b:b7:2c:e4:10:eb:21:42:60:75:53:fe:4c:
                    3d:6b:b2:9b:8f:5e:ee:2d:be:1c:d5:0f:45:3b:31:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:80:73:D5:ED:73:77:A6:4D:A3:6B:62:4A:DA:C3:85:ED:BF:8A
            X509v3 Authority Key Identifier:
                keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:16:74:9c:ec:a7:f6:ee:4a:3c:72:d3:16:4d:2e:0d:b7:fc:
         bc:bb:56:c0:00:8b:15:5b:f7:c2:8c:71:54:73:cb:7f:16:b6:
         7e:39:0d:0c:99:06:d7:e5:5f:ea:fa:16:57:7d:f7:6c:22:11:
         39:9a:36:72:f1:6e:b3:8d:c5:aa:70:b9:62:a6:e5:51:69:a2:
         78:03:56:14:ba:20:b8:fb:1c:f7:28:55:38:df:85:46:d2:51:
         ec:94:16:f2:67:1a:4e:ed:df:e7:4b:6e:02:01:e2:60:29:ca:
         d9:0b:dd:43:65:8c:ea:df:83:dc:b9:27:61:68:38:3e:9a:2e:
         c3:b8:18:37:d9:71:b3:0c:65:18:ce:67:02:b3:ea:35:d8:6b:
         22:a6:da:17:6f:6a:98:81:d0:4b:5b:87:a9:77:42:73:6d:7d:
         30:e6:4f:47:ea:18:45:eb:50:35:66:eb:62:2a:93:d6:26:9d:
         62:40:49:b1:4d:3b:0b:01:9e:59:4a:86:92:8e:53:39:9d:f0:
         81:67:05:a6:1f:72:eb:4c:42:75:f3:2a:1a:5d:aa:34:4c:5e:
         3c:d5:b2:cd:1b:53:5a:91:58:ba:34:04:46:fa:05:a5:5c:a9:
         2f:80:39:ed:69:1f:c6:a3:ae:21:ef:d7:69:45:9b:93:c9:f6:
         85:f6:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 03:07:13 2026 by rpki-client