This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
File:                     0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft (raw, json)
Hash identifier:          s2EpbA0mZmFGCOmRymtuwbzqjNB1AMendh302sMZjho=
Subject key identifier:   B5:20:17:FF:35:A4:96:3D:0C:7A:44:EE:C3:B3:1C:AB:06:CF:CF:A6
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Certificate issuer:       /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial:       2B51F0BA6ECCC3DA0D41D802A9645CD887A77CEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
Manifest number:          0317
Signing time:             Sun 11 Jan 2026 03:18:16 +0000
Manifest this update:     Sun 11 Jan 2026 03:13:16 +0000
Manifest next update:     Mon 12 Jan 2026 06:54:16 +0000
Files and hashes:         1: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (hash: 91VLEnvLUOJrm4b+m2Udcff5+gM5f7rR9XE9JI+TuVc=)
                          2: 0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl (hash: w1a+J6aGZiNJIv5IAKJpyckbRLgA9cSvoCKg1/28hvg=)
                          3: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (hash: aRzeGC6MkrZhgZDy5/miUWPRVDW0dGjNpaxRq3pUWxE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl
                          rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:51:f0:ba:6e:cc:c3:da:0d:41:d8:02:a9:64:5c:d8:87:a7:7c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
        Validity
            Not Before: Jan 11 03:13:16 2026 GMT
            Not After : Jan 12 06:54:16 2026 GMT
        Subject: CN=B52017FF35A4963D0C7A44EEC3B31CAB06CFCFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:a5:12:47:c4:37:50:9e:94:ce:a8:c8:94:
                    a2:7c:58:25:d8:b3:ef:e0:8c:86:78:50:b8:1f:85:
                    0f:7a:7c:43:56:c4:78:f3:2b:35:22:30:a7:11:80:
                    74:82:5c:c7:79:b0:39:a6:46:9e:a4:78:ff:e8:18:
                    e7:fb:90:b0:11:9c:46:64:d1:18:92:83:9e:de:6f:
                    15:6e:d1:7c:32:56:ef:2b:21:bc:50:d6:67:bc:62:
                    a6:7f:db:3e:6d:21:a1:f5:c0:bf:2e:cc:42:a8:68:
                    aa:81:d0:8f:e5:25:7e:1a:3e:5b:b9:2c:4f:70:4b:
                    fc:8a:d6:f0:37:07:cd:0d:b0:4f:69:e4:d8:b8:4c:
                    5a:0a:f7:02:55:56:db:4a:0d:db:7d:df:b0:c3:0a:
                    6f:9d:1e:42:3e:bd:ff:73:56:72:60:f3:26:8c:4f:
                    d6:e2:61:00:c6:02:24:19:d3:76:5a:ae:ed:32:fb:
                    a3:28:ff:bd:1f:05:0c:7a:c7:ee:e6:c3:68:91:b3:
                    00:bb:ee:f1:77:2a:99:c0:fe:2a:98:ab:50:d7:96:
                    4e:1d:58:9e:c0:e7:23:b2:0c:00:d4:05:91:e4:5e:
                    79:9d:5a:d3:b4:c7:28:7f:cb:6a:36:9e:9c:02:29:
                    5f:3a:24:c1:b3:95:83:30:6c:81:a2:fe:72:d2:53:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:20:17:FF:35:A4:96:3D:0C:7A:44:EE:C3:B3:1C:AB:06:CF:CF:A6
            X509v3 Authority Key Identifier:
                keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:06:fe:e7:d2:6b:3b:20:ea:8b:1e:43:ba:e7:50:10:c5:
         21:c1:af:e8:92:e3:85:25:77:b7:b8:2f:b0:3b:23:df:25:38:
         69:9e:b0:52:0e:3e:af:a9:af:c1:1e:80:d6:db:11:cf:70:f5:
         e6:99:df:f7:f7:88:1d:e2:f2:74:84:12:b1:c0:33:ad:f4:83:
         e7:cd:08:56:e4:d8:44:ae:c5:d3:05:a8:46:b1:ba:f4:03:c1:
         98:95:25:fb:2f:9d:8d:0f:ea:89:ae:0d:c7:f9:08:3c:37:a1:
         2b:bf:2e:e6:5c:9d:8a:3b:2c:c7:08:c0:ef:88:f0:04:00:d1:
         34:8e:12:5c:8f:f6:e3:76:95:9f:82:ea:cc:eb:d9:c8:b0:b3:
         00:bf:db:2d:5d:eb:99:32:bb:96:45:48:80:f7:e7:f3:e7:17:
         2a:5d:2a:99:1f:60:7a:79:c3:a4:17:35:dd:45:a8:61:44:86:
         1a:75:76:98:44:34:5c:55:e8:0d:95:82:ab:d7:b0:83:7b:12:
         ec:e4:c7:b0:46:a0:41:3e:5f:48:6c:a0:2a:8e:b2:5f:f5:87:
         37:26:cb:7d:53:2a:c0:73:47:71:07:54:6b:af:a8:6a:09:65:
         75:c4:ed:ea:52:2a:28:6b:bd:2b:be:b9:f9:24:0c:a3:b9:1b:
         5a:d5:1f:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK1Hwum7Mw9oNQdgCqWRc2IenfOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU2ODZGMzdDODBCMjA0ODBDNEFFOEM1MDk1ODNBQTRD
REFCQ0EzQjAeFw0yNjAxMTEwMzEzMTZaFw0yNjAxMTIwNjU0MTZaMDMxMTAvBgNV
BAMTKEI1MjAxN0ZGMzVBNDk2M0QwQzdBNDRFRUMzQjMxQ0FCMDZDRkNGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQaUSR8Q3UJ6UzqjIlKJ8WCXY
s+/gjIZ4ULgfhQ96fENWxHjzKzUiMKcRgHSCXMd5sDmmRp6keP/oGOf7kLARnEZk
0RiSg57ebxVu0XwyVu8rIbxQ1me8YqZ/2z5tIaH1wL8uzEKoaKqB0I/lJX4aPlu5
LE9wS/yK1vA3B80NsE9p5Ni4TFoK9wJVVttKDdt937DDCm+dHkI+vf9zVnJg8yaM
T9biYQDGAiQZ03Zaru0y+6Mo/70fBQx6x+7mw2iRswC77vF3KpnA/iqYq1DXlk4d
WJ7A5yOyDADUBZHkXnmdWtO0xyh/y2o2npwCKV86JMGzlYMwbIGi/nLSUwkhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtSAX/zWklj0MekTuw7McqwbPz6YwHwYDVR0j
BBgwFoAUDmhvN8gLIEgMSujFCVg6pM2ryjswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29lb2ZIaTlYb2tRVnlGSmN0ajYxeXFjdDFBelRXMW9td2JreXE1Tmlr
WkMvMC8wRTY4NkYzN0M4MEIyMDQ4MEM0QUU4QzUwOTU4M0FBNENEQUJDQTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFNjg2RjM3QzgwQjIwNDgw
QzRBRThDNTA5NTgzQUE0Q0RBQkNBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R29lb2ZIaTlYb2tRVnlGSmN0ajYxeXFjdDFBelRXMW9td2JreXE1TmlrWkMvMC8w
RTY4NkYzN0M4MEIyMDQ4MEM0QUU4QzUwOTU4M0FBNENEQUJDQTNCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnikG/ufSazsg6oseQ7rnUBDFIcGv6JLjhSV3t7gvsDsj3yU4aZ6wUg4+r6mv
wR6A1tsRz3D15pnf9/eIHeLydIQSscAzrfSD580IVuTYRK7F0wWoRrG69APBmJUl
+y+djQ/qia4Nx/kIPDehK78u5lydijssxwjA74jwBADRNI4SXI/243aVn4LqzOvZ
yLCzAL/bLV3rmTK7lkVIgPfn8+cXKl0qmR9gennDpBc13UWoYUSGGnV2mEQ0XFXo
DZWCq9ewg3sS7OTHsEagQT5fSGygKo6yX/WHNybLfVMqwHNHcQdUa6+oaglldcTt
6lIqKGu9K765+SQMo7kbWtUfog==
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:21:30 2026 by rpki-client