This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File:                     28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier:          4B0cMs4CAKzRQV8BiPDulm/fJBiDBTGCkc5EqCGabX8=
Subject key identifier:   0C:01:93:05:06:88:4D:B6:1E:75:3C:31:4F:EE:87:DF:92:B7:12:AC
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       5FD01F62BDB030DF5719BAE9DF30D1013F129743
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number:          0294
Signing time:             Sun 11 Jan 2026 20:40:32 +0000
Manifest this update:     Sun 11 Jan 2026 20:35:32 +0000
Manifest next update:     Mon 12 Jan 2026 21:27:32 +0000
Files and hashes:         1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=)
                          2: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=)
                          3: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: Kw1HeUgwQbRsFBT66jGY27BZUcrONMgVkYTanBM/Hgg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 21:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d0:1f:62:bd:b0:30:df:57:19:ba:e9:df:30:d1:01:3f:12:97:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Jan 11 20:35:32 2026 GMT
            Not After : Jan 12 21:27:32 2026 GMT
        Subject: CN=0C01930506884DB61E753C314FEE87DF92B712AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:78:a5:a2:cd:a6:40:1a:69:79:5a:26:29:
                    19:eb:2d:77:55:15:3d:d2:b3:86:5d:25:6d:49:c0:
                    6b:40:12:05:42:8c:24:6c:19:dc:d9:25:0b:80:ff:
                    62:bc:f4:a1:cd:8d:0d:7c:1e:90:b7:bf:95:de:36:
                    af:9e:94:08:ce:49:3f:3c:4b:a4:0d:13:56:26:7b:
                    9e:cf:6e:57:2d:2d:1d:bc:dd:d0:22:32:83:00:ce:
                    82:67:a9:26:1b:1c:50:25:27:7a:4b:9b:a7:eb:ee:
                    34:b3:17:4d:ab:77:af:9d:ed:3b:5c:82:47:8b:0e:
                    bc:ec:2f:64:20:1b:37:0d:44:c0:c5:75:ba:c1:1e:
                    df:1f:7d:01:11:9c:d4:c7:23:28:10:d0:e2:d8:72:
                    f4:4c:73:90:0d:24:fc:c5:31:45:66:04:9f:59:9d:
                    81:9d:7e:c4:0d:03:5c:c7:00:06:35:f4:31:55:4c:
                    13:a6:0a:f7:e9:ac:b9:bb:b1:6c:d6:e7:5a:ec:88:
                    77:41:70:1d:b7:48:dc:69:75:09:81:03:bd:ff:19:
                    ca:95:82:01:6e:a4:f2:a4:57:4f:ab:bf:95:51:e1:
                    8b:5f:48:d2:73:bd:9d:0c:80:ac:70:73:64:d6:03:
                    11:90:cd:18:9b:3c:a3:01:bd:f8:a8:60:3e:de:95:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:93:05:06:88:4D:B6:1E:75:3C:31:4F:EE:87:DF:92:B7:12:AC
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:40:6c:04:61:68:d3:03:5a:b7:3d:43:5c:4c:68:a9:4a:
         fe:71:a8:52:57:09:19:62:8b:ac:61:42:a8:02:69:a6:09:df:
         ee:04:b7:01:d8:83:7c:3f:ab:cf:2e:24:86:c6:a6:68:20:45:
         d9:77:dc:19:27:14:6a:8e:d4:33:39:61:69:fa:da:1b:40:a5:
         70:2e:ba:e3:57:c4:ca:72:a5:a9:e6:bb:ab:36:50:f0:ae:0c:
         56:88:18:ce:6f:a0:4b:83:86:a5:f6:b2:e1:c2:f5:a7:6e:85:
         78:5c:26:d4:28:27:6d:cf:dc:72:9e:c2:c0:87:2b:d7:d9:22:
         3c:d9:c2:42:db:c0:27:a9:e5:fd:18:6c:8a:64:45:79:e4:62:
         02:5b:05:3c:df:9b:c8:3d:9f:ef:32:c7:f1:9c:7c:3f:78:08:
         2a:f8:3d:95:b9:e7:e3:de:da:17:0b:f3:03:3e:ab:52:95:21:
         67:cb:9f:f6:ed:6b:39:f7:0d:dd:ea:ab:3e:5f:c7:c6:a7:48:
         d3:b9:c0:83:75:c5:7d:4d:ba:91:c8:07:b5:39:90:72:d5:d5:
         67:1d:ab:00:e4:84:99:1d:f7:f1:b4:23:1d:2e:45:d5:d9:86:
         97:8a:60:74:a6:3e:44:33:c7:0f:a7:c8:31:b8:68:3a:5d:b5:
         27:dc:5c:d4
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUX9AfYr2wMN9XGbrp3zDRAT8Sl0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx
QTIyODZGMDAeFw0yNjAxMTEyMDM1MzJaFw0yNjAxMTIyMTI3MzJaMDMxMTAvBgNV
BAMTKDBDMDE5MzA1MDY4ODREQjYxRTc1M0MzMTRGRUU4N0RGOTJCNzEyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpXilos2mQBppeVomKRnrLXdV
FT3Ss4ZdJW1JwGtAEgVCjCRsGdzZJQuA/2K89KHNjQ18HpC3v5XeNq+elAjOST88
S6QNE1Yme57PblctLR283dAiMoMAzoJnqSYbHFAlJ3pLm6fr7jSzF02rd6+d7Ttc
gkeLDrzsL2QgGzcNRMDFdbrBHt8ffQERnNTHIygQ0OLYcvRMc5ANJPzFMUVmBJ9Z
nYGdfsQNA1zHAAY19DFVTBOmCvfprLm7sWzW51rsiHdBcB23SNxpdQmBA73/GcqV
ggFupPKkV0+rv5VR4YtfSNJzvZ0MgKxwc2TWAxGQzRibPKMBvfioYD7elcabAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUDAGTBQaITbYedTwxT+6H35K3EqwwHwYDVR0j
BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl
LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0
QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE
WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3
NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
PTRAbARhaNMDWrc9Q1xMaKlK/nGoUlcJGWKLrGFCqAJppgnf7gS3AdiDfD+rzy4k
hsamaCBF2XfcGScUao7UMzlhafraG0ClcC6641fEynKlqea7qzZQ8K4MVogYzm+g
S4OGpfay4cL1p26FeFwm1Cgnbc/ccp7CwIcr19kiPNnCQtvAJ6nl/RhsimRFeeRi
AlsFPN+byD2f7zLH8Zx8P3gIKvg9lbnn497aFwvzAz6rUpUhZ8uf9u1rOfcN3eqr
Pl/HxqdI07nAg3XFfU26kcgHtTmQctXVZx2rAOSEmR338bQjHS5F1dmGl4pgdKY+
RDPHD6fIMbhoOl21J9xc1A==
-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:57 2026 by rpki-client