This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
File:                     6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft (raw, json)
Hash identifier:          BdptgsKJL6spNF62Tw9NnjobKQ/zkRgFBP2QAGqK3oM=
Subject key identifier:   1C:49:95:06:16:E0:7E:B4:0C:53:95:A3:C2:D8:76:2D:AA:4D:55:57
Authority key identifier: 6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0
Certificate issuer:       /CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
Certificate serial:       010E6BA289A60EDFF2FAF809CE19948416BE123D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
Manifest number:          11
Signing time:             Fri 09 Jan 2026 20:55:54 +0000
Manifest this update:     Fri 09 Jan 2026 20:50:54 +0000
Manifest next update:     Sun 11 Jan 2026 00:49:54 +0000
Files and hashes:         1: 34352e3138372e36322e302f32332d3233203d3e20323639343537.roa (hash: CGBdit7nL0sSCsSiyqFAaqeqQIfD9pAU6stafV1NjjI=)
                          2: 34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (hash: tfLcEiEc8hhaXA/QlUIYninO0L17syMk0jZmTh3wt5o=)
                          3: 323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (hash: fNLhTpI4JfU2Yj39+3X/7An2ySE2xjoJH2EpWfVhDZo=)
                          4: 6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl (hash: VyKJ2xTOvgWnzBiBtJOqoQhY1M9dzmooP5n7h0o6gUw=)
                          5: 323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (hash: vjNxUVqyvAVuZSeOibTgACfwxTdr3WnzVhqfyca3q/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl
                          rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0e:6b:a2:89:a6:0e:df:f2:fa:f8:09:ce:19:94:84:16:be:12:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
        Validity
            Not Before: Jan  9 20:50:54 2026 GMT
            Not After : Jan 11 00:49:54 2026 GMT
        Subject: CN=1C49950616E07EB40C5395A3C2D8762DAA4D5557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:da:76:4a:fd:3c:03:92:c9:24:fc:22:3b:
                    ca:86:8a:16:91:e5:02:2f:34:15:43:3a:fb:76:c3:
                    d7:8c:76:22:45:6a:b6:6f:e4:63:6a:b8:e9:17:b8:
                    94:a6:5a:12:f1:19:a4:c6:7d:55:ee:3f:2f:5e:ff:
                    ba:2e:a9:81:9e:39:8a:f8:2b:b4:58:69:af:62:79:
                    fd:7b:3c:4e:aa:a1:6b:74:44:f1:bb:79:99:c8:ca:
                    b9:90:7a:86:b7:3b:3b:a9:e0:54:f8:5c:21:df:8e:
                    b4:fb:49:c4:58:2f:27:21:ce:a2:6b:ad:9c:d9:ed:
                    e3:50:f9:0d:f4:7d:5d:b8:33:02:09:68:87:46:67:
                    8e:d6:89:8f:6f:69:78:89:68:0f:cc:5c:4d:7e:6a:
                    f6:15:79:00:45:4e:a2:a5:ff:76:d5:37:5e:9a:32:
                    04:b6:9e:ba:27:51:bd:49:b6:f7:8b:72:45:07:73:
                    0f:b5:44:3f:1d:91:6d:7e:01:bc:0c:eb:73:0d:89:
                    c3:ac:b8:32:b0:4b:7e:c3:13:95:91:2b:30:1b:0f:
                    16:c8:3c:4a:9e:50:4c:95:64:05:91:c5:94:2b:70:
                    6a:1b:86:46:d9:4e:82:5f:ce:21:15:c8:3f:64:17:
                    b0:cf:91:75:e6:b9:d4:44:fc:b4:f8:5d:14:0a:dc:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:49:95:06:16:E0:7E:B4:0C:53:95:A3:C2:D8:76:2D:AA:4D:55:57
            X509v3 Authority Key Identifier:
                keyid:6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:81:c7:dd:ba:a6:b6:92:e6:1d:13:d1:6e:b9:a2:32:77:
         88:b1:9b:a3:bc:4c:82:e8:66:38:2c:4e:18:a4:6b:1f:7e:08:
         b6:d5:5e:b6:fb:ea:2a:fb:4a:d0:36:1e:d5:56:54:84:83:3c:
         dc:20:55:35:81:98:96:fc:2d:72:4f:1f:f4:bb:cc:27:98:43:
         ba:f4:d2:0b:cd:76:cf:05:f2:b1:80:78:a8:3a:81:4c:bc:90:
         d9:ab:0e:49:5d:b7:6c:6c:73:7d:2b:c4:b6:cb:f6:37:55:68:
         cf:a3:64:bb:58:fe:26:d4:48:ca:3c:d7:4e:37:47:5c:f9:82:
         52:23:2c:db:5a:f0:2a:1c:74:57:fc:68:6a:0f:36:65:c9:d6:
         51:ff:10:81:96:1b:7b:cd:5d:b9:b6:68:dd:9f:ce:c5:c1:48:
         fa:78:ca:ea:ec:f7:02:5f:f8:95:ca:d4:2c:a7:03:d3:d3:51:
         25:21:62:3a:8d:80:f3:5e:dd:36:c1:e4:be:9c:30:ef:9d:11:
         a2:b3:dc:f6:ed:36:70:64:d6:57:73:49:3d:8e:b2:3e:b2:7a:
         6d:a7:b1:4a:b8:d4:39:ae:ca:2d:96:7f:06:d0:41:95:77:df:
         06:0a:18:b2:95:45:1a:d0:bc:cc:b5:e4:3a:f3:9e:8d:cb:4c:
         51:5c:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 12:19:20 2026 by rpki-client