This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
File:                     43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft (raw, json)
Hash identifier:          Dannz8Qya1ZORWlk+XYgOWCWP4a3s0L1rStebEOfDLs=
Subject key identifier:   13:97:E3:78:D0:B2:52:37:69:64:4F:F6:68:3C:67:4F:F5:9C:5D:C2
Authority key identifier: 43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74
Certificate issuer:       /CN=43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74
Certificate serial:       26E1C30190D20D733A2B68BE4362E0A596AD3998
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
Manifest number:          09
Signing time:             Thu 08 Jan 2026 15:22:05 +0000
Manifest this update:     Thu 08 Jan 2026 15:17:05 +0000
Manifest next update:     Fri 09 Jan 2026 18:47:05 +0000
Files and hashes:         1: 34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (hash: 1MCs0HCugueOsWDOygTYmyNEJdXvXmDVEwldSJlCIKg=)
                          2: 323830343a356235383a3a2f33322d3438203d3e20323638383336.roa (hash: iraN3shVsT5Zspdn5UkOF0vytVP3Djs+rfD0fnAUfT8=)
                          3: 43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl (hash: HGZqbDf/RttLLutFSejP7t3NxdwgDOcWy2vMGKhZM5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 18:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:c3:01:90:d2:0d:73:3a:2b:68:be:43:62:e0:a5:96:ad:39:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74
        Validity
            Not Before: Jan  8 15:17:05 2026 GMT
            Not After : Jan  9 18:47:05 2026 GMT
        Subject: CN=1397E378D0B2523769644FF6683C674FF59C5DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:44:33:fe:5a:33:bb:21:e1:37:0f:07:48:
                    f5:4f:dc:ed:d2:a3:94:34:95:9d:37:a8:c0:7f:10:
                    de:2b:0d:ba:89:6c:b9:8d:6a:a3:03:2d:29:51:64:
                    6d:7a:9f:e9:a1:9d:c6:8a:96:c1:c1:9e:1a:11:ac:
                    3d:d7:dc:27:f7:23:08:72:c8:15:59:fa:ed:a1:dc:
                    59:19:01:c5:0a:58:88:a0:fc:03:3b:8a:d6:81:71:
                    09:90:ff:38:51:1d:e5:c1:d2:42:6a:31:cc:94:cc:
                    dc:9d:bd:72:b6:ac:20:e0:3c:58:63:44:40:f3:45:
                    bd:36:d0:4a:8a:81:0f:f7:be:98:83:20:a3:a3:80:
                    25:c0:10:40:ec:8a:cd:57:a1:04:f8:cb:d7:dc:7f:
                    3d:2f:e2:b7:47:c7:90:47:71:e7:fb:a9:2d:e1:68:
                    ca:01:0e:e1:2f:c7:69:db:1f:5f:e1:81:22:46:28:
                    76:34:ef:19:3c:06:7f:56:8b:9a:d2:3c:c8:cc:46:
                    10:33:bc:cf:e4:17:31:e3:d6:95:99:11:1c:f7:53:
                    b5:02:f0:3f:da:94:fb:14:f7:7e:fe:f2:4b:23:ca:
                    58:d1:1c:92:25:07:28:a6:cd:66:16:74:d9:1a:61:
                    d4:19:4f:12:56:50:3c:c2:fc:f9:ee:f9:4e:6c:af:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:E3:78:D0:B2:52:37:69:64:4F:F6:68:3C:67:4F:F5:9C:5D:C2
            X509v3 Authority Key Identifier:
                keyid:43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:f8:34:cc:7b:17:66:76:f3:fa:69:21:08:18:8d:06:73:5f:
         39:0b:32:46:38:5f:58:ad:70:74:fb:82:5d:71:b7:16:63:6b:
         a7:2f:e8:09:c2:e3:1b:39:17:cd:ab:3a:10:13:07:cf:17:8c:
         c5:12:b3:cb:4e:34:4e:2d:2f:01:e9:95:94:fd:0f:c3:a8:56:
         8a:52:e1:80:71:0c:3f:21:df:30:e3:1b:b9:c5:2b:46:3e:84:
         ef:22:e8:9a:c9:13:ff:a9:c3:0a:ac:ab:07:25:a1:d6:17:bf:
         fb:8d:4d:a6:fd:c8:cf:0f:1c:f1:0e:c8:c1:4a:ca:55:49:6a:
         24:57:5d:1c:ce:db:fd:e8:74:66:e5:0a:8b:9a:43:49:ec:19:
         87:63:de:02:46:a3:dc:f4:65:4b:d3:49:92:f8:94:33:a3:ce:
         f6:da:70:25:21:9c:b0:80:ce:9f:14:1f:75:2d:5d:15:b5:83:
         c6:ac:93:ec:af:24:ff:47:9f:9b:90:58:71:50:ab:86:15:1d:
         99:51:da:44:7e:32:6b:80:45:57:00:bd:10:35:f9:ae:65:28:
         22:af:ca:83:6c:21:2c:8b:7d:b4:0f:b7:8f:8d:f4:9d:dd:2e:
         b2:1b:41:1d:a5:6f:19:34:d9:89:45:5e:41:43:72:e7:f8:b9:
         f6:2c:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:53:01 2026 by rpki-client