This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
File:                     84FD8F1989410A974714F8A8E867D28365445A3B.mft (raw, json)
Hash identifier:          XuCUeUksYcjigHHAIAHj+nzOFxAZE1y8vD2ZIhX1mt0=
Subject key identifier:   EE:C2:D3:50:2E:45:B5:19:2F:E3:93:7F:3C:BB:2A:74:5E:C5:7F:07
Authority key identifier: 84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
Certificate issuer:       /CN=84FD8F1989410A974714F8A8E867D28365445A3B
Certificate serial:       2FCBEC475EB0AFC28E58884CC65B1833AAE506B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
Manifest number:          07
Signing time:             Thu 08 Jan 2026 17:53:50 +0000
Manifest this update:     Thu 08 Jan 2026 17:48:50 +0000
Manifest next update:     Fri 09 Jan 2026 18:06:50 +0000
Files and hashes:         1: 323830343a333136343a3a2f33322d3438203d3e20323635303131.roa (hash: g+9dg+D40GSNVGcSYe8+sgjj7d3122wbPttD8XZWVJg=)
                          2: 3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (hash: MbaZbO0dSet4MJuYf4z3E0rWSfNDnbLuPdALAgu2DkU=)
                          3: 84FD8F1989410A974714F8A8E867D28365445A3B.crl (hash: xHrmz5rhfQwXNmKJHyukOs+O17HDw/W6p4+O3dw5k7A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 18:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cb:ec:47:5e:b0:af:c2:8e:58:88:4c:c6:5b:18:33:aa:e5:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FD8F1989410A974714F8A8E867D28365445A3B
        Validity
            Not Before: Jan  8 17:48:50 2026 GMT
            Not After : Jan  9 18:06:50 2026 GMT
        Subject: CN=EEC2D3502E45B5192FE3937F3CBB2A745EC57F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:d5:7e:bb:b2:57:aa:9c:a7:95:27:b6:b8:
                    b0:e0:88:77:b1:a3:96:17:b4:05:5c:45:4c:e8:9d:
                    02:b9:1a:5e:1d:87:6e:6d:e3:c6:35:1e:20:4e:1f:
                    72:a5:40:58:ab:41:8a:1a:ba:28:c0:5d:0b:e9:4b:
                    76:86:e8:9d:59:9c:20:76:9c:83:4d:91:d6:39:38:
                    38:20:a2:ef:dc:6e:fd:c1:88:b9:37:8b:4c:ac:a1:
                    01:b8:22:6b:ac:99:90:0a:e1:b5:77:f4:c5:09:6c:
                    9f:54:fb:13:31:bb:c1:5f:6b:02:c9:b3:dc:dd:0d:
                    ae:e0:b4:a7:1b:ef:9e:40:05:92:d7:70:80:3e:6b:
                    be:11:a4:5b:3c:d9:a3:ea:4f:c4:8d:f8:b4:6d:99:
                    6d:f5:2c:55:31:ff:1f:85:47:a9:26:33:8d:9d:81:
                    f8:91:4c:09:6d:cc:81:80:a7:7f:80:a8:7e:89:08:
                    09:9c:59:71:7d:12:6f:75:28:3b:5e:e3:03:d8:2b:
                    a8:84:aa:a8:df:82:91:68:d7:8f:fa:f5:1b:c3:7b:
                    5b:ef:a4:3a:ed:ba:d8:e0:c2:79:cb:1c:9c:5f:03:
                    96:54:da:8d:a6:cf:09:0b:d9:e0:86:4a:b0:8a:73:
                    ac:56:86:e0:cb:49:c8:53:90:77:f6:ba:69:c8:c5:
                    7d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:D3:50:2E:45:B5:19:2F:E3:93:7F:3C:BB:2A:74:5E:C5:7F:07
            X509v3 Authority Key Identifier:
                keyid:84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:4d:fc:74:17:34:9d:db:b1:bd:04:e5:fe:07:c9:ea:23:
         6b:6e:99:86:6d:b6:a6:ae:22:b3:53:f6:7f:f3:07:c1:5a:84:
         ed:be:d3:c8:10:b6:20:36:f6:c6:51:22:2e:d2:54:af:5c:96:
         ea:b7:55:a1:60:69:93:0e:82:73:7a:eb:a4:4a:a3:06:59:6f:
         bc:50:00:41:e5:5e:59:4a:0c:bf:88:dd:65:7f:3d:08:c1:76:
         6e:a0:b5:8b:f0:97:55:1c:bb:a8:c2:48:c9:73:14:ac:b1:5f:
         48:7b:96:da:98:46:f3:8b:53:4a:c6:4c:fe:63:c2:13:23:72:
         c6:38:4b:83:54:87:b1:0f:93:b5:ec:3d:eb:3e:62:3a:8a:bb:
         e1:70:cb:4d:68:8e:f0:21:4c:f1:60:fe:3f:94:a2:67:33:9c:
         57:16:d3:ce:31:d6:33:fe:3d:0f:ae:2b:05:a0:89:d4:0c:e1:
         61:d1:be:53:0b:90:a6:b2:c0:27:e6:a0:95:e4:9c:53:39:f5:
         d0:a9:cb:33:50:d4:7e:e9:e5:74:8e:c5:77:76:63:e0:96:82:
         11:86:8b:26:b6:30:af:f0:2d:08:af:34:22:f8:52:61:c7:be:
         a8:3a:50:95:f0:f8:98:22:84:5c:8f:46:6c:df:d8:63:4e:af:
         f7:24:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:52:37 2026 by rpki-client