This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft
File:                     2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft (raw, json)
Hash identifier:          YIFWLi5WOQ7PaWeLfa6k7M5+/tILEuUaPmiET56Y+4g=
Subject key identifier:   7C:97:17:99:6C:1A:A7:D2:97:0B:E8:A0:31:40:38:95:FC:FC:59:B8
Authority key identifier: 2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8
Certificate issuer:       /CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8
Certificate serial:       336A8E2D8B724A0EB5E3415F64C1639B1E5C084F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft
Manifest number:          10
Signing time:             Thu 08 Jan 2026 12:59:37 +0000
Manifest this update:     Thu 08 Jan 2026 12:54:37 +0000
Manifest next update:     Fri 09 Jan 2026 14:03:37 +0000
Files and hashes:         1: 323830343a366238383a3a2f33322d313238203d3e20323730343036.roa (hash: Sznij2UR2u79R0kkXN2D9ZamKRyRWPYq37b5RlYvLj8=)
                          2: 3139302e3131312e3130302e302f32322d3332203d3e20323730343036.roa (hash: rxL7uK45NsRcJhXTWXDGgG6rRYX6Uo1AY0n1jaAE8zM=)
                          3: 2CECFC86960C437277CA4FDF82CD3F36C7D009A8.crl (hash: q1moRxeqC2MuGziI3EM6voSTMiah5kt8X6U4JgI41uE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.crl
                          rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 14:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6a:8e:2d:8b:72:4a:0e:b5:e3:41:5f:64:c1:63:9b:1e:5c:08:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8
        Validity
            Not Before: Jan  8 12:54:37 2026 GMT
            Not After : Jan  9 14:03:37 2026 GMT
        Subject: CN=7C9717996C1AA7D2970BE8A031403895FCFC59B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:6d:a9:98:22:2d:5c:4c:67:8a:d0:10:bf:
                    c8:bf:20:e7:37:8e:fd:41:bc:ba:86:2f:95:8d:92:
                    8e:f3:11:de:3a:24:32:14:5b:46:21:4c:f3:b7:e8:
                    44:67:04:c5:fd:ff:a6:3e:ae:07:3e:00:39:19:23:
                    0f:71:11:d3:63:b1:8d:a9:54:19:a6:c5:9d:e0:0d:
                    a1:6c:5b:1a:82:17:a6:50:55:77:cd:12:2c:f4:fe:
                    50:5e:ed:6b:e1:8b:19:b2:48:1a:ab:a6:11:9e:2c:
                    f3:13:3a:34:15:fd:a7:23:a0:94:84:06:09:e9:95:
                    6a:cd:0a:63:21:3c:e0:06:b7:0b:c5:b1:a2:2a:7e:
                    1d:23:fb:9a:69:6a:85:0c:b7:93:97:13:52:c5:50:
                    5b:c4:ea:98:ad:3f:f1:6a:77:4d:b1:74:ab:ec:4c:
                    07:e5:92:bf:be:2d:78:b8:ac:22:3e:bf:6d:b8:41:
                    0d:3a:a8:6a:77:20:30:92:1f:05:a6:8a:31:e4:5c:
                    45:63:45:ff:1f:6a:4d:05:cc:1c:6c:d1:e4:ef:e3:
                    a4:5d:1f:1a:32:e9:51:19:3a:4d:af:1b:92:97:85:
                    fa:08:0a:cf:7b:68:97:a5:6c:44:e8:7d:24:9f:58:
                    11:d0:02:1e:38:e3:ff:ce:f6:67:47:be:96:d2:38:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:97:17:99:6C:1A:A7:D2:97:0B:E8:A0:31:40:38:95:FC:FC:59:B8
            X509v3 Authority Key Identifier:
                keyid:2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:50:36:fa:6a:88:d1:91:84:47:8b:fa:b8:fa:ae:3b:0b:
         55:72:d7:b9:6c:de:c6:cd:9a:31:6a:51:3c:50:34:18:62:3a:
         5d:87:68:6e:04:f9:68:ef:d5:d7:d0:7a:33:f9:73:0d:9a:fa:
         c7:19:0b:72:20:e0:61:b8:27:65:8f:09:d3:0d:9b:67:60:79:
         54:2e:95:1b:f0:1f:ca:a0:c1:46:6e:d8:0e:2d:81:33:41:2a:
         8b:ab:7d:31:a6:b4:f2:ec:fe:05:c0:27:cf:a2:16:01:1e:e5:
         93:f6:ce:be:f4:fc:13:d8:7b:da:f8:30:3f:99:0c:38:89:52:
         82:b1:7d:28:ea:cc:db:ce:55:17:e8:24:2c:24:68:00:c3:92:
         9c:af:dd:ad:81:5b:2e:1d:b4:35:30:df:9f:02:15:f5:e0:00:
         05:9f:dc:2f:6b:76:f3:da:44:68:ce:0c:29:af:1b:03:38:df:
         02:c3:3c:51:7e:43:ef:3a:3c:cd:07:28:f8:a2:14:12:7e:5d:
         75:e0:1b:50:80:6d:23:82:2c:c4:12:3b:c2:c1:66:bd:54:16:
         e7:90:ca:50:00:00:5e:ba:59:6b:b3:74:27:0b:3a:4e:41:6d:
         10:2b:a5:08:cf:c3:33:86:ce:28:24:e5:90:a0:79:af:07:22:
         57:14:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:45:32 2026 by rpki-client