This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
File:                     F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft (raw, json)
Hash identifier:          ZYFm+RtkQVB66nIg9Yj6MPvC/Awm3cnxCEBlt3sI+bc=
Subject key identifier:   F9:FD:59:C0:FC:75:B5:31:EA:28:BD:B9:56:8D:E4:F5:71:61:09:0B
Authority key identifier: F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3
Certificate issuer:       /CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3
Certificate serial:       5A44E420A5F8A49EA12B1064E7ADFDE9FA14EF93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
Manifest number:          11
Signing time:             Fri 09 Jan 2026 02:00:00 +0000
Manifest this update:     Fri 09 Jan 2026 01:55:00 +0000
Manifest next update:     Sat 10 Jan 2026 05:24:00 +0000
Files and hashes:         1: 323830343a376464303a3a2f33322d313238203d3e20323731353834.roa (hash: mlUJ+quRfskP/Sx5+VIC5IVIX52LJCcChlx6Gr6nMLo=)
                          2: F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl (hash: 4nHUPkrCMV7Degy1z2mvkuFzA0woQebLz2MSWfmdUkk=)
                          3: 3138392e39312e3136382e302f32322d3332203d3e20323731353834.roa (hash: 7hcf6r7XVABsgk3V6zpLGmkwiyQfGLsY1cg4z0gkhhM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl
                          rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 05:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:e4:20:a5:f8:a4:9e:a1:2b:10:64:e7:ad:fd:e9:fa:14:ef:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3
        Validity
            Not Before: Jan  9 01:55:00 2026 GMT
            Not After : Jan 10 05:24:00 2026 GMT
        Subject: CN=F9FD59C0FC75B531EA28BDB9568DE4F57161090B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:d5:74:5c:2d:c5:db:af:77:52:40:12:67:
                    ae:50:06:9a:b6:bf:82:bb:a2:e6:b8:9a:34:15:41:
                    fc:04:d3:3e:20:29:e5:32:0a:d8:e6:76:26:dc:d6:
                    c3:bc:6c:64:7f:57:09:00:ba:ac:c3:cb:32:30:da:
                    c8:1a:be:37:08:f7:35:49:1b:b9:cc:17:3a:af:8f:
                    e4:45:99:39:f3:69:6c:dd:45:e7:0c:85:4a:af:ed:
                    b3:bb:8e:44:58:fa:f8:c4:06:13:5a:85:5c:5a:f3:
                    be:ee:07:5f:66:25:18:47:a9:d9:d9:66:69:94:4c:
                    aa:58:6e:48:24:08:8e:e3:0b:99:9a:b5:38:54:ce:
                    85:fe:69:8e:a1:e5:10:50:9a:c7:6f:b7:bf:2b:8c:
                    16:70:b0:e7:bf:66:76:0f:73:8b:c5:c2:83:c1:a2:
                    c7:c7:20:1a:de:f6:bc:33:45:c5:b3:a3:4d:9e:34:
                    ee:33:f3:04:e8:18:c6:2c:b2:38:37:bc:9e:5a:79:
                    61:96:db:37:3e:28:0f:be:a7:e3:1e:ef:c6:a4:fb:
                    30:ea:bc:fd:bf:a0:4c:73:91:be:c2:5a:a0:b5:91:
                    d1:62:48:17:d8:8a:8e:9d:eb:8c:80:69:f3:ec:f8:
                    5a:bc:53:26:35:08:70:33:f4:62:4f:da:69:88:85:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:59:C0:FC:75:B5:31:EA:28:BD:B9:56:8D:E4:F5:71:61:09:0B
            X509v3 Authority Key Identifier:
                keyid:F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:03:a2:fc:62:17:54:e8:da:db:21:ef:eb:97:32:f0:64:f0:
         08:b0:e5:e0:b7:66:1e:a5:82:c8:4c:ad:e1:45:2a:13:d7:12:
         7c:2f:da:95:88:11:18:37:c2:a5:1b:fb:2e:50:24:d5:dd:76:
         93:21:94:9c:13:88:fb:68:0a:d7:05:e0:63:8f:ed:52:6f:17:
         17:7d:6a:03:60:c3:b9:6f:a6:25:e7:dd:c5:e1:ff:8c:08:be:
         e8:5e:47:dc:bf:04:15:ab:23:72:e4:9f:9c:c6:dd:ff:19:d8:
         86:9b:44:c0:a7:38:00:4a:eb:5c:95:ac:7a:14:cb:3a:28:ec:
         66:4a:a1:52:18:19:6e:aa:78:43:5e:e5:9e:07:11:2f:d8:9b:
         ba:d0:f9:3c:8e:58:98:19:ac:5f:5a:2f:3d:1a:44:6f:a5:f8:
         09:92:2b:7c:3b:6d:70:22:25:d1:1d:2a:36:4b:64:5a:ce:35:
         1a:a0:fc:49:78:c3:d5:1d:3b:eb:bc:70:52:34:63:bb:f1:50:
         84:8f:16:7a:b7:fa:57:06:3d:4e:99:28:e6:ca:7c:01:bf:3a:
         64:77:f2:53:5b:23:ab:05:3c:31:61:1c:aa:e8:9d:0b:4e:d3:
         c8:04:31:14:6f:22:21:8b:43:ac:d8:ff:fe:41:0d:b1:09:a1:
         dc:43:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:53:15 2026 by rpki-client