This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
File:                     D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft (raw, json)
Hash identifier:          aaGtByWVqGGKwL+LE1+NubTSqr8OcS7gyFMzXRtUe9c=
Subject key identifier:   0E:BC:6F:B3:21:81:F4:72:92:25:5A:3E:78:F1:0D:8A:08:5E:6F:F0
Authority key identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9
Certificate issuer:       /CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
Certificate serial:       0772DFD6B1505670B97EF9AE7DFC27AC0431BF59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
Manifest number:          98
Signing time:             Sat 10 Jan 2026 19:59:24 +0000
Manifest this update:     Sat 10 Jan 2026 19:54:24 +0000
Manifest next update:     Sun 11 Jan 2026 23:25:24 +0000
Files and hashes:         1: D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl (hash: ZYKb6zUzzbbUA5dy7dyzRvdnXdploCQkLjUT4aRznog=)
                          2: 34352e34322e3136302e302f32322d3234203d3e20333936353039.roa (hash: R8qUjIZ6ysKWvC5/eDGClxNbLjc/860MLitI4fgP5XI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 23:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:df:d6:b1:50:56:70:b9:7e:f9:ae:7d:fc:27:ac:04:31:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
        Validity
            Not Before: Jan 10 19:54:24 2026 GMT
            Not After : Jan 11 23:25:24 2026 GMT
        Subject: CN=0EBC6FB32181F47292255A3E78F10D8A085E6FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:70:d9:10:69:11:26:2e:36:8d:b3:ef:dc:
                    03:79:ea:d5:97:06:61:82:aa:12:bb:37:95:de:ed:
                    aa:f4:20:ad:fa:89:e2:4e:9d:0d:41:88:23:ce:4f:
                    8e:5d:d9:7c:57:b9:a7:d7:c8:db:88:df:40:24:7b:
                    38:4a:cf:59:e5:4a:9c:31:5a:12:1b:41:c4:43:6a:
                    b7:74:59:df:c2:95:65:4e:6b:85:74:41:4e:d6:69:
                    80:28:2e:c0:60:d4:9e:d4:96:fe:8d:28:a2:58:6f:
                    5a:9c:19:2d:d2:a0:aa:bf:0b:8d:2d:cd:23:f5:f8:
                    61:e0:08:1b:3a:18:8d:39:57:26:e9:70:6c:11:11:
                    b3:a5:1a:e6:12:44:07:78:78:e0:ee:d1:f6:fb:06:
                    37:22:7b:72:3a:e7:38:c8:77:52:3f:65:22:d7:6e:
                    4a:1b:27:67:b5:58:3a:70:57:e4:17:30:c5:e6:8d:
                    d4:19:97:c9:58:6d:e0:91:aa:46:ee:89:48:90:88:
                    75:fb:34:98:9a:ef:f8:c8:56:de:13:f5:08:6e:02:
                    02:19:15:74:13:1b:2d:54:5f:fa:b5:6a:38:dc:37:
                    51:10:8e:8a:9a:f8:26:25:7f:88:36:ba:a5:d5:bd:
                    f6:dd:6d:a0:44:9f:d8:a0:97:c6:6a:81:42:c3:87:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:6F:B3:21:81:F4:72:92:25:5A:3E:78:F1:0D:8A:08:5E:6F:F0
            X509v3 Authority Key Identifier:
                keyid:D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:b5:56:dc:50:7b:94:c7:f5:f3:9b:4b:88:0a:a9:3d:6e:
         e0:63:47:2b:14:42:fc:8d:fc:1d:68:aa:5c:87:e0:83:47:b4:
         0f:58:23:03:7a:87:8c:2a:db:42:fc:e4:07:5c:e4:1e:d5:bb:
         31:0d:45:18:67:53:f1:b5:59:d7:21:8e:6e:74:4e:85:ad:c8:
         27:d2:a6:d0:09:98:d1:d6:6e:7c:ab:d1:23:88:8b:70:dc:0f:
         3f:90:44:81:5e:00:bf:aa:33:b1:c5:01:5e:db:f5:56:bf:2f:
         83:4e:44:8b:7f:d6:96:00:fa:47:a9:56:b9:f6:be:f7:20:a8:
         5c:85:67:3b:ab:2c:3b:f7:82:5c:b1:da:1f:f9:de:96:67:0f:
         88:bb:51:9a:af:7a:80:00:bf:5e:5c:f7:c9:0b:7d:d6:b0:02:
         de:97:dc:7a:67:cc:28:7f:63:e6:98:70:28:09:71:14:50:33:
         e9:3f:73:7d:76:00:99:da:88:54:6f:a8:af:5a:11:fb:20:9d:
         10:9a:53:60:f2:3a:cc:35:17:1d:6c:66:96:48:07:3a:c5:d7:
         ad:d0:3a:94:9e:12:25:48:2b:e7:40:10:ba:f6:d3:70:0c:ea:
         ef:64:f6:a4:27:a0:7a:de:0f:5a:84:34:d6:97:89:6c:f3:a0:
         63:61:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 12:04:00 2026 by rpki-client