This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json)
Hash identifier:          Q1p5Of45KvQGcPtNOUaEtc19xtH79kdiOs00ADCTr4I=
Subject key identifier:   30:BD:B9:72:E9:39:88:1B:44:DB:2A:0E:B9:96:45:3C:C1:7F:C4:F2
Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Certificate issuer:       /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
Certificate serial:       4AA3A9B91146EC72B1B29C5A70C64A8EB1A611F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
Manifest number:          018F
Signing time:             Sun 25 Jan 2026 11:51:13 +0000
Manifest this update:     Sun 25 Jan 2026 11:46:13 +0000
Manifest next update:     Mon 26 Jan 2026 12:51:13 +0000
Files and hashes:         1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: +O4nvDQSsoB0Gzoc2WD/Fp0fMr8SFwaG3Z3MAENIo4s=)
                          2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a3:a9:b9:11:46:ec:72:b1:b2:9c:5a:70:c6:4a:8e:b1:a6:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Validity
            Not Before: Jan 25 11:46:13 2026 GMT
            Not After : Jan 26 12:51:13 2026 GMT
        Subject: CN=30BDB972E939881B44DB2A0EB996453CC17FC4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:0c:ce:5d:bd:40:dc:af:da:9b:d4:65:4d:
                    8a:f1:51:27:16:dd:a2:fe:96:64:38:04:57:7d:56:
                    c5:1a:09:64:6b:b8:b0:e2:ac:4a:3c:b8:c4:50:e1:
                    2d:76:ad:c5:af:ae:36:8e:dd:d4:88:cd:b7:f4:f6:
                    3c:57:81:9d:3b:84:fb:bc:7c:e8:1d:6b:ff:42:d0:
                    2e:c3:21:cc:83:b4:69:4a:84:82:09:64:9a:ba:b1:
                    64:ce:33:26:5b:92:bb:ac:83:7d:f9:53:2c:bd:17:
                    c2:5c:0d:24:b1:58:6f:ff:41:37:02:ac:83:43:d1:
                    8b:fe:36:c5:93:14:d7:53:d9:9b:a0:0e:ea:0d:9b:
                    42:4a:a1:27:e9:3c:f0:e4:6c:81:d7:f7:99:53:48:
                    bf:42:5d:9f:cc:1f:0a:49:d7:26:92:98:51:3d:ad:
                    c2:48:fb:84:2a:17:20:75:87:95:16:33:35:96:bf:
                    44:c6:87:19:f7:95:8d:dd:4f:51:e9:00:3e:1b:49:
                    9d:fa:78:39:32:1c:de:7f:7c:41:15:3d:be:2f:3a:
                    d0:2f:37:0e:83:e2:d8:cc:20:42:20:38:77:4f:35:
                    e9:99:f3:98:af:bf:12:40:8f:af:1a:6e:4a:43:b3:
                    09:f0:18:02:dd:38:0c:ed:f9:00:46:23:b8:92:fc:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BD:B9:72:E9:39:88:1B:44:DB:2A:0E:B9:96:45:3C:C1:7F:C4:F2
            X509v3 Authority Key Identifier:
                keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:d9:65:c0:09:4c:82:bd:cc:dd:90:35:cf:21:6c:39:7f:
         8b:40:19:33:be:44:a4:6d:bd:a4:54:18:1c:86:23:0e:67:9f:
         1d:96:1b:68:b7:4e:88:b6:76:6b:0a:58:0f:5c:3b:21:10:57:
         fe:01:b1:e7:68:7e:8d:24:ae:28:82:2d:ea:42:80:b0:db:6a:
         30:dd:53:6a:6e:ed:80:5b:b8:dd:61:da:80:ed:e2:9f:6f:01:
         45:36:8b:f2:b8:6e:a5:e0:d9:f9:68:3a:92:83:b8:ef:de:81:
         b1:66:38:a2:6b:80:96:68:e6:70:01:c2:70:d3:fd:0a:24:ae:
         76:df:b0:9c:fe:a2:1a:33:7b:20:4a:30:6f:69:8a:23:11:a6:
         3d:0b:14:4f:4a:e9:a8:3e:af:25:da:50:53:ca:da:fd:63:6b:
         9d:a5:17:df:cf:b8:5b:0a:ce:99:bc:83:4f:13:0f:5c:16:93:
         4e:78:3c:c1:8d:64:10:07:1d:d0:09:60:55:96:b5:90:fb:87:
         7f:bb:f0:67:e1:e1:e8:b3:93:de:7b:3d:ca:60:df:b4:05:89:
         df:76:0c:ed:84:2d:66:75:0f:f0:2d:7e:d1:e7:96:41:13:24:
         12:6a:04:a7:c5:1b:8b:15:98:77:0b:65:24:18:c4:81:df:36:
         66:3e:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----