This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
File:                     43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json)
Hash identifier:          nrGVxokFX0gOo7EXPyysPhTubQ9X8KXSJNtuhCFGj14=
Subject key identifier:   2E:02:96:EC:A2:5C:45:DD:99:98:C7:7D:47:44:30:81:65:3D:A4:1C
Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
Certificate issuer:       /CN=43897DFF118E56C31A35958D9EA818504B130E11
Certificate serial:       1398B7388E2BDDCAA083697724D3DA5AF23B040A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
Manifest number:          0350
Signing time:             Sat 24 Jan 2026 23:46:05 +0000
Manifest this update:     Sat 24 Jan 2026 23:41:05 +0000
Manifest next update:     Mon 26 Jan 2026 02:57:05 +0000
Files and hashes:         1: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=)
                          2: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: 5dxPbXj5dc9FBGgoEMRvHFAyziUt2gW6OPdr+8uj/KU=)
                          3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl
                          rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:98:b7:38:8e:2b:dd:ca:a0:83:69:77:24:d3:da:5a:f2:3b:04:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11
        Validity
            Not Before: Jan 24 23:41:05 2026 GMT
            Not After : Jan 26 02:57:05 2026 GMT
        Subject: CN=2E0296ECA25C45DD9998C77D47443081653DA41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bc:95:f7:3e:3a:0a:fd:23:e5:6d:58:7d:ad:
                    82:de:db:4a:75:6a:47:59:af:99:cb:10:85:0c:d8:
                    3b:c1:47:a2:18:a3:d7:26:15:b7:10:95:74:64:28:
                    d0:d2:f3:ff:f5:16:5e:93:71:e6:0d:e2:27:7b:4a:
                    4f:ab:0c:99:e6:bb:ae:34:48:35:63:04:9c:08:83:
                    ec:42:e9:13:35:fc:25:39:22:9c:39:32:7f:84:5c:
                    48:b6:ec:a2:f4:31:42:ff:ee:65:ba:63:2a:fc:47:
                    d5:9c:56:61:d6:cd:18:ea:95:19:7d:dd:92:de:d0:
                    f2:09:87:3e:d0:ea:ed:61:7f:9c:e7:56:3c:a1:e5:
                    03:8e:52:03:6d:df:9c:b8:0e:83:ff:f3:50:7c:4a:
                    69:cb:75:67:1f:d5:c8:90:19:ce:73:ba:a9:15:dc:
                    9c:b8:2f:60:58:5e:c2:74:66:0e:9b:0d:bc:0b:d5:
                    56:b0:66:89:79:24:2a:16:9b:ae:94:1e:55:06:e1:
                    e9:8f:51:92:75:85:63:4a:58:f2:42:a9:12:5c:9d:
                    86:35:71:79:83:92:2f:03:37:26:aa:f9:a2:97:aa:
                    ff:b5:9c:a5:18:96:f4:27:96:20:f4:ac:97:e4:14:
                    0a:6c:af:e6:5e:7e:70:e5:d5:44:22:29:4f:49:dd:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:96:EC:A2:5C:45:DD:99:98:C7:7D:47:44:30:81:65:3D:A4:1C
            X509v3 Authority Key Identifier:
                keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:20:84:d9:52:66:fd:98:d1:38:8d:ea:9a:bd:cd:98:68:
         4f:56:06:95:5a:0f:7f:bb:43:83:14:cb:2b:a6:63:0b:1e:52:
         2e:b3:30:ee:52:3b:83:05:fb:29:12:8b:e0:98:14:e3:c0:87:
         a6:ad:c9:f7:3b:6f:5a:5d:3d:0c:63:e4:b2:80:2c:16:8e:71:
         1e:b9:cd:09:1d:40:76:a8:52:0b:46:dd:83:b5:68:a9:32:a5:
         9c:4b:32:19:5e:ae:f0:f4:d5:93:37:35:90:c8:65:0d:7b:f3:
         9b:9e:f1:3a:bc:1d:e3:57:3f:dd:d0:03:dc:8f:6b:82:29:f4:
         05:eb:8f:00:69:a2:2a:a4:7f:ae:a2:78:f5:89:13:4e:d6:8d:
         35:71:d6:54:0d:29:68:0f:84:93:19:fb:62:6f:a2:7a:a7:d1:
         60:68:48:14:db:e9:a7:97:4e:52:62:5b:89:b6:f4:4a:66:e7:
         2f:fe:0f:a5:af:3d:03:84:34:2c:39:e9:db:82:ec:6f:b9:de:
         d7:ad:a1:e9:68:a8:56:03:94:51:fe:22:35:fc:2c:25:70:05:
         0c:12:9e:12:cc:bb:9b:f5:79:37:ee:e8:fe:85:ca:b7:dd:05:
         0e:a5:13:3b:7b:97:d2:45:89:12:7a:d2:ec:d7:52:28:1a:02:
         79:97:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:51 2026 by rpki-client