This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          CVcvGBr629LXqrAVImG19Rav7tyZEjLo7hDJ4vXyQC4=
Subject key identifier:   08:24:E8:15:B8:F1:54:37:4D:9B:C6:83:A7:D4:58:DE:91:67:09:F1
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       66F002726644BCD4C794F173B2BE06CC8D1F929E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          0215
Signing time:             Sun 25 Jan 2026 00:52:35 +0000
Manifest this update:     Sun 25 Jan 2026 00:47:35 +0000
Manifest next update:     Mon 26 Jan 2026 01:06:35 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: zMqmbkvyR8FCBZk1aMI7RV2Dv9/81lCU3bqz9OTFomw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f0:02:72:66:44:bc:d4:c7:94:f1:73:b2:be:06:cc:8d:1f:92:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Jan 25 00:47:35 2026 GMT
            Not After : Jan 26 01:06:35 2026 GMT
        Subject: CN=0824E815B8F154374D9BC683A7D458DE916709F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:ff:a6:2d:c1:ac:23:db:2a:87:e8:ba:84:
                    56:30:44:2d:e5:8f:aa:ba:4c:3a:7b:b3:5b:c1:5f:
                    6e:29:7e:db:d4:f2:b5:51:73:90:d8:8a:76:35:62:
                    f9:8e:b9:23:ba:c7:99:72:76:6d:8a:a5:ce:c9:d5:
                    46:01:73:9d:a5:02:cc:b4:51:76:31:ed:66:a3:89:
                    6b:f4:5d:3d:67:04:0b:63:ce:08:9e:af:c8:01:01:
                    13:1d:6d:93:57:aa:d5:d3:ac:c2:82:08:52:8e:30:
                    54:0b:52:95:df:33:54:f0:96:49:e4:33:9b:ed:db:
                    22:66:48:83:44:8d:e6:94:1a:93:c4:8b:53:7d:cf:
                    ab:31:32:4b:8b:52:3f:ee:3b:ca:9b:2e:e7:1c:79:
                    91:1b:f7:54:b8:a2:42:ef:4c:90:28:d2:53:d0:85:
                    82:19:51:33:c6:31:76:fa:dc:77:e3:62:f5:a8:fe:
                    7f:89:5f:72:3a:49:06:a4:f4:87:ea:38:0b:b6:fa:
                    75:b7:c4:f7:ba:73:40:f8:6c:20:aa:b9:9d:dd:c6:
                    98:06:b0:15:71:9f:ed:ec:74:50:cc:dd:79:72:78:
                    f7:1c:bc:ed:6e:44:13:ae:9c:8b:dd:2d:b3:61:56:
                    55:e2:a7:27:56:3b:8f:c3:e5:35:1e:47:cf:93:1f:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:E8:15:B8:F1:54:37:4D:9B:C6:83:A7:D4:58:DE:91:67:09:F1
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:99:92:a6:2b:1a:16:c4:1a:64:8d:18:65:29:03:9f:a8:9d:
         4f:8b:6a:45:68:8e:d9:5e:72:fc:f4:88:5f:4d:5c:97:be:82:
         11:1d:4f:41:44:f1:77:a0:ad:46:6b:6e:c6:4d:4e:53:8f:7b:
         f6:db:72:99:fd:c1:c7:84:1a:cc:eb:3d:e9:c6:f9:94:1f:c0:
         59:55:79:9e:29:3e:dc:3c:f3:98:f2:19:c1:09:8f:ad:5c:07:
         8e:d1:0a:4a:4a:09:c8:eb:31:b7:39:19:09:26:b9:f0:d5:ea:
         71:b5:1d:41:90:4b:7d:55:53:66:5b:a4:dc:f7:71:26:9a:48:
         38:e6:fc:1d:07:39:bd:d9:e0:63:72:ea:2c:f3:3c:b7:da:06:
         ff:2d:c1:ad:15:57:4b:7e:5a:2a:23:42:31:7e:9a:8b:a5:37:
         e7:ea:0b:52:31:61:ab:17:e0:5a:85:6e:29:4f:9c:b1:0f:c2:
         b2:b6:e1:94:c5:a1:e7:bc:9a:83:d4:9b:c7:99:9c:c9:e2:c3:
         96:69:c5:dd:4a:d7:d6:20:40:0b:8e:4b:af:f3:ce:02:89:24:
         86:b3:a1:3b:d2:bc:b1:86:d9:13:53:3a:33:9d:dc:47:6d:cc:
         6a:e0:aa:2f:82:d4:2c:db:49:8f:f7:68:27:4b:9b:e2:43:1a:
         81:b7:56:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZvACcmZEvNTHlPFzsr4GzI0fkp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx
QjIzRUEwMTAeFw0yNjAxMjUwMDQ3MzVaFw0yNjAxMjYwMTA2MzVaMDMxMTAvBgNV
BAMTKDA4MjRFODE1QjhGMTU0Mzc0RDlCQzY4M0E3RDQ1OERFOTE2NzA5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBP+mLcGsI9sqh+i6hFYwRC3l
j6q6TDp7s1vBX24pftvU8rVRc5DYinY1YvmOuSO6x5lydm2Kpc7J1UYBc52lAsy0
UXYx7WajiWv0XT1nBAtjzgier8gBARMdbZNXqtXTrMKCCFKOMFQLUpXfM1Twlknk
M5vt2yJmSINEjeaUGpPEi1N9z6sxMkuLUj/uO8qbLucceZEb91S4okLvTJAo0lPQ
hYIZUTPGMXb63HfjYvWo/n+JX3I6SQak9IfqOAu2+nW3xPe6c0D4bCCquZ3dxpgG
sBVxn+3sdFDM3XlyePccvO1uRBOunIvdLbNhVlXipydWO4/D5TUeR8+TH99lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCCToFbjxVDdNm8aDp9RY3pFnCfEwHwYDVR0j
BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI
NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1
NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80
MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAApmSpisaFsQaZI0YZSkDn6idT4tqRWiO2V5y/PSIX01cl76CER1PQUTxd6Ct
Rmtuxk1OU4979ttymf3Bx4QazOs96cb5lB/AWVV5nik+3DzzmPIZwQmPrVwHjtEK
SkoJyOsxtzkZCSa58NXqcbUdQZBLfVVTZluk3PdxJppIOOb8HQc5vdngY3LqLPM8
t9oG/y3BrRVXS35aKiNCMX6ai6U35+oLUjFhqxfgWoVuKU+csQ/CsrbhlMWh57ya
g9Sbx5mcyeLDlmnF3UrX1iBAC45Lr/POAokkhrOhO9K8sYbZE1M6M53cR23MauCq
L4LULNtJj/doJ0ub4kMagbdWKw==
-----END CERTIFICATE-----