This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
File:                     2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json)
Hash identifier:          TuyNGj8rNwtY9LS8whgk7FZVsWXH8BIFsQuafHAdOsU=
Subject key identifier:   4F:48:74:CF:6D:8F:96:D8:5E:DB:FB:71:41:4F:24:DC:7C:36:7C:F1
Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA
Certificate issuer:       /CN=2987D670913962CF69181F73C94FE8C279E038DA
Certificate serial:       448A26ED0E51D929429ABF053118D2BCB8486CA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
Manifest number:          8E
Signing time:             Sun 25 Jan 2026 16:30:21 +0000
Manifest this update:     Sun 25 Jan 2026 16:25:21 +0000
Manifest next update:     Mon 26 Jan 2026 20:29:21 +0000
Files and hashes:         1: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: IsP804EpzuxbKMSHtGbn4vcfwhZVjs41v+ZiJnTLM20=)
                          2: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=)
                          3: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=)
                          4: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8a:26:ed:0e:51:d9:29:42:9a:bf:05:31:18:d2:bc:b8:48:6c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA
        Validity
            Not Before: Jan 25 16:25:21 2026 GMT
            Not After : Jan 26 20:29:21 2026 GMT
        Subject: CN=4F4874CF6D8F96D85EDBFB71414F24DC7C367CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:b9:5c:c9:2c:19:b9:06:5f:5f:6c:e8:f7:
                    c1:4e:d0:24:a1:88:53:4e:ac:ed:66:6b:20:68:a2:
                    d0:ef:c1:33:05:51:61:62:ad:04:8c:d5:49:f6:d1:
                    4e:ac:f2:88:f3:62:64:53:45:a9:47:54:d4:a9:3d:
                    f7:a4:2f:76:5c:29:1c:ba:cf:ef:05:3e:16:63:21:
                    55:25:0e:fb:02:55:92:46:08:95:7b:ea:78:c8:ca:
                    72:5e:c1:5f:85:df:a0:43:8a:6b:8d:7d:b2:99:36:
                    df:6d:52:6e:30:2d:b3:45:4e:f9:94:be:c4:db:4f:
                    c0:32:a5:95:bd:9f:21:26:a0:d2:d5:7b:2f:f7:f0:
                    8f:77:f6:cf:f2:b3:bd:5b:92:49:55:5a:af:43:97:
                    2f:d8:61:6e:65:12:38:b8:df:98:c4:50:42:88:b8:
                    72:de:97:50:4b:8d:a5:5e:ee:74:64:a8:b2:af:50:
                    ce:bd:b2:34:90:cf:4e:5c:80:76:ea:5b:83:ca:ed:
                    a7:9e:7f:67:cd:a5:53:25:77:5e:10:d6:e9:66:5b:
                    ea:4b:a1:e4:3f:f9:28:79:81:ab:25:0d:dc:6a:fb:
                    0d:94:6b:b9:0b:31:1f:ca:7b:7e:94:81:94:48:d9:
                    4b:10:47:12:10:08:e7:b1:5c:ca:43:00:a5:db:ef:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:74:CF:6D:8F:96:D8:5E:DB:FB:71:41:4F:24:DC:7C:36:7C:F1
            X509v3 Authority Key Identifier:
                keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e4:68:3b:e7:a4:b0:30:1b:41:84:93:f5:1b:5a:5c:bf:e3:
         de:7b:f9:6a:0e:32:d2:a5:e0:a2:07:1d:da:b5:45:81:e4:f3:
         4b:c1:5e:b4:c5:de:a8:47:7b:a7:11:12:81:ae:0e:78:3d:48:
         c2:7a:de:7d:16:7e:64:47:6f:68:98:d4:05:5d:7c:4d:e8:eb:
         ab:65:24:31:e4:0a:0e:db:4d:d6:ce:09:6d:ef:9a:d2:97:8a:
         a0:11:88:06:b9:e6:41:9a:ea:83:15:1c:26:7b:e0:6a:77:5e:
         02:81:4c:ee:8f:cd:08:9d:1f:6d:20:0d:8d:1b:78:40:b9:34:
         29:70:17:fe:98:aa:b0:5e:88:73:00:44:69:8e:3b:ad:25:8a:
         3d:ab:f6:b1:71:88:5b:b5:1e:53:a6:d8:7b:84:42:2a:db:8a:
         4e:d8:30:26:a6:bd:26:7c:ca:b9:8d:68:c0:a9:da:f2:c3:0a:
         f1:39:2c:eb:4e:30:28:59:b3:50:8e:18:f1:fb:da:eb:6b:cf:
         4f:fd:a3:df:dc:4a:7c:8f:4b:6d:b3:a6:c4:a1:a4:9b:75:db:
         da:4a:27:d7:f9:fb:b2:63:23:40:77:56:8b:ad:bb:6d:0c:3f:
         14:fc:25:a0:c2:ff:91:94:38:05:38:f4:29:6e:1f:10:0f:f2:
         9f:5b:d5:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURIom7Q5R2SlCmr8FMRjSvLhIbKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3
OUUwMzhEQTAeFw0yNjAxMjUxNjI1MjFaFw0yNjAxMjYyMDI5MjFaMDMxMTAvBgNV
BAMTKDRGNDg3NENGNkQ4Rjk2RDg1RURCRkI3MTQxNEYyNERDN0MzNjdDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhblcySwZuQZfX2zo98FO0CSh
iFNOrO1mayBootDvwTMFUWFirQSM1Un20U6s8ojzYmRTRalHVNSpPfekL3ZcKRy6
z+8FPhZjIVUlDvsCVZJGCJV76njIynJewV+F36BDimuNfbKZNt9tUm4wLbNFTvmU
vsTbT8AypZW9nyEmoNLVey/38I939s/ys71bkklVWq9Dly/YYW5lEji435jEUEKI
uHLel1BLjaVe7nRkqLKvUM69sjSQz05cgHbqW4PK7aeef2fNpVMld14Q1ulmW+pL
oeQ/+Sh5gaslDdxq+w2Ua7kLMR/Ke36UgZRI2UsQRxIQCOexXMpDAKXb7zwDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT0h0z22Plthe2/txQU8k3Hw2fPEwHwYDVR0j
BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj
eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2
OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y
OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwORoO+eksDAbQYST9RtaXL/j3nv5ag4y0qXgogcd2rVFgeTzS8FetMXeqEd7
pxESga4OeD1IwnrefRZ+ZEdvaJjUBV18Tejrq2UkMeQKDttN1s4Jbe+a0peKoBGI
BrnmQZrqgxUcJnvgandeAoFM7o/NCJ0fbSANjRt4QLk0KXAX/piqsF6IcwBEaY47
rSWKPav2sXGIW7UeU6bYe4RCKtuKTtgwJqa9JnzKuY1owKna8sMK8Tks604wKFmz
UI4Y8fva62vPT/2j39xKfI9LbbOmxKGkm3Xb2kon1/n7smMjQHdWi627bQw/FPwl
oML/kZQ4BTj0KW4fEA/yn1vVRw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:16 2026 by rpki-client