This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
File:                     E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft (raw, json)
Hash identifier:          iozl4AfNj3PGxccXZESWNR+0NJbbQRIbtr3Ap3c6lZc=
Subject key identifier:   86:A6:8C:BE:30:84:B5:31:3F:DB:3E:7E:21:80:63:44:21:8F:A8:13
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       538071FC28A756FE6C97C727201ACEC5AA0DACA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
Manifest number:          0372
Signing time:             Sun 25 Jan 2026 10:54:28 +0000
Manifest this update:     Sun 25 Jan 2026 10:49:28 +0000
Manifest next update:     Mon 26 Jan 2026 14:38:28 +0000
Files and hashes:         1: E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl (hash: JpsuKflDjz4Oly2fYZEA/Bh0H+TWX9dJihr95pyk+Bw=)
                          2: 323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (hash: hy+PYw9smVKZXTiWxh17j209/4jADdXXtIvOCYFEFiw=)
                          3: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (hash: q/6qUhrGpywsYVU0hghyX+iDJDoyen0tHtGj+/ZKltg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:80:71:fc:28:a7:56:fe:6c:97:c7:27:20:1a:ce:c5:aa:0d:ac:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Jan 25 10:49:28 2026 GMT
            Not After : Jan 26 14:38:28 2026 GMT
        Subject: CN=86A68CBE3084B5313FDB3E7E21806344218FA813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:22:12:ff:14:f3:82:3f:58:b5:20:5d:37:
                    e1:3e:b3:e2:00:6a:4d:65:cd:a4:5d:8c:b2:79:d7:
                    58:95:4c:05:48:6e:65:dd:95:26:74:cc:f9:01:c4:
                    41:06:7a:30:f9:1c:95:f9:11:28:6f:19:99:dc:99:
                    9e:01:59:9a:46:02:92:c8:89:9a:df:dd:f8:5e:a2:
                    62:a6:98:6c:ee:29:ea:92:d1:a3:50:76:30:67:f2:
                    f6:66:63:f8:f1:95:5e:5d:11:af:35:ec:f5:5d:07:
                    08:23:e8:be:eb:03:97:e6:83:91:f3:0b:da:81:34:
                    dd:8f:f3:0b:09:6b:9e:e6:98:7c:0f:b0:64:6a:9e:
                    2b:ed:f7:ce:49:ce:76:f2:9f:ee:f7:f6:1d:d5:e5:
                    4f:5e:5f:7c:d6:32:35:fc:3e:7f:94:b2:06:41:ac:
                    a8:ad:9f:6e:a0:83:2c:86:c3:be:73:fb:ea:91:fa:
                    68:b0:b7:64:5c:e8:5f:44:6f:37:2c:54:36:e8:ad:
                    a0:bf:ab:71:15:97:ef:a9:fa:e8:d8:0b:62:cc:50:
                    e7:e0:e3:6d:73:66:06:81:53:2c:eb:1b:e7:4d:ac:
                    b7:97:c7:57:e1:ee:75:e5:ce:09:e6:0e:e6:d0:99:
                    1a:ec:22:28:11:2e:98:3e:c0:23:25:12:65:1e:83:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A6:8C:BE:30:84:B5:31:3F:DB:3E:7E:21:80:63:44:21:8F:A8:13
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:f9:fb:18:17:4d:4f:36:c7:49:55:d3:ea:49:a5:2f:91:
         4c:fe:93:1a:ba:21:f5:e4:0a:1d:59:b1:05:4c:91:9a:cd:e5:
         a2:71:16:f4:51:f5:b0:10:a2:67:fe:89:48:53:79:78:bb:c2:
         4b:54:81:dd:5b:a0:a0:00:18:1d:6b:f8:6b:b4:b3:f9:0e:86:
         ba:6d:f3:c6:03:97:29:8a:7b:9f:45:64:be:c3:bf:63:45:ff:
         d4:33:b4:93:64:e1:39:e2:2d:23:dc:7d:9b:70:d7:ef:de:70:
         92:79:b0:e7:77:eb:ba:32:91:32:f7:86:92:2a:55:cd:3a:14:
         81:a5:8e:76:1d:9b:44:68:69:f3:26:cf:9d:63:15:6b:6c:bc:
         47:18:11:b1:bf:18:58:87:4d:cf:5f:ab:0b:6a:27:f6:85:9f:
         eb:91:41:66:60:99:e0:62:b3:ff:fe:ef:f7:7a:f8:db:4f:e3:
         f5:bb:37:f7:07:d5:15:59:c8:33:5b:9b:1f:80:5c:2c:4b:7c:
         6b:1f:69:d3:66:44:ab:b7:a7:c5:27:b6:94:82:5a:a2:0a:a6:
         98:7f:c8:2f:c7:1b:b7:57:22:fa:cb:bb:de:2b:46:2b:bd:92:
         85:e0:83:d7:45:64:e5:f6:3c:9e:8c:39:50:41:14:56:a3:d7:
         a6:70:6f:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU4Bx/CinVv5sl8cnIBrOxaoNrKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMyMEIzNDU0RUVCOEU0MUZEMzFDNzczQ0Y4M0IzQzdD
RUVBMzM1MjAeFw0yNjAxMjUxMDQ5MjhaFw0yNjAxMjYxNDM4MjhaMDMxMTAvBgNV
BAMTKDg2QTY4Q0JFMzA4NEI1MzEzRkRCM0U3RTIxODA2MzQ0MjE4RkE4MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpCIS/xTzgj9YtSBdN+E+s+IA
ak1lzaRdjLJ511iVTAVIbmXdlSZ0zPkBxEEGejD5HJX5EShvGZncmZ4BWZpGApLI
iZrf3fheomKmmGzuKeqS0aNQdjBn8vZmY/jxlV5dEa817PVdBwgj6L7rA5fmg5Hz
C9qBNN2P8wsJa57mmHwPsGRqnivt985Jznbyn+739h3V5U9eX3zWMjX8Pn+UsgZB
rKitn26ggyyGw75z++qR+miwt2Rc6F9EbzcsVDboraC/q3EVl++p+ujYC2LMUOfg
421zZgaBUyzrG+dNrLeXx1fh7nXlzgnmDubQmRrsIigRLpg+wCMlEmUeg6BjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhqaMvjCEtTE/2z5+IYBjRCGPqBMwHwYDVR0j
BBgwFoAU4yCzRU7rjkH9Mcdzz4Ozx87qM1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBa
Y0gvMS9FMzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjBCMzQ1NEVFQjhFNDFG
RDMxQzc3M0NGODNCM0M3Q0VFQTMzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBaY0gvMS9F
MzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAErP5+xgXTU82x0lV0+pJpS+RTP6TGroh9eQKHVmxBUyRms3lonEW9FH1sBCi
Z/6JSFN5eLvCS1SB3VugoAAYHWv4a7Sz+Q6Gum3zxgOXKYp7n0VkvsO/Y0X/1DO0
k2ThOeItI9x9m3DX795wknmw53frujKRMveGkipVzToUgaWOdh2bRGhp8ybPnWMV
a2y8RxgRsb8YWIdNz1+rC2on9oWf65FBZmCZ4GKz//7v93r420/j9bs39wfVFVnI
M1ubH4BcLEt8ax9p02ZEq7enxSe2lIJaogqmmH/IL8cbt1ci+su73itGK72SheCD
10Vk5fY8now5UEEUVqPXpnBvIQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:25 2026 by rpki-client