This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File:                     3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier:          jI7C9qQUmwoNQ+tPToKZlmwoizarIlXgo5ykM6MxiOI=
Subject key identifier:   01:07:32:1F:44:6C:69:64:E5:56:26:54:F6:22:66:29:DC:57:48:BF
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       6EF1A19EBD6A2E181EAF2DB57AC0BB8086DC5E40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number:          0376
Signing time:             Sun 25 Jan 2026 13:18:06 +0000
Manifest this update:     Sun 25 Jan 2026 13:13:06 +0000
Manifest next update:     Mon 26 Jan 2026 15:58:06 +0000
Files and hashes:         1: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: 141y4J44LW3JJAIjUxJezXC698M189W26TFn0Lt36H0=)
                          2: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: ewmKqfog/fgeU/jH2g0Duy320j/78TqpSnYLXJn75r0=)
                          3: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: TxJRIV/t8yEpIgN+ZLpKu5QCFBVwqlhmR+oA07SrS70=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
                          rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:a1:9e:bd:6a:2e:18:1e:af:2d:b5:7a:c0:bb:80:86:dc:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Jan 25 13:13:06 2026 GMT
            Not After : Jan 26 15:58:06 2026 GMT
        Subject: CN=0107321F446C6964E5562654F6226629DC5748BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:ae:64:e1:44:0b:ee:58:90:ae:e2:a2:20:
                    fe:27:13:e4:7a:eb:3f:45:9b:62:cc:d3:fd:57:37:
                    cc:ce:5c:01:55:83:ec:1f:cf:2d:05:e5:19:2d:ba:
                    41:b0:30:d1:40:43:4d:bf:1c:dc:2f:9b:9f:ba:4d:
                    40:d2:13:ea:75:fa:b0:b0:20:df:f3:d7:7a:5b:96:
                    01:d5:25:e6:8d:6f:25:e9:44:07:ce:39:94:78:e7:
                    d9:89:f5:c1:3d:7e:25:ff:b2:f9:8f:fc:ac:33:5a:
                    e8:5f:72:b0:11:16:6d:33:8d:5e:74:b8:af:6a:a7:
                    bb:6d:9c:46:70:dc:42:3a:92:f2:9a:ca:f2:8c:9e:
                    cf:c0:e0:9c:04:dc:a5:58:d5:6c:ca:5a:ab:9d:7b:
                    1e:e2:fd:b6:41:29:77:ee:d4:b9:90:bc:72:d4:eb:
                    a8:fd:55:ac:a7:99:28:a1:a6:48:57:ed:5f:0d:f0:
                    e0:9c:09:01:fe:3e:13:3c:89:71:3c:5c:b1:0b:13:
                    54:a1:d6:7a:29:60:3c:c7:39:cb:c0:25:2d:6c:9f:
                    0e:2e:be:09:75:86:c7:19:00:cb:de:95:2d:f7:f7:
                    62:61:68:41:50:c0:a4:25:d2:6b:ba:d9:a2:ef:5b:
                    ea:61:66:72:ee:4b:97:63:7c:34:40:02:77:5a:ca:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:07:32:1F:44:6C:69:64:E5:56:26:54:F6:22:66:29:DC:57:48:BF
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:d5:2f:61:b0:f5:aa:7a:dd:41:8d:40:32:d2:c6:69:af:
         86:85:7c:70:d9:7d:61:f7:3b:57:29:ce:fe:c0:a5:dc:6f:58:
         f6:72:46:11:38:81:c8:87:60:81:55:5b:dc:33:db:0e:96:d2:
         b5:0a:03:d8:d3:2b:51:c1:91:4d:30:36:fb:79:33:a9:14:da:
         83:8c:d2:d4:5e:11:72:2c:b1:c5:e7:45:de:fd:1f:84:35:db:
         0c:e0:79:84:38:93:82:ae:f7:fa:9b:ef:73:40:45:1d:30:de:
         7d:6d:8b:91:6b:6e:c0:09:f1:54:ce:a1:10:f3:67:52:32:e2:
         4e:6d:f3:01:00:55:80:2a:a7:dc:e0:f5:66:6c:66:5e:57:80:
         45:d7:3e:73:04:18:76:4b:cb:70:43:95:b5:f1:3a:86:cb:df:
         92:f2:b4:c6:8c:33:59:ad:e7:08:ed:38:fc:05:cd:e6:34:8e:
         1e:17:1d:b8:e9:06:46:fd:62:06:e4:3f:07:7c:93:fa:58:28:
         4e:8c:45:46:eb:05:8b:42:dd:60:41:52:6c:40:27:dc:52:8f:
         33:08:db:ca:3c:7b:76:3e:2a:16:dd:60:8e:fe:0e:19:81:3e:
         c9:1d:b4:1f:27:fa:e3:2a:3f:f6:b8:4a:ac:2a:76:1f:c2:96:
         3e:55:9a:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbvGhnr1qLhgery21esC7gIbcXkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE
Q0EwMDE1NjAeFw0yNjAxMjUxMzEzMDZaFw0yNjAxMjYxNTU4MDZaMDMxMTAvBgNV
BAMTKDAxMDczMjFGNDQ2QzY5NjRFNTU2MjY1NEY2MjI2NjI5REM1NzQ4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Va5k4UQL7liQruKiIP4nE+R6
6z9Fm2LM0/1XN8zOXAFVg+wfzy0F5RktukGwMNFAQ02/HNwvm5+6TUDSE+p1+rCw
IN/z13pblgHVJeaNbyXpRAfOOZR459mJ9cE9fiX/svmP/KwzWuhfcrARFm0zjV50
uK9qp7ttnEZw3EI6kvKayvKMns/A4JwE3KVY1WzKWqudex7i/bZBKXfu1LmQvHLU
66j9VaynmSihpkhX7V8N8OCcCQH+PhM8iXE8XLELE1Sh1nopYDzHOcvAJS1snw4u
vgl1hscZAMvelS3392JhaEFQwKQl0mu62aLvW+phZnLuS5djfDRAAndayvTFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAQcyH0RsaWTlViZU9iJmKdxXSL8wHwYDVR0j
BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4
bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC
QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z
Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOLbVL2Gw9ap63UGNQDLSxmmvhoV8cNl9Yfc7VynO/sCl3G9Y9nJGETiByIdg
gVVb3DPbDpbStQoD2NMrUcGRTTA2+3kzqRTag4zS1F4RciyxxedF3v0fhDXbDOB5
hDiTgq73+pvvc0BFHTDefW2LkWtuwAnxVM6hEPNnUjLiTm3zAQBVgCqn3OD1Zmxm
XleARdc+cwQYdkvLcEOVtfE6hsvfkvK0xowzWa3nCO04/AXN5jSOHhcduOkGRv1i
BuQ/B3yT+lgoToxFRusFi0LdYEFSbEAn3FKPMwjbyjx7dj4qFt1gjv4OGYE+yR20
Hyf64yo/9rhKrCp2H8KWPlWaJQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:17 2026 by rpki-client