This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
File:                     40EA943B9928A2416D417FB39A392494904FD334.mft (raw, json)
Hash identifier:          X2srz/B/I0UQnL2oNYu9Ws5iJ8yKl1Noy4hPvAmLhww=
Subject key identifier:   F9:66:48:90:2D:26:AB:A8:94:8F:B2:66:AE:FA:8A:C9:BF:D6:92:83
Authority key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34
Certificate issuer:       /CN=40EA943B9928A2416D417FB39A392494904FD334
Certificate serial:       1B2966B1D405B1AFDD757636FA86EAEA3F0096F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
Manifest number:          D3
Signing time:             Sun 25 Jan 2026 10:24:40 +0000
Manifest this update:     Sun 25 Jan 2026 10:19:40 +0000
Manifest next update:     Mon 26 Jan 2026 12:48:40 +0000
Files and hashes:         1: 34352e342e3232362e302f32342d3234203d3e20323636303630.roa (hash: MZPNhB9qi7mIQv1q0d7rVh8LO8iKKZAVrcZhpuRCX6s=)
                          2: 34352e342e3232362e302f32332d3233203d3e20323636303630.roa (hash: 7YsVQFDpbLOileNEYOdv5DEJvLmp13z3LBSTFq0iJVQ=)
                          3: 40EA943B9928A2416D417FB39A392494904FD334.crl (hash: 18NerOPDllJm2I/0jJe6OjOdNZmcnIpsH7G/9/4hsMM=)
                          4: 323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa (hash: Ho3oehfUuf7qNz61F35C1bMiS0o19Y/NqOTwWzA+FhQ=)
                          5: 34352e342e3232372e302f32342d3234203d3e20323636303630.roa (hash: ZgvyOyh3glzPndMQDfXf+LFJcMaPKH6m2BBjFx5kHEQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl
                          rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:66:b1:d4:05:b1:af:dd:75:76:36:fa:86:ea:ea:3f:00:96:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40EA943B9928A2416D417FB39A392494904FD334
        Validity
            Not Before: Jan 25 10:19:40 2026 GMT
            Not After : Jan 26 12:48:40 2026 GMT
        Subject: CN=F96648902D26ABA8948FB266AEFA8AC9BFD69283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:26:90:dc:2d:a7:16:2e:d9:0c:03:18:76:
                    19:30:f7:4d:6b:96:58:b0:b3:ff:10:9f:2c:c1:1d:
                    24:f0:95:f6:f5:c1:fc:2a:9b:6a:54:ee:43:d7:b0:
                    f3:04:59:d3:d0:5f:a1:56:88:a9:e9:cf:02:10:ec:
                    71:df:a8:2e:5c:64:21:43:28:ef:7b:32:79:61:fe:
                    a4:fb:0b:b9:7b:18:17:dd:fa:55:99:34:eb:39:13:
                    06:45:1e:ff:2b:6a:b6:ed:ff:da:72:9b:cc:7a:26:
                    2b:08:cb:05:e8:b6:ed:f3:c0:2e:cf:e5:14:93:fb:
                    67:9b:c2:74:a2:8b:06:4c:38:0b:49:48:6f:3f:cf:
                    3d:f0:d2:21:26:58:7a:91:a3:55:3d:ac:96:b4:8e:
                    bc:78:88:62:e5:a1:eb:d7:d3:32:d4:aa:a2:2b:eb:
                    4c:7f:ef:0f:c7:8f:48:ec:d6:55:b7:59:49:40:8d:
                    5f:b9:22:28:97:de:bd:1c:0b:aa:d2:ae:18:23:79:
                    e1:e7:fe:a4:ef:19:7c:4e:89:d4:21:47:89:99:a9:
                    b5:35:d6:87:ea:51:a4:03:51:b7:e3:21:78:91:96:
                    e1:28:ba:22:2f:c8:49:07:00:b0:80:ec:a6:50:24:
                    bc:5e:72:b0:e0:0a:34:f4:0b:b5:95:5e:71:dd:44:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:48:90:2D:26:AB:A8:94:8F:B2:66:AE:FA:8A:C9:BF:D6:92:83
            X509v3 Authority Key Identifier:
                keyid:40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:07:9e:3a:88:0c:37:e3:a0:bc:b1:47:7e:65:d6:09:0a:dd:
         f0:6f:8b:7b:9f:4c:3c:5b:51:8f:25:31:68:d3:10:bc:d4:7f:
         4b:0b:c2:94:ac:a6:fc:fa:6a:d8:55:8c:21:60:0b:7d:98:10:
         e3:02:22:de:09:89:a4:38:65:b1:98:d6:0e:03:74:4c:91:ff:
         83:8c:c6:67:a8:0b:c1:f9:42:08:18:ac:35:18:d6:c0:47:00:
         0f:57:0f:c6:22:3b:0e:2f:92:af:13:91:6f:46:06:39:44:3a:
         95:77:1e:86:d1:55:17:20:e8:46:65:ab:18:34:a4:28:5d:0c:
         b9:e1:9b:08:de:8b:85:b9:a1:1e:bc:64:16:be:63:0c:82:54:
         48:1a:bf:bf:cc:d5:66:f2:65:f1:df:c5:94:cb:6b:c0:ed:07:
         8b:5a:27:28:11:4d:8b:2e:c5:c4:97:57:5a:d7:dc:3b:e3:e1:
         c9:56:70:0a:c1:0d:de:cb:39:40:9a:2c:46:83:7f:7c:85:89:
         55:5a:e9:fe:9e:db:80:fa:44:60:56:a4:68:ac:ea:72:cd:72:
         7c:a4:eb:f5:b9:09:83:a8:6c:0a:97:0a:05:51:05:0e:9e:10:
         83:ca:76:cd:d5:7c:db:60:d0:cc:25:5a:af:9a:88:55:31:88:
         67:97:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:22 2026 by rpki-client