This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
File:                     D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json)
Hash identifier:          55tFIQHQyRCQP7MeHM/Z4FUaOkJxxU5hirqQhraF1Ho=
Subject key identifier:   3B:F4:49:91:25:00:71:E3:F1:2E:F9:0F:DD:1D:33:44:5D:1B:55:8B
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Certificate issuer:       /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial:       74FC3ACECB88C3262152FC2E7867FDCB4B42DB31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
Manifest number:          0138
Signing time:             Sat 24 Jan 2026 23:02:29 +0000
Manifest this update:     Sat 24 Jan 2026 22:57:29 +0000
Manifest next update:     Mon 26 Jan 2026 02:44:29 +0000
Files and hashes:         1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=)
                          2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=)
                          3: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: liD/cQi6ToKRYtBpcF47atMxV805DUNVgGCbjDjWc70=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
                          rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:3a:ce:cb:88:c3:26:21:52:fc:2e:78:67:fd:cb:4b:42:db:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
        Validity
            Not Before: Jan 24 22:57:29 2026 GMT
            Not After : Jan 26 02:44:29 2026 GMT
        Subject: CN=3BF44991250071E3F12EF90FDD1D33445D1B558B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:2e:25:eb:6b:49:6e:f7:21:d0:b3:8c:d2:
                    87:7f:66:78:94:1e:cf:d0:e6:3b:68:8b:4d:ca:17:
                    22:68:42:e5:c2:65:e4:c2:68:af:1e:77:0b:c6:97:
                    ca:d5:ba:50:bd:c8:f7:52:a9:48:b6:da:8c:cf:14:
                    df:4c:33:60:c4:d3:61:bb:a4:50:58:82:be:c7:e3:
                    b8:c3:be:7b:e9:02:3b:13:a1:4e:fd:7a:09:b5:02:
                    34:7c:19:27:2a:c5:b6:c6:d9:1d:dc:33:8b:2a:bf:
                    cc:1a:3b:cd:0f:ae:1a:01:08:8d:14:32:6f:eb:d5:
                    50:27:45:e4:19:f1:93:7b:bb:9c:1e:44:60:87:3a:
                    5b:71:0c:3b:18:75:6b:0a:53:ec:97:b9:32:b1:bd:
                    00:34:50:80:f4:95:5c:72:a4:5c:d1:9d:22:42:6d:
                    fb:f7:38:58:0d:ab:5f:50:0a:ba:e9:fc:55:97:9e:
                    73:e5:9c:39:d4:f8:19:b6:bf:7b:70:68:e2:42:97:
                    21:ed:8e:a6:f2:93:cf:b9:1d:d5:55:0a:c6:fc:23:
                    af:93:a9:09:a5:62:ff:58:9a:e4:6d:f1:52:ea:28:
                    22:6f:48:58:7d:ec:5d:de:05:66:81:51:09:b0:f3:
                    e2:68:4e:b9:fe:20:b9:08:87:13:c9:85:62:63:93:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F4:49:91:25:00:71:E3:F1:2E:F9:0F:DD:1D:33:44:5D:1B:55:8B
            X509v3 Authority Key Identifier:
                keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:89:59:01:f9:5d:df:6e:94:04:ca:db:6a:e6:f0:2f:90:2b:
         17:2c:28:47:07:db:fc:0b:b1:a7:ba:18:ca:fd:cf:e3:45:7f:
         65:69:5f:03:53:4a:52:36:17:40:6a:fc:96:dc:4d:57:95:68:
         97:3c:e6:03:ec:f2:2e:9d:cd:f0:29:2d:3e:24:18:b8:4e:f5:
         72:70:3c:cd:80:7a:6e:22:0a:57:4d:8c:61:ce:83:11:27:f9:
         40:3b:a7:5b:84:06:38:94:53:49:55:df:bd:e3:92:1c:b1:62:
         a7:7b:e8:8f:f5:b0:8c:bb:71:1b:b2:dd:72:b7:86:7a:5a:e2:
         67:78:23:7b:de:3c:e4:83:e8:56:25:fa:5c:d7:b1:87:0f:a1:
         31:ea:02:a8:a4:13:85:df:cc:29:c7:a1:f1:ec:36:5b:f5:d7:
         29:80:0c:0f:a2:4e:5d:54:62:dc:5c:42:f9:43:99:2d:d4:14:
         66:be:9c:1e:7b:a0:b4:8f:09:82:fc:7d:62:6f:64:4b:6d:9f:
         85:c5:05:1c:3c:e3:fe:dc:c2:f5:9d:05:78:6e:98:1e:92:34:
         4d:4e:98:65:a2:6c:5c:3e:89:f4:27:b1:f5:9a:b5:8b:c4:87:
         82:98:8c:b6:da:8a:6e:0d:f4:fe:ba:cc:29:43:3b:f4:65:a3:
         a4:13:1a:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdPw6zsuIwyYhUvwueGf9y0tC2zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE
OUZBOEJEQjAeFw0yNjAxMjQyMjU3MjlaFw0yNjAxMjYwMjQ0MjlaMDMxMTAvBgNV
BAMTKDNCRjQ0OTkxMjUwMDcxRTNGMTJFRjkwRkREMUQzMzQ0NUQxQjU1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopi4l62tJbvch0LOM0od/ZniU
Hs/Q5jtoi03KFyJoQuXCZeTCaK8edwvGl8rVulC9yPdSqUi22ozPFN9MM2DE02G7
pFBYgr7H47jDvnvpAjsToU79egm1AjR8GScqxbbG2R3cM4sqv8waO80PrhoBCI0U
Mm/r1VAnReQZ8ZN7u5weRGCHOltxDDsYdWsKU+yXuTKxvQA0UID0lVxypFzRnSJC
bfv3OFgNq19QCrrp/FWXnnPlnDnU+Bm2v3twaOJClyHtjqbyk8+5HdVVCsb8I6+T
qQmlYv9YmuRt8VLqKCJvSFh97F3eBWaBUQmw8+JoTrn+ILkIhxPJhWJjk6k7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUO/RJkSUAcePxLvkP3R0zRF0bVYswHwYDVR0j
BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv
dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD
NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E
OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxYlZAfld326UBMrbaubwL5ArFywoRwfb/Auxp7oYyv3P40V/ZWlfA1NKUjYX
QGr8ltxNV5VolzzmA+zyLp3N8CktPiQYuE71cnA8zYB6biIKV02MYc6DESf5QDun
W4QGOJRTSVXfveOSHLFip3voj/WwjLtxG7LdcreGelriZ3gje9485IPoViX6XNex
hw+hMeoCqKQThd/MKceh8ew2W/XXKYAMD6JOXVRi3FxC+UOZLdQUZr6cHnugtI8J
gvx9Ym9kS22fhcUFHDzj/tzC9Z0FeG6YHpI0TU6YZaJsXD6J9Cex9Zq1i8SHgpiM
ttqKbg30/rrMKUM79GWjpBMarg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:00 2026 by rpki-client