This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json)
Hash identifier:          SJskNs/Ho/JPFKDtkukfjIluMIbD9HFqHQfmbfcuN24=
Subject key identifier:   26:DF:1F:10:7F:A4:2D:63:63:D5:86:A4:E5:9A:08:D3:CC:82:EC:DE
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Certificate issuer:       /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial:       0417A43F26E384863A7344405AF83CFD57BC8D25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
Manifest number:          01E0
Signing time:             Sun 25 Jan 2026 13:18:38 +0000
Manifest this update:     Sun 25 Jan 2026 13:13:38 +0000
Manifest next update:     Mon 26 Jan 2026 15:44:38 +0000
Files and hashes:         1: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: zLfuCXZBi2nWdOOyG+zGt+cSVyUYBRH1EQR+N0EQYZ4=)
                          2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: ogHN7ytYfmQoq5Esdtomnf2oLkt4PILZI+7SJcKDcr8=)
                          3: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: kipjBJ09zZtwvC7nmczGaoX100huYmXa/+NwcxArDt4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
                          rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:17:a4:3f:26:e3:84:86:3a:73:44:40:5a:f8:3c:fd:57:bc:8d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Validity
            Not Before: Jan 25 13:13:38 2026 GMT
            Not After : Jan 26 15:44:38 2026 GMT
        Subject: CN=26DF1F107FA42D6363D586A4E59A08D3CC82ECDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:82:04:47:72:09:81:32:b4:f9:a2:40:98:
                    1f:68:e2:2b:1d:19:85:3a:6c:9e:67:09:b6:3c:7f:
                    07:27:2b:a1:d4:96:a0:e6:da:f5:9c:c9:86:c3:6c:
                    d6:a6:f1:8e:5a:62:84:d5:aa:97:14:20:79:76:88:
                    0c:c7:7a:ee:08:59:0b:2f:de:55:f6:9a:07:cf:59:
                    91:75:74:a3:88:0f:10:d4:b3:80:a3:39:c2:3a:1b:
                    52:88:9f:9a:d3:a4:cf:90:85:24:e8:1d:25:37:81:
                    31:27:e5:0b:e9:d2:e6:7d:d1:39:1d:ae:9a:91:f9:
                    64:91:12:af:6d:8d:6e:17:db:aa:3e:a9:5e:b7:6d:
                    b2:da:ae:92:59:cb:24:e1:06:65:f1:c5:10:60:cc:
                    ba:7b:05:b7:30:c2:13:0d:c3:17:7b:4a:f1:5f:2b:
                    9f:64:90:3c:54:c2:17:d7:08:cf:01:49:c6:4b:d1:
                    ca:d5:be:e9:ae:91:16:d0:04:a3:46:26:19:93:f0:
                    01:0b:94:0c:49:9c:c2:64:7f:0e:ff:2b:53:02:09:
                    10:42:0d:2e:03:c3:1e:2c:31:17:c4:32:e4:65:ce:
                    86:f5:ce:8d:14:5c:1b:5f:c7:ba:e2:3b:58:b7:85:
                    5f:a8:bb:b9:b0:81:cd:f2:32:40:d5:ce:90:7e:c2:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:1F:10:7F:A4:2D:63:63:D5:86:A4:E5:9A:08:D3:CC:82:EC:DE
            X509v3 Authority Key Identifier:
                keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:c8:53:4e:fd:d6:64:5c:85:8e:8d:9c:18:11:85:74:82:
         cf:37:99:4e:8e:5a:ce:21:f5:b1:f7:d1:1c:5e:2a:f6:1f:9a:
         84:41:b0:7c:62:18:4a:4f:7c:52:2f:74:35:7e:77:bb:85:67:
         06:0c:3e:7d:ca:11:0b:02:6a:91:75:49:97:a3:39:80:83:8f:
         6c:b7:72:d7:2b:09:93:12:0c:ff:7f:01:63:50:7c:e9:86:b4:
         fa:1f:7b:99:a0:82:61:06:84:c4:7e:29:03:bc:63:01:32:5e:
         cb:f6:85:58:d6:a8:c9:4a:c2:52:20:a0:be:b5:44:46:14:2b:
         08:c4:85:35:30:7e:a2:0f:65:0b:92:5d:ac:18:a2:f7:49:d4:
         74:59:37:d7:47:fe:26:43:9b:55:4a:14:9d:38:82:96:71:a7:
         46:92:0c:87:31:e0:07:64:c3:84:b7:e4:d2:2c:54:f5:ac:04:
         a6:7e:4f:8f:e3:b0:7a:4a:84:1b:41:3a:2b:96:d4:4f:d8:b9:
         f9:49:60:95:a5:6c:cc:cc:f6:61:a4:4d:7a:f7:3a:42:22:4e:
         27:0c:05:36:69:55:50:a3:10:29:aa:00:59:03:2b:74:65:b2:
         24:52:47:88:77:25:94:f7:6e:69:0a:e0:11:fc:66:55:18:13:
         e8:05:6c:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBBekPybjhIY6c0RAWvg8/Ve8jSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy
QjBDOTFDODAeFw0yNjAxMjUxMzEzMzhaFw0yNjAxMjYxNTQ0MzhaMDMxMTAvBgNV
BAMTKDI2REYxRjEwN0ZBNDJENjM2M0Q1ODZBNEU1OUEwOEQzQ0M4MkVDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEoIER3IJgTK0+aJAmB9o4isd
GYU6bJ5nCbY8fwcnK6HUlqDm2vWcyYbDbNam8Y5aYoTVqpcUIHl2iAzHeu4IWQsv
3lX2mgfPWZF1dKOIDxDUs4CjOcI6G1KIn5rTpM+QhSToHSU3gTEn5Qvp0uZ90Tkd
rpqR+WSREq9tjW4X26o+qV63bbLarpJZyyThBmXxxRBgzLp7BbcwwhMNwxd7SvFf
K59kkDxUwhfXCM8BScZL0crVvumukRbQBKNGJhmT8AELlAxJnMJkfw7/K1MCCRBC
DS4Dwx4sMRfEMuRlzob1zo0UXBtfx7riO1i3hV+ou7mwgc3yMkDVzpB+wh+HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJt8fEH+kLWNj1Yak5ZoI08yC7N4wHwYDVR0j
BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw
WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG
QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z
RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATDLIU0791mRchY6NnBgRhXSCzzeZTo5aziH1sffRHF4q9h+ahEGwfGIYSk98
Ui90NX53u4VnBgw+fcoRCwJqkXVJl6M5gIOPbLdy1ysJkxIM/38BY1B86Ya0+h97
maCCYQaExH4pA7xjATJey/aFWNaoyUrCUiCgvrVERhQrCMSFNTB+og9lC5JdrBii
90nUdFk310f+JkObVUoUnTiClnGnRpIMhzHgB2TDhLfk0ixU9awEpn5Pj+OwekqE
G0E6K5bUT9i5+UlglaVszMz2YaRNevc6QiJOJwwFNmlVUKMQKaoAWQMrdGWyJFJH
iHcllPduaQrgEfxmVRgT6AVseQ==
-----END CERTIFICATE-----