This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
File:                     3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json)
Hash identifier:          RPoonj+bUScQZkamEb35PtezVbeOAYGRWvSLj5wT4d4=
Subject key identifier:   28:CA:4D:0D:D8:79:F5:DE:26:9D:F4:A2:63:F3:25:71:D8:EE:41:8F
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       3D4FB2553604280949BD663082FADE50AB1CD765
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
Manifest number:          AE
Signing time:             Sun 25 Jan 2026 15:14:00 +0000
Manifest this update:     Sun 25 Jan 2026 15:09:00 +0000
Manifest next update:     Mon 26 Jan 2026 16:47:00 +0000
Files and hashes:         1: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: VE5/2XLlaS7OKsEuLbeQpdgqC5qi4Ejx+hZQNHE8dL8=)
                          2: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=)
                          3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=)
                          4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4f:b2:55:36:04:28:09:49:bd:66:30:82:fa:de:50:ab:1c:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Jan 25 15:09:00 2026 GMT
            Not After : Jan 26 16:47:00 2026 GMT
        Subject: CN=28CA4D0DD879F5DE269DF4A263F32571D8EE418F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:b9:28:9d:27:0d:ef:48:71:9f:61:40:f3:
                    43:96:e0:f8:02:49:af:82:9e:da:a2:95:c1:08:20:
                    8a:e0:ce:17:14:83:a1:a2:47:29:dc:96:10:ce:4d:
                    1a:2a:d7:e2:59:74:96:7c:da:d0:a2:66:c1:22:94:
                    f2:bd:b8:e1:fa:86:4a:cb:ec:5c:0b:22:ce:3b:e1:
                    92:74:b9:a8:c8:69:58:91:88:eb:9e:6c:ff:bd:2c:
                    2d:7e:c5:e4:db:63:41:fa:22:82:0e:a1:d3:8f:9f:
                    62:36:3f:ea:21:53:93:91:b4:94:41:2c:f8:1a:8c:
                    5e:8f:d6:87:35:2d:6e:64:3c:91:03:66:8a:19:d7:
                    2f:7f:07:9d:38:ad:bc:44:ad:82:05:3b:e7:f2:ca:
                    06:c4:03:31:8f:6c:4a:57:8a:29:85:d7:77:3f:09:
                    db:6b:ee:1d:35:d6:31:55:df:29:1c:eb:45:b8:64:
                    f1:15:b9:e2:03:96:93:1a:8c:8f:c5:9a:bf:6c:16:
                    bb:ea:41:b5:a6:73:09:f9:0e:54:7b:60:d5:fc:9e:
                    23:aa:22:2a:76:1b:b2:e3:d3:d5:a0:29:75:56:c6:
                    88:fe:f4:e3:ff:d2:1b:f4:e5:dc:3c:b2:bc:8a:1b:
                    2b:a8:06:c6:2e:14:a7:47:a9:a7:1b:2a:0d:0d:3a:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CA:4D:0D:D8:79:F5:DE:26:9D:F4:A2:63:F3:25:71:D8:EE:41:8F
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:dc:31:7b:cb:ca:09:2f:cd:73:7e:02:9c:02:da:89:59:
         be:37:99:c9:cf:1b:5b:6d:21:be:5f:cd:cf:a3:a6:21:70:e5:
         29:60:62:c5:c0:c5:15:c8:e4:82:91:fd:47:10:c0:6b:d2:46:
         74:8a:bf:63:66:8d:6c:be:6f:3d:39:53:4b:00:1a:5e:8c:b5:
         c3:c9:dd:de:d5:0d:57:8c:4c:8b:e1:39:1b:16:3e:55:88:b4:
         bb:e6:33:82:b9:51:8e:e7:42:6d:e5:b7:48:e8:e3:38:bf:7a:
         3e:37:06:01:35:a3:92:e7:60:0f:60:59:89:d1:c1:75:ac:13:
         b5:6d:71:8a:54:da:91:7d:92:6d:cf:64:8f:b3:8c:ef:0a:a0:
         cb:00:5c:23:4e:1e:a0:6c:66:1b:5f:f4:36:12:42:ad:8c:47:
         85:bd:cf:81:00:08:ed:b7:1b:13:50:b1:c5:3c:6a:f1:11:3b:
         ea:e9:60:1b:0b:35:c9:71:71:8d:69:a8:ba:9e:70:6b:c6:8b:
         1f:c2:55:9c:81:22:40:9c:e1:b9:47:3a:80:71:9c:03:97:b8:
         28:57:06:81:50:5b:b6:2e:b0:a3:37:15:5f:6d:de:f3:2e:4e:
         ae:61:39:ca:b2:eb:91:25:45:e4:86:46:e1:e6:6e:b2:44:24:
         fd:3c:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:57:19 2026 by rpki-client