This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
File:                     E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft (raw, json)
Hash identifier:          0ziHbe3qTN2+eTk7o+FPDgjIkE/vM8acT/8c8hrnOrI=
Subject key identifier:   A7:63:E1:E4:A6:DB:E2:00:9E:0C:00:DE:9C:D6:F6:B6:E4:BA:06:37
Authority key identifier: E1:8F:FB:96:2D:9B:CF:FF:4E:28:73:AD:BC:C5:FB:3F:4A:F1:06:CE
Certificate issuer:       /CN=E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE
Certificate serial:       6637422D3D99874E8B09F20FF378A441695301AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
Manifest number:          0C
Signing time:             Sun 25 Jan 2026 17:25:03 +0000
Manifest this update:     Sun 25 Jan 2026 17:20:03 +0000
Manifest next update:     Mon 26 Jan 2026 20:09:03 +0000
Files and hashes:         1: E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl (hash: 3HjkFjPd7laA1VvreDJtjqadjIv3j9wfFfdfMQNi9AY=)
                          2: 323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (hash: 3hL6S2ln6vG5GPJOifWi05lt5MbhSTG29ZC8T5GbK90=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:37:42:2d:3d:99:87:4e:8b:09:f2:0f:f3:78:a4:41:69:53:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE
        Validity
            Not Before: Jan 25 17:20:03 2026 GMT
            Not After : Jan 26 20:09:03 2026 GMT
        Subject: CN=A763E1E4A6DBE2009E0C00DE9CD6F6B6E4BA0637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:a4:a0:2c:8e:6a:af:21:a5:1a:82:9e:78:
                    0e:a8:c7:9a:f4:4a:7b:49:5f:2a:b9:19:a0:cd:b9:
                    7f:bd:ad:a6:a2:dc:1a:cd:e0:b5:50:0c:7a:c0:36:
                    9f:3d:b7:6e:1e:fb:5a:a1:37:3a:b0:cb:a3:f9:f5:
                    cf:d0:30:9d:d2:05:3a:a4:54:7a:7b:79:55:41:f7:
                    d1:4f:9f:15:0b:0a:41:c8:20:f1:8b:f3:3e:f9:86:
                    06:d6:48:52:23:0c:d4:95:fe:6f:f1:42:6f:31:e7:
                    9b:c7:7d:28:64:f7:bd:d7:d2:44:4c:93:42:98:53:
                    b2:79:5c:f6:d8:29:37:36:6a:a2:43:01:61:76:64:
                    95:3f:67:76:dd:4d:ee:31:7f:0b:bc:27:79:92:99:
                    1d:d3:e0:0f:51:61:01:30:ea:55:e5:22:f5:d9:ca:
                    cb:c5:45:e0:0c:51:02:1e:ee:b0:35:84:4d:c7:07:
                    be:da:1b:16:81:7f:bf:b7:2c:28:c5:f2:ea:34:04:
                    5a:3b:d6:ee:9d:28:77:1c:6b:ca:ea:5b:d6:b6:4a:
                    c0:cc:1d:74:ca:57:99:10:a2:ac:21:c0:bd:9b:91:
                    f9:a6:35:2b:48:85:6a:dd:70:3f:22:69:d3:36:f8:
                    fc:22:7e:ae:0d:68:c7:cb:2b:80:f4:66:f1:fb:a0:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:63:E1:E4:A6:DB:E2:00:9E:0C:00:DE:9C:D6:F6:B6:E4:BA:06:37
            X509v3 Authority Key Identifier:
                keyid:E1:8F:FB:96:2D:9B:CF:FF:4E:28:73:AD:BC:C5:FB:3F:4A:F1:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/E18FFB962D9BCFFF4E2873ADBCC5FB3F4AF106CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:87:69:22:5c:d1:19:bd:0b:08:29:d2:ea:75:8e:40:3f:
         a0:b7:fd:75:1e:d9:2f:75:fd:70:8c:a2:15:36:b1:e5:1a:b3:
         2d:d8:83:8c:65:24:0a:14:6d:e2:15:ad:6a:f4:9e:2e:d7:2d:
         96:17:92:2d:66:40:19:13:fc:e5:85:ea:e4:23:48:da:39:6d:
         68:ad:7a:e8:4e:63:f8:cc:4e:98:a6:6b:9b:98:89:2e:50:21:
         d9:74:29:a3:44:9a:84:57:d5:de:cd:5a:ef:08:24:ae:99:92:
         06:ac:56:39:e6:0d:77:8f:c9:62:ea:69:df:66:13:01:91:47:
         23:9e:a0:81:54:b8:40:66:bf:bc:95:7f:94:b2:cc:2d:0b:70:
         a1:dc:c8:0c:51:de:a5:1f:3f:db:59:b9:db:90:9a:5e:f9:42:
         d6:bc:8e:db:d6:8c:57:ff:9c:21:48:b6:02:2d:24:90:b2:a7:
         16:17:c4:79:f7:c5:1f:68:27:c3:2f:5b:f1:03:4e:1d:c3:72:
         dd:50:4c:bb:8a:67:e1:6e:7f:4c:a3:8f:8f:97:8d:28:7b:76:
         e2:45:d5:90:3b:cb:e0:60:05:01:57:2a:23:4a:4e:7f:61:24:
         a7:05:c2:8c:31:e3:05:7f:23:9e:49:82:8c:16:62:c3:7a:08:
         2d:86:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----