This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
File:                     3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json)
Hash identifier:          7LVtlL1YNif8+zFmbvcwccxU1a0BvGoVDKMdSVY1LZY=
Subject key identifier:   D3:77:69:78:2B:D1:CF:0A:DB:5D:25:CE:6A:61:36:E8:B0:FD:3D:64
Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07
Certificate issuer:       /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
Certificate serial:       6851C7D090884A92E893426B6A7FCF1A0B078268
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
Manifest number:          013E
Signing time:             Sun 25 Jan 2026 04:35:20 +0000
Manifest this update:     Sun 25 Jan 2026 04:30:20 +0000
Manifest next update:     Mon 26 Jan 2026 06:02:20 +0000
Files and hashes:         1: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=)
                          2: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: ++EEXjGgot/DIKGEgVZdqGFdl9zYhU6oPYP5Xrrqrr0=)
                          3: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl
                          rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:51:c7:d0:90:88:4a:92:e8:93:42:6b:6a:7f:cf:1a:0b:07:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
        Validity
            Not Before: Jan 25 04:30:20 2026 GMT
            Not After : Jan 26 06:02:20 2026 GMT
        Subject: CN=D37769782BD1CF0ADB5D25CE6A6136E8B0FD3D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:fb:bc:b5:95:4d:b4:fa:1a:1e:06:40:10:
                    2b:d3:84:33:1e:6b:ad:3a:b5:65:06:dd:c5:c6:83:
                    22:d4:4d:fe:e2:48:b3:e3:b3:5a:85:ca:39:39:d9:
                    cd:9f:44:74:0b:6b:4d:85:92:28:41:04:b3:81:9b:
                    dc:ce:a7:42:73:82:76:6c:a6:54:88:5e:c2:93:2b:
                    0f:f0:8d:ff:50:c8:00:0c:cd:0d:e5:b2:ca:f4:59:
                    66:eb:c0:52:44:77:27:44:e5:9e:46:52:da:8d:65:
                    9e:43:94:cc:35:90:22:2f:44:54:c1:a3:2b:ce:b2:
                    8d:e9:dc:7d:2a:25:6b:88:72:a5:38:7f:0c:c5:dd:
                    9a:da:6c:00:de:d1:58:1b:15:e7:5c:de:75:8e:8d:
                    ea:51:48:1e:ba:e7:ed:41:59:37:82:1f:af:c7:9f:
                    ab:6f:02:63:b6:4d:af:c5:c3:8a:4e:18:28:9e:61:
                    f0:12:e2:01:57:f7:e2:0f:73:e4:aa:3c:bd:a6:01:
                    8f:3a:6e:09:02:e9:71:74:54:ab:64:71:08:2d:88:
                    96:a4:6d:9f:10:39:d6:75:7f:39:9d:87:a5:bd:fb:
                    f8:be:b1:26:c5:40:d7:b9:b5:7a:4e:ee:e8:34:3c:
                    83:e5:d6:5c:02:cd:b5:e0:62:9e:ec:34:88:b0:0d:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:69:78:2B:D1:CF:0A:DB:5D:25:CE:6A:61:36:E8:B0:FD:3D:64
            X509v3 Authority Key Identifier:
                keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:66:ff:63:73:ba:ab:18:5a:eb:b6:e7:d6:ef:ae:ee:ea:0e:
         8c:73:28:03:bc:8f:38:51:15:8d:32:a4:4c:d0:2b:fe:06:79:
         ec:02:9f:0b:43:a0:8f:67:53:73:42:7c:26:62:91:bf:c0:31:
         5d:ae:63:3a:f5:1d:43:02:2a:2e:2b:93:c9:cf:ea:4a:b1:88:
         2b:60:a8:2b:d8:f1:be:7d:c0:6c:1d:75:3f:20:07:2e:2e:3c:
         33:1c:a1:0e:4f:7f:d7:97:6b:76:f3:33:ed:39:84:ae:a4:00:
         9f:85:b5:ef:d2:4d:24:03:af:dd:5c:ec:e7:67:19:57:27:28:
         d8:65:40:26:0c:3f:ce:27:82:6b:73:d9:be:1e:21:56:71:2f:
         86:b0:a7:40:37:15:6c:1f:c4:45:2d:15:6b:57:ed:d5:0a:c1:
         7a:bb:ac:5e:ea:f5:ee:6d:48:51:1b:f0:7b:5e:b0:ed:7a:33:
         c9:c5:56:af:68:c1:96:83:a4:94:4d:30:2a:62:18:8c:b5:65:
         e9:81:9b:a1:3b:6c:f9:ad:6a:88:3a:10:96:98:71:e6:fc:82:
         d7:ca:86:3d:2e:22:5b:3c:4a:12:f1:ba:7d:c3:54:fe:8a:60:
         f4:6e:09:f8:05:87:7b:6b:99:0b:75:f3:4f:e5:ac:db:e6:60:
         86:7d:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:00 2026 by rpki-client