This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
File:                     1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft (raw, json)
Hash identifier:          AIzmxsutmVermIsAGREbP8DRaFpdNZc5EywyIVFqPGI=
Subject key identifier:   EE:BE:E2:B0:6C:DF:F9:6D:86:C5:92:93:77:9C:5F:0B:C0:CA:F2:84
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       3E8AEAEA5551FE3BCB1E21EE9E68AD5899EE0EFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
Manifest number:          C3
Signing time:             Sat 24 Jan 2026 20:11:21 +0000
Manifest this update:     Sat 24 Jan 2026 20:06:21 +0000
Manifest next update:     Sun 25 Jan 2026 21:27:21 +0000
Files and hashes:         1: 323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (hash: x87eBH+DzA1bwStUsY3ov3cCPNX6b/Fmr9pOc9L8pws=)
                          2: 3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (hash: NFOlwNRCMdO9B97BInd7TuPA7qaYKAf/pG9TnCSjm5w=)
                          3: 1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl (hash: Txrmn8BBFXJBnXE6ibSJMM+PEfig/0HyTh092x+oeDU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 21:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:ea:ea:55:51:fe:3b:cb:1e:21:ee:9e:68:ad:58:99:ee:0e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Jan 24 20:06:21 2026 GMT
            Not After : Jan 25 21:27:21 2026 GMT
        Subject: CN=EEBEE2B06CDFF96D86C59293779C5F0BC0CAF284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:c3:96:ad:c0:88:0e:16:bd:28:7b:0e:45:
                    6b:27:07:28:47:08:69:f3:a2:29:dc:26:a8:48:44:
                    2c:57:de:de:15:1d:bb:52:37:84:51:54:db:f2:fb:
                    39:e7:f1:c0:05:b3:a4:6b:88:df:25:67:41:73:ab:
                    d7:4b:08:9f:5c:07:72:04:26:f0:fa:a1:72:45:a3:
                    ca:9d:35:32:52:62:17:4e:6a:09:31:dc:9b:38:d2:
                    c2:6d:a3:26:5b:72:8c:ac:78:f7:71:1b:0e:f0:45:
                    69:32:ed:00:94:09:d6:06:6d:0d:2d:dc:a6:ec:9c:
                    a1:bb:86:50:f3:25:66:a8:10:3b:3b:cb:bd:49:12:
                    5b:b0:b9:e0:ef:8a:79:85:2a:73:62:a2:7d:b9:d9:
                    f8:06:27:c8:56:d9:a0:f3:1f:9c:25:67:af:f3:99:
                    c3:64:63:bc:b4:b9:a9:54:85:43:6b:91:be:fe:17:
                    9e:68:a3:9f:2b:e2:c6:4b:ab:af:3d:e3:fe:6f:37:
                    bb:e6:14:fb:6e:1a:90:47:e3:76:1e:36:28:a6:ed:
                    dd:b2:30:98:07:aa:c5:0c:ee:54:2d:3f:4e:59:dc:
                    20:c8:1f:7a:fa:74:ba:c2:2d:f4:7f:38:a0:07:b9:
                    b7:dd:64:52:0a:1e:6b:76:0f:31:43:fb:6a:c5:1e:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:E2:B0:6C:DF:F9:6D:86:C5:92:93:77:9C:5F:0B:C0:CA:F2:84
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:19:b2:d3:d3:83:93:51:49:3e:fa:bc:30:3d:d7:21:4b:ab:
         b9:93:1e:1d:f8:c0:54:f6:58:8d:c6:70:f5:c3:11:0c:5b:45:
         40:11:56:83:77:fc:57:11:7a:ff:da:5d:ae:31:29:c0:3b:aa:
         49:a1:1b:9b:20:3f:37:71:d8:61:60:b1:ac:06:13:2e:32:04:
         f7:db:6c:a0:5e:f6:ee:97:a1:0e:e1:6e:87:89:17:ec:5f:83:
         ae:40:5d:a9:5c:34:f3:cc:00:c6:5f:ab:79:c6:43:47:4a:95:
         d1:55:10:89:d0:11:7a:86:78:67:10:36:af:02:f2:8f:fe:39:
         fc:8c:6c:15:5c:26:e4:93:45:9c:31:70:4b:03:d6:cc:d0:de:
         77:57:1f:1d:0e:0f:41:aa:32:42:83:61:26:94:02:cd:8e:63:
         2b:81:66:d4:af:c3:17:80:e7:c5:48:68:c6:2c:2f:2b:8e:6c:
         f5:22:a3:2b:ef:37:14:9e:39:ca:75:c2:ed:7a:ff:f8:96:45:
         02:44:83:26:af:96:0c:ea:02:56:4d:a3:00:49:7c:f9:2e:84:
         e6:df:ac:95:dd:08:90:40:fa:ef:b7:d8:32:97:6b:db:b2:60:
         c9:cb:3e:a8:01:ae:8d:08:f1:97:04:e0:a7:3e:4f:9d:43:c5:
         b4:8e:ce:aa
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPorq6lVR/jvLHiHunmitWJnuDvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcy
Qjg5MTgxQjAeFw0yNjAxMjQyMDA2MjFaFw0yNjAxMjUyMTI3MjFaMDMxMTAvBgNV
BAMTKEVFQkVFMkIwNkNERkY5NkQ4NkM1OTI5Mzc3OUM1RjBCQzBDQUYyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4sOWrcCIDha9KHsORWsnByhH
CGnzoincJqhIRCxX3t4VHbtSN4RRVNvy+znn8cAFs6RriN8lZ0Fzq9dLCJ9cB3IE
JvD6oXJFo8qdNTJSYhdOagkx3Js40sJtoyZbcoysePdxGw7wRWky7QCUCdYGbQ0t
3KbsnKG7hlDzJWaoEDs7y71JEluwueDvinmFKnNion252fgGJ8hW2aDzH5wlZ6/z
mcNkY7y0ualUhUNrkb7+F55oo58r4sZLq6894/5vN7vmFPtuGpBH43YeNiim7d2y
MJgHqsUM7lQtP05Z3CDIH3r6dLrCLfR/OKAHubfdZFIKHmt2DzFD+2rFHnTzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU7r7isGzf+W2GxZKTd5xfC8DK8oQwHwYDVR0j
BBgwFoAUGjhL+ohg1Tq87byKkbN6lyuJGBswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9taEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNa
LzEvMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcyQjg5MTgxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTM4NEJGQTg4NjBENTNBQkNF
REJDOEE5MUIzN0E5NzJCODkxODFCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL21o
R0VIRW9GVEZlM05jY1VGRjQzekFpMUFwSGo3ZVdDdjVyYmF5WTNCU1ovMS8xQTM4
NEJGQTg4NjBENTNBQkNFREJDOEE5MUIzN0E5NzJCODkxODFCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Mxmy09ODk1FJPvq8MD3XIUuruZMeHfjAVPZYjcZw9cMRDFtFQBFWg3f8VxF6/9pd
rjEpwDuqSaEbmyA/N3HYYWCxrAYTLjIE99tsoF727pehDuFuh4kX7F+DrkBdqVw0
88wAxl+recZDR0qV0VUQidAReoZ4ZxA2rwLyj/45/IxsFVwm5JNFnDFwSwPWzNDe
d1cfHQ4PQaoyQoNhJpQCzY5jK4Fm1K/DF4DnxUhoxiwvK45s9SKjK+83FJ45ynXC
7Xr/+JZFAkSDJq+WDOoCVk2jAEl8+S6E5t+sld0IkED677fYMpdr27Jgycs+qAGu
jQjxlwTgpz5PnUPFtI7Oqg==
-----END CERTIFICATE-----