This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json)
Hash identifier:          WYGL4cQqajiiugI6hhXD1x/76ZFQxCc1xketpvzv69w=
Subject key identifier:   92:B3:9A:A0:8E:DB:F1:14:C0:37:12:9A:02:6C:4E:29:F0:17:ED:54
Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Certificate issuer:       /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
Certificate serial:       7F4C1E45B48377852EEF4BADCDE72D6599C6453A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
Manifest number:          0161
Signing time:             Sun 21 Dec 2025 21:27:42 +0000
Manifest this update:     Sun 21 Dec 2025 21:22:42 +0000
Manifest next update:     Tue 23 Dec 2025 00:53:42 +0000
Files and hashes:         1: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=)
                          2: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: 0OUAvFOJql1o2YtpRC2ULI3JpUZnNZWNRua7Qv/QWUc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 00:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4c:1e:45:b4:83:77:85:2e:ef:4b:ad:cd:e7:2d:65:99:c6:45:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Validity
            Not Before: Dec 21 21:22:42 2025 GMT
            Not After : Dec 23 00:53:42 2025 GMT
        Subject: CN=92B39AA08EDBF114C037129A026C4E29F017ED54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:c7:c8:9e:a0:70:cc:9f:18:5e:ef:15:56:
                    7a:46:49:b6:05:3c:e7:0e:35:ee:26:1f:84:57:dc:
                    f5:12:39:e0:f8:ca:47:c0:2a:93:58:35:a6:e4:4d:
                    6f:f8:f6:5d:fb:07:23:a0:03:a9:82:d7:b0:c9:d3:
                    88:08:56:41:0b:70:3d:13:92:c5:ed:2e:71:a5:61:
                    74:a1:50:37:63:d2:49:42:74:dc:ec:70:fc:a1:bc:
                    84:00:b1:db:92:65:03:31:1e:fa:b4:21:90:37:45:
                    e0:54:b3:cb:d2:3b:3a:28:e0:9a:c5:70:08:dd:f9:
                    8e:5a:b7:47:af:d3:61:62:18:0a:01:ba:0a:1a:6c:
                    af:a1:90:3a:17:39:e7:c6:d2:5e:e0:46:b0:ba:0d:
                    18:c7:4b:c6:46:b7:ef:2b:55:06:d3:64:13:8c:5e:
                    1a:cf:d7:cd:b9:da:bf:ea:90:a9:3e:6f:fb:2e:65:
                    69:53:46:08:8e:99:66:ff:0f:62:57:a0:f9:4c:84:
                    e0:69:ef:63:36:b9:5c:a3:1e:8f:c4:72:c6:47:c0:
                    5e:2b:e0:f6:00:e3:2f:9a:3b:8b:80:31:46:80:47:
                    a2:89:02:f4:2a:8d:13:9f:41:6b:a6:64:a5:29:ff:
                    ec:11:5c:89:fe:ab:1f:1e:df:1c:46:63:0a:6a:92:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B3:9A:A0:8E:DB:F1:14:C0:37:12:9A:02:6C:4E:29:F0:17:ED:54
            X509v3 Authority Key Identifier:
                keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:0a:97:e2:2d:9c:87:c3:bd:81:45:0b:65:2e:62:4e:48:
         cf:36:46:e8:d5:b8:a2:6b:9e:a6:56:3b:bd:52:3f:16:f9:4c:
         2a:ac:11:71:24:42:cd:4a:1c:d6:b9:ae:25:9c:fb:0e:db:ee:
         05:f6:5f:2c:7f:3b:d6:17:43:43:94:ae:c4:63:96:20:2a:dd:
         b3:69:5b:42:94:1b:5a:f6:7f:29:eb:7b:32:15:36:f5:4d:00:
         f5:f9:51:76:2b:e3:8c:8d:b0:d7:ca:eb:e5:41:08:36:6a:1d:
         d2:17:f2:f5:0b:e9:ea:77:1f:44:2e:1a:af:c5:78:b1:60:f5:
         31:94:cf:46:d9:d2:50:49:7f:2b:98:36:d4:12:ac:4c:7d:0d:
         a8:8b:fb:5f:79:a3:9e:4a:8a:ef:0f:ad:6c:de:71:27:36:e2:
         8c:7b:fa:df:1a:c0:d9:32:9e:7d:98:81:4a:d6:9e:1b:ca:98:
         c6:09:2e:02:f2:ea:a3:90:96:ad:eb:68:f8:27:13:94:48:e1:
         3a:6c:be:ce:26:95:1e:3c:d9:70:95:d5:1c:84:53:48:60:23:
         e7:49:b3:9a:ea:ba:65:b6:07:3d:c2:cc:2a:29:b2:98:b4:cd:
         ba:d8:13:44:18:e4:7b:15:5e:36:89:bb:b3:5c:b7:44:f6:b9:
         49:40:d5:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf0weRbSDd4Uu70utzectZZnGRTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3
RDhDQ0Q0MTAeFw0yNTEyMjEyMTIyNDJaFw0yNTEyMjMwMDUzNDJaMDMxMTAvBgNV
BAMTKDkyQjM5QUEwOEVEQkYxMTRDMDM3MTI5QTAyNkM0RTI5RjAxN0VENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYj8fInqBwzJ8YXu8VVnpGSbYF
POcONe4mH4RX3PUSOeD4ykfAKpNYNabkTW/49l37ByOgA6mC17DJ04gIVkELcD0T
ksXtLnGlYXShUDdj0klCdNzscPyhvIQAsduSZQMxHvq0IZA3ReBUs8vSOzoo4JrF
cAjd+Y5at0ev02FiGAoBugoabK+hkDoXOefG0l7gRrC6DRjHS8ZGt+8rVQbTZBOM
XhrP18252r/qkKk+b/suZWlTRgiOmWb/D2JXoPlMhOBp72M2uVyjHo/EcsZHwF4r
4PYA4y+aO4uAMUaAR6KJAvQqjROfQWumZKUp/+wRXIn+qx8e3xxGYwpqkgzjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkrOaoI7b8RTANxKaAmxOKfAX7VQwHwYDVR0j
BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI
N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF
QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z
QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjRIKl+ItnIfDvYFFC2UuYk5IzzZG6NW4omueplY7vVI/FvlMKqwRcSRCzUoc
1rmuJZz7DtvuBfZfLH871hdDQ5SuxGOWICrds2lbQpQbWvZ/Ket7MhU29U0A9flR
divjjI2w18rr5UEINmod0hfy9Qvp6ncfRC4ar8V4sWD1MZTPRtnSUEl/K5g21BKs
TH0NqIv7X3mjnkqK7w+tbN5xJzbijHv63xrA2TKefZiBStaeG8qYxgkuAvLqo5CW
reto+CcTlEjhOmy+ziaVHjzZcJXVHIRTSGAj50mzmuq6ZbYHPcLMKimymLTNutgT
RBjkexVeNom7s1y3RPa5SUDVPg==
-----END CERTIFICATE-----