This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File:                     31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier:          hd2GOHWECTPCzqynWM1DQsIbolwd3fQFAAv5rgMKrk0=
Subject key identifier:   31:86:A1:D7:FB:EE:BF:FD:B0:53:0A:8F:09:49:65:66:A0:D1:BE:66
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       79D03D04F1B60C1A30DEEF33EEF2477963A829ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number:          035A
Signing time:             Mon 05 Jan 2026 16:22:21 +0000
Manifest this update:     Mon 05 Jan 2026 16:17:21 +0000
Manifest next update:     Tue 06 Jan 2026 18:19:21 +0000
Files and hashes:         1: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: AHYf78xrBo4Do9KxrZIy7mcIuKyEYBG2LxA3WveWS0E=)
                          2: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=)
                          3: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
                          rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 Jan 2026 18:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d0:3d:04:f1:b6:0c:1a:30:de:ef:33:ee:f2:47:79:63:a8:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Jan  5 16:17:21 2026 GMT
            Not After : Jan  6 18:19:21 2026 GMT
        Subject: CN=3186A1D7FBEEBFFDB0530A8F09496566A0D1BE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:43:cc:c4:93:23:07:33:38:a4:ca:19:53:
                    90:8b:a1:71:28:94:2b:3f:ab:2d:69:a1:ff:f3:48:
                    17:cc:d2:7a:cb:90:9e:d7:15:0d:d7:1f:55:60:a5:
                    2d:5b:39:f5:18:91:99:25:e6:7a:18:08:eb:8d:2f:
                    39:08:5e:d8:79:16:90:ad:b9:26:88:6a:7d:67:71:
                    37:80:46:3c:5b:be:dd:27:d3:32:d5:1b:bd:d9:70:
                    df:02:0e:77:62:cf:7d:60:9f:4b:09:89:22:38:75:
                    20:d8:a4:92:39:b8:12:dc:81:18:99:64:a4:66:0d:
                    a2:d6:2a:aa:af:82:e1:8b:48:37:14:93:2a:9c:ea:
                    e9:b5:84:0e:fe:fd:8b:59:d4:f2:9f:26:73:8a:0b:
                    d4:26:2a:88:5a:26:39:53:8b:a7:bc:1d:e9:1b:4d:
                    0b:f2:ea:0d:ab:e1:d2:06:8e:b0:35:de:7e:67:82:
                    0b:a4:55:5f:fb:5a:38:44:e8:a5:a6:26:f8:86:0b:
                    09:7a:09:14:7b:0f:11:db:6e:67:df:c0:9e:16:6d:
                    bc:f3:8a:09:b8:3a:8f:4c:fb:38:8f:ed:f0:c4:6c:
                    8e:ad:d3:fd:6a:99:85:06:1f:a8:af:51:dd:91:83:
                    eb:2d:9f:71:c6:8d:e4:7c:70:e8:52:fb:ba:b7:e8:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:A1:D7:FB:EE:BF:FD:B0:53:0A:8F:09:49:65:66:A0:D1:BE:66
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:c5:59:c7:b1:5e:c1:f9:2c:95:4c:eb:58:4b:c9:74:50:
         a2:cd:16:d3:39:fc:a8:70:87:74:d8:ec:68:e2:5c:8d:2f:a3:
         51:92:d7:36:41:b9:54:ce:38:94:11:f5:e5:75:2c:96:18:aa:
         60:e8:28:2c:4f:90:89:8b:18:5a:fc:45:b1:ae:da:8f:e1:b5:
         26:bf:4e:4c:63:ff:44:08:77:56:0e:a2:e5:1b:86:b5:2e:47:
         5a:73:10:4e:94:e8:ba:94:32:8a:29:89:33:48:c5:31:65:7e:
         ae:53:1e:09:b1:59:e4:2e:69:46:16:00:af:09:2c:87:20:ec:
         1d:ff:b1:79:3b:44:71:fc:da:17:a2:22:55:9c:86:38:ec:4d:
         f7:f9:de:b8:03:8f:09:e1:02:f2:f8:85:fa:9f:33:f6:e8:a4:
         37:07:24:ec:ba:3d:22:3f:7c:80:22:66:6d:3a:2a:1b:0f:c1:
         60:1a:9f:ed:cd:32:fa:8b:b3:ff:57:41:c1:7e:74:f1:a5:42:
         80:5c:9f:e2:6d:ba:1f:25:27:e4:0a:88:52:f7:14:9d:71:b4:
         09:c5:82:bd:e6:4e:4a:75:8f:28:dd:52:63:f4:d2:14:4c:b4:
         0c:bc:92:75:45:ad:7a:ce:31:f1:d7:4f:cc:94:91:b8:2a:d0:
         b4:02:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 18:56:19 2026 by rpki-client