This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
File:                     4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json)
Hash identifier:          OWoTxeNuqLn8nI37Lgw7YM5JWmv02s6RAcOoOClAxCU=
Subject key identifier:   A2:F1:A0:E0:72:39:53:6A:26:84:31:F0:59:63:BF:D5:C5:A6:7E:9A
Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65
Certificate issuer:       /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
Certificate serial:       35279AA82C7DA1299E099017762B4FEBF536AD30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
Manifest number:          0339
Signing time:             Sun 11 Jan 2026 19:44:16 +0000
Manifest this update:     Sun 11 Jan 2026 19:39:16 +0000
Manifest next update:     Mon 12 Jan 2026 22:43:16 +0000
Files and hashes:         1: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=)
                          2: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=)
                          3: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: ewZKV5E1VVwUh5xOP6EjDmXOefVALKCeoIhHxBzSICU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:27:9a:a8:2c:7d:a1:29:9e:09:90:17:76:2b:4f:eb:f5:36:ad:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
        Validity
            Not Before: Jan 11 19:39:16 2026 GMT
            Not After : Jan 12 22:43:16 2026 GMT
        Subject: CN=A2F1A0E07239536A268431F05963BFD5C5A67E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:3c:7f:60:01:38:56:3c:4f:1b:61:33:86:
                    d4:9d:e0:d6:a8:5a:2d:0b:3d:90:4e:60:d1:cb:23:
                    83:3a:fe:a7:dc:77:f2:de:78:a9:fe:80:95:a5:e9:
                    83:7b:23:3e:80:bf:d3:a8:88:80:e2:bd:58:36:83:
                    e6:16:3b:aa:8e:9e:98:1c:8c:9c:28:a0:78:17:11:
                    08:0c:7f:46:b8:d2:1c:44:80:d0:eb:41:8e:f0:27:
                    c3:81:00:15:19:4c:21:73:57:7e:d9:1f:d0:d1:79:
                    3b:56:29:f8:bb:7f:1b:10:4f:25:79:3b:31:cf:4f:
                    7e:50:b9:98:31:cc:7a:da:3f:5a:f5:47:5b:e2:f7:
                    5e:23:ae:27:da:fb:15:fa:9f:9b:7b:d8:00:48:96:
                    22:d3:a3:2e:8a:55:c6:bd:6a:94:ee:94:1b:ac:e6:
                    2f:f0:f1:04:6c:df:c4:54:c5:9e:d4:ad:b1:8f:73:
                    ab:2d:20:6c:6e:14:4f:64:63:39:8e:06:a9:83:d4:
                    c8:a1:0e:12:26:c8:cb:f0:66:af:f2:0b:e4:b3:ad:
                    6b:ad:d7:e7:0d:27:48:94:56:5c:73:af:24:b5:ef:
                    84:46:bc:0e:d8:38:42:b7:4b:1e:92:14:06:4a:52:
                    a8:24:14:d5:23:41:0d:95:da:e8:0c:9b:1e:e8:c5:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F1:A0:E0:72:39:53:6A:26:84:31:F0:59:63:BF:D5:C5:A6:7E:9A
            X509v3 Authority Key Identifier:
                keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:90:89:ed:da:3a:2b:be:31:c9:49:f0:2e:e8:7c:6b:cf:
         cf:a9:20:62:05:04:f2:64:41:15:d8:ab:4a:dc:79:5f:63:d1:
         06:80:62:fa:12:9b:65:f6:57:96:46:b4:e7:2e:2d:d1:d1:e4:
         7d:3b:14:88:17:c3:75:91:b1:f1:d7:0d:44:96:94:ba:45:07:
         e5:89:f3:6d:df:73:f9:be:85:ab:3f:0b:14:ea:60:be:fe:88:
         09:5a:84:42:1a:a9:76:0d:d7:f8:2e:4b:ae:77:c0:bf:07:5d:
         aa:81:88:23:07:05:22:98:05:08:90:7b:7a:0f:a4:d3:76:33:
         4d:1c:ee:79:38:14:e4:fe:14:1c:68:55:44:85:ff:4e:c9:60:
         ca:97:37:ed:89:3b:e8:9b:7f:73:e5:ee:39:0b:1a:6b:36:74:
         da:4b:c5:5a:77:2c:07:57:46:1f:1e:71:27:c6:53:02:7c:69:
         65:93:4d:54:d2:b9:00:0d:f1:bf:53:ca:13:b6:93:25:45:88:
         0f:38:fb:e3:0c:cb:20:d5:79:a4:d2:5c:91:10:11:c1:15:6b:
         df:f1:82:93:d2:44:39:3f:3f:73:25:d2:3f:a8:70:4c:b7:2d:
         9a:db:7e:0b:24:e9:92:d1:f8:af:72:b9:8f:14:aa:d9:05:9b:
         c4:53:25:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNSeaqCx9oSmeCZAXditP6/U2rTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM0RDZBQTU3QkQzQTI0Rjc3MDZDN0I2NUM3QzhDRDU5
RUY1Q0I2NTAeFw0yNjAxMTExOTM5MTZaFw0yNjAxMTIyMjQzMTZaMDMxMTAvBgNV
BAMTKEEyRjFBMEUwNzIzOTUzNkEyNjg0MzFGMDU5NjNCRkQ1QzVBNjdFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITzx/YAE4VjxPG2EzhtSd4Nao
Wi0LPZBOYNHLI4M6/qfcd/LeeKn+gJWl6YN7Iz6Av9OoiIDivVg2g+YWO6qOnpgc
jJwooHgXEQgMf0a40hxEgNDrQY7wJ8OBABUZTCFzV37ZH9DReTtWKfi7fxsQTyV5
OzHPT35QuZgxzHraP1r1R1vi914jrifa+xX6n5t72ABIliLToy6KVca9apTulBus
5i/w8QRs38RUxZ7UrbGPc6stIGxuFE9kYzmOBqmD1MihDhImyMvwZq/yC+SzrWut
1+cNJ0iUVlxzryS174RGvA7YOEK3Sx6SFAZKUqgkFNUjQQ2V2ugMmx7oxSztAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUovGg4HI5U2omhDHwWWO/1cWmfpowHwYDVR0j
BBgwFoAUTE1qpXvTok93Bse2XHyM1Z71y2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz
cnAvMC80QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNEQ2QUE1N0JEM0EyNEY3
NzA2QzdCNjVDN0M4Q0Q1OUVGNUNCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC80
QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiVuQie3aOiu+MclJ8C7ofGvPz6kgYgUE8mRBFdirStx5X2PRBoBi+hKbZfZX
lka05y4t0dHkfTsUiBfDdZGx8dcNRJaUukUH5Ynzbd9z+b6Fqz8LFOpgvv6ICVqE
Qhqpdg3X+C5LrnfAvwddqoGIIwcFIpgFCJB7eg+k03YzTRzueTgU5P4UHGhVRIX/
Tslgypc37Yk76Jt/c+XuOQsaazZ02kvFWncsB1dGHx5xJ8ZTAnxpZZNNVNK5AA3x
v1PKE7aTJUWIDzj74wzLINV5pNJckRARwRVr3/GCk9JEOT8/cyXSP6hwTLctmtt+
CyTpktH4r3K5jxSq2QWbxFMl4g==
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:30:08 2026 by rpki-client