This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
File:                     B3C0ECC43363690F72F949D611EE62DCF8942568.mft (raw, json)
Hash identifier:          WNWgBHwFTHhGl02LwkzzcBP6iluCRF+NnVf4niG3kT0=
Subject key identifier:   BE:96:73:FF:94:5F:7F:AF:81:74:48:84:DE:F4:09:29:39:31:5B:0D
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       46402DCECEA171FCF24AB78FC8CEE90650111E37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
Manifest number:          0238
Signing time:             Sun 11 Jan 2026 18:03:18 +0000
Manifest this update:     Sun 11 Jan 2026 17:58:18 +0000
Manifest next update:     Mon 12 Jan 2026 20:00:18 +0000
Files and hashes:         1: 323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (hash: NgViZU+smtrX5KI+pgc12is3Dat/7tdY4dskSSJlbWk=)
                          2: 3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (hash: zWq3qveuhfjY2yYC6tu5Za/hQVO2cq+c00n4sKVtMG4=)
                          3: B3C0ECC43363690F72F949D611EE62DCF8942568.crl (hash: Z1G47asSCHFQc3z8bPKgWb+FpMo79UAYgLQIXiZ/L9U=)
                          4: 3139312e352e3233362e302f32322d3239203d3e20323633353433.roa (hash: XrmREThCWd+9FlIfHO8sDj3baPSgs5QsVANpr6RJMFs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:2d:ce:ce:a1:71:fc:f2:4a:b7:8f:c8:ce:e9:06:50:11:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Jan 11 17:58:18 2026 GMT
            Not After : Jan 12 20:00:18 2026 GMT
        Subject: CN=BE9673FF945F7FAF81744884DEF4092939315B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:ed:eb:9b:29:10:da:3f:cf:84:a8:5a:6e:
                    2a:51:26:21:cf:94:0b:4b:55:17:b4:a4:61:88:d3:
                    1e:1a:82:cc:dd:4d:db:b5:3c:5f:a4:e8:79:47:79:
                    bc:db:30:14:ca:43:fe:6e:1f:22:98:df:8b:bc:75:
                    0b:f2:67:06:a8:6d:5b:d1:1c:25:2f:38:25:2d:fd:
                    c7:19:08:bb:25:63:e5:06:e0:7d:0b:3b:93:f6:87:
                    ba:12:77:c6:bb:38:46:8a:8a:89:eb:f8:e9:18:55:
                    cb:27:6b:8f:a6:6d:86:53:bb:ef:2c:e1:0e:a3:22:
                    0a:5f:41:8a:d0:ef:8c:7b:ed:46:2d:88:21:5b:fe:
                    00:8b:92:68:46:44:82:2e:e3:85:ad:fe:90:c5:d6:
                    b4:61:15:3a:7e:68:31:39:fa:a6:9d:26:8c:49:8d:
                    97:79:70:70:59:60:6c:41:a3:34:0a:e0:91:0f:fa:
                    eb:c8:ef:c7:92:a3:4c:ae:1c:cb:c4:d1:36:3c:48:
                    64:a4:aa:30:21:9f:66:e2:73:aa:e1:4e:1d:2d:5c:
                    2f:19:4d:3b:18:36:e6:a1:3e:c4:4d:4a:68:6c:89:
                    c2:ac:99:f1:52:25:1b:ac:17:dd:72:46:61:7c:51:
                    47:e7:af:7b:55:32:3f:a6:65:db:e9:c9:73:48:0d:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:73:FF:94:5F:7F:AF:81:74:48:84:DE:F4:09:29:39:31:5B:0D
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:14:06:d8:fc:40:5b:fb:97:1d:99:25:fd:2b:02:20:a9:
         9c:ea:32:8e:fa:3d:0f:1a:06:a9:b9:13:64:5d:2b:26:d1:a1:
         db:0e:b6:d9:9a:04:b8:78:0f:d0:35:1b:85:5c:ca:45:6d:3d:
         02:1a:2a:20:ae:12:93:03:b3:f1:8e:ce:1a:43:b1:17:41:46:
         69:32:f0:62:2d:da:0d:fb:eb:0b:ba:bc:63:13:16:5f:55:ab:
         67:08:5b:91:55:14:33:2c:df:c4:d3:d0:5b:67:37:e1:26:36:
         eb:c9:8e:ee:26:3a:0b:87:e3:fe:fc:f7:38:51:72:82:1f:49:
         6e:b6:8e:99:c9:ba:f9:2f:d1:c5:c2:ec:12:df:b7:5d:24:14:
         9e:76:fb:61:16:02:c0:8c:f8:bb:6c:d3:e0:ef:84:73:d4:88:
         6b:13:07:98:02:5f:de:16:ba:16:b5:a5:25:c3:4d:68:e7:ad:
         a0:38:43:7b:b6:78:ed:35:67:3c:9d:10:75:cb:31:4b:b4:c2:
         de:6e:8a:13:e4:f6:19:ea:dd:3d:53:72:83:65:70:8a:88:5d:
         44:03:58:f2:28:09:48:0c:cb:00:37:69:25:e6:1f:4a:3e:74:
         4e:de:af:bb:d9:98:f7:41:45:73:c2:5a:cb:7f:d1:59:59:58:
         7a:0d:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:21:07 2026 by rpki-client