This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
File:                     433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json)
Hash identifier:          InKPsm4gV4fNzFwL2k+wjA7R6Crr5nVVNQgVIqePrYU=
Subject key identifier:   F8:59:47:CD:49:C1:80:24:F3:61:DF:09:71:20:FC:B0:D8:43:1A:F0
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       3D521FBE3F1AF57A981BE1DDEA1AE1ADE1C14CAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
Manifest number:          032C
Signing time:             Sun 11 Jan 2026 17:04:41 +0000
Manifest this update:     Sun 11 Jan 2026 16:59:41 +0000
Manifest next update:     Mon 12 Jan 2026 17:10:41 +0000
Files and hashes:         1: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=)
                          2: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: +7clNALElGDsZ8c8M7zsXvmkocKFlPWo2ZojW3JC++I=)
                          3: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=)
                          4: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=)
                          5: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=)
                          6: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=)
                          7: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=)
                          8: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=)
                          9: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:52:1f:be:3f:1a:f5:7a:98:1b:e1:dd:ea:1a:e1:ad:e1:c1:4c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Jan 11 16:59:41 2026 GMT
            Not After : Jan 12 17:10:41 2026 GMT
        Subject: CN=F85947CD49C18024F361DF097120FCB0D8431AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:ab:3b:98:e6:9b:87:36:83:e7:df:a0:cd:
                    d2:5b:46:2b:8b:32:13:76:dc:6e:ad:f6:61:7e:4f:
                    d2:a3:78:5f:65:ab:66:cf:d9:a7:12:5e:c1:fc:d4:
                    de:74:ce:f9:e0:3a:fd:99:14:cd:83:05:91:dc:2d:
                    62:90:c7:17:82:c2:b8:fc:fc:b0:e5:35:60:21:3f:
                    ef:e2:4b:2d:92:68:76:32:ed:d1:7f:88:c8:ac:99:
                    6a:23:d2:7c:c1:e7:91:75:55:57:e3:81:f0:5f:e3:
                    f4:5e:9f:b0:8b:d7:23:e2:90:da:ee:d6:e5:be:aa:
                    77:a0:8b:25:71:f7:dc:28:55:31:51:69:99:c5:d8:
                    be:be:f9:45:9a:c8:c9:89:17:55:de:14:b5:ee:ce:
                    87:3e:54:91:21:87:2b:f5:f3:c3:45:2d:d5:32:a0:
                    9f:00:8b:29:55:7e:ef:f8:20:d7:ee:2f:67:e3:28:
                    0c:89:bb:63:a6:0e:ac:d4:2a:1f:f2:5d:9e:9f:93:
                    e5:d5:ce:97:2e:5b:f1:3c:4a:11:ea:92:22:70:0d:
                    a3:83:79:67:f4:a2:92:81:e1:78:8f:91:2d:3b:c3:
                    e0:b3:76:58:46:04:d3:31:68:47:57:a3:45:41:31:
                    85:e5:6e:00:89:99:81:f6:67:10:5e:ec:7c:88:9a:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:47:CD:49:C1:80:24:F3:61:DF:09:71:20:FC:B0:D8:43:1A:F0
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:5d:ff:a4:38:5d:61:ab:6f:f8:1e:5e:b7:6c:83:be:4d:
         1c:40:aa:6f:70:62:0e:bd:89:59:2e:5b:2f:64:74:18:dc:c1:
         78:33:6e:29:b2:79:b4:17:7d:b9:ec:94:89:76:15:55:82:4a:
         ac:11:c0:ab:5e:29:16:4f:6e:31:54:fa:67:9b:0e:f0:c0:d0:
         64:12:19:fa:16:fd:68:8a:88:3d:ea:11:5f:ad:ce:3a:4b:5a:
         a1:fd:2f:64:df:0a:e0:8a:6c:39:69:43:2e:32:a7:c6:01:7f:
         ee:35:b3:fe:b4:35:3b:90:98:3f:c9:ea:be:71:7b:46:d2:d2:
         c1:e5:fc:bb:09:4c:d2:4b:e2:b0:04:5d:08:de:19:cd:b7:95:
         c3:02:d9:a9:98:99:d3:95:73:02:1a:06:75:06:3b:a2:88:7a:
         3a:76:e8:47:af:61:41:45:5c:57:54:a0:d6:61:ad:58:1a:99:
         a4:ab:36:ec:74:59:2c:47:c9:ab:b8:e2:e8:c4:1d:8d:64:84:
         66:b4:a0:9e:75:c8:e5:0c:10:32:dc:f2:14:bf:34:c0:29:9a:
         88:6d:e7:12:10:eb:59:87:22:54:dd:96:1f:7d:06:5b:ab:cd:
         51:56:7b:a0:c8:bf:12:56:ab:2e:05:0c:4a:78:0c:7f:51:f4:
         08:d8:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:22:26 2026 by rpki-client