This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
File:                     3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json)
Hash identifier:          CrjTOplCjEUS3931XLS6U3Be0BzLT17uWoNNkhWR+tM=
Subject key identifier:   FC:EC:C0:FE:E0:0F:38:41:53:4D:A1:B0:97:28:41:A3:CA:2B:54:A6
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       6329E883F7CCB14C0DD6CCA6F4B4673A6FE7A9C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
Manifest number:          024A
Signing time:             Mon 12 Jan 2026 18:54:10 +0000
Manifest this update:     Mon 12 Jan 2026 18:49:10 +0000
Manifest next update:     Tue 13 Jan 2026 22:50:10 +0000
Files and hashes:         1: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: 51D7g9tV2RHUZcTJif6gYueZdIeNQpTevjuglQMpqaA=)
                          2: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: dX2Yzoniyh4vwe1YFaq/R/6SPKRILMEJl3jLbXMQ2Pg=)
                          3: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: q7R7XejhMA0V5vkWZy0ZIvhEZuHvs9Cr/UvYs4FlnAM=)
                          4: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: 4tOjqevwqLCbIHFMqiUCrC3QvIg8BgWmeIZlTS/cwMg=)
                          5: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: JRmzfNGpg/29BViI5J90w3B4mE9wS0FnfnNNBzvide4=)
                          6: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: hSBzLXBM8J/8XyT9Z6ebCXMWTQnyKLAiUWFzij9o9Ys=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 22:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:e8:83:f7:cc:b1:4c:0d:d6:cc:a6:f4:b4:67:3a:6f:e7:a9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Jan 12 18:49:10 2026 GMT
            Not After : Jan 13 22:50:10 2026 GMT
        Subject: CN=FCECC0FEE00F3841534DA1B0972841A3CA2B54A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:52:bb:b8:4c:8f:1e:7c:56:b8:52:7d:97:
                    e8:13:c1:65:28:67:ef:17:5f:db:91:05:ee:90:b3:
                    b8:5e:78:bd:38:c8:2f:00:44:6f:14:b6:2f:29:40:
                    61:f3:4e:47:c9:19:2f:e0:1e:59:35:28:2a:a6:c5:
                    99:98:3a:e9:75:83:04:c5:ef:54:32:76:03:ae:38:
                    6f:2f:31:f5:b5:5f:9f:01:1b:2d:de:a9:da:14:d5:
                    29:c7:5f:ad:9e:75:a3:00:f3:f9:65:5b:9c:7c:95:
                    13:58:06:e6:db:cf:5d:de:a3:8b:a2:f3:42:fd:b9:
                    c4:9d:f1:08:36:ad:a6:71:36:7b:18:57:11:f8:a5:
                    65:05:d1:00:3d:7d:33:58:a3:f0:4d:55:6b:45:09:
                    ac:4f:fc:21:40:7d:0d:8a:76:1e:1a:81:3b:64:3d:
                    be:a4:42:d5:7f:e2:a2:a4:48:14:29:31:22:6b:7e:
                    71:b0:68:20:8c:48:1e:f2:23:f7:b6:ef:75:91:d6:
                    ba:ff:93:bd:72:2b:98:03:8e:88:36:b4:0f:cf:35:
                    c7:7a:6c:a0:cd:a9:ad:87:8a:7a:c6:c7:f2:ed:c0:
                    fe:8a:04:ea:8f:08:e1:83:59:af:54:44:08:c0:81:
                    b5:58:ff:b8:b5:43:1a:c7:ac:2d:63:fe:9b:d9:8e:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:C0:FE:E0:0F:38:41:53:4D:A1:B0:97:28:41:A3:CA:2B:54:A6
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:af:c3:bf:9c:ff:7a:fe:af:84:8a:8b:b0:f2:6c:d8:fa:0d:
         e6:87:cf:02:d8:0c:81:89:4d:7c:62:02:6e:7d:d5:6b:8a:1b:
         38:96:9c:5d:42:bf:63:7b:f5:76:6f:f6:1d:1b:62:79:e5:5b:
         8f:82:b0:02:26:7d:7e:d0:ea:b8:5a:97:ad:a7:db:26:fe:eb:
         72:7e:f4:87:33:5e:83:83:91:46:70:f6:fc:00:27:71:5a:8c:
         2b:c8:bc:cc:16:82:cf:18:ad:1b:5f:d9:af:50:1c:05:15:bc:
         20:f6:cd:82:83:76:a0:02:0d:52:8a:62:d5:5a:8a:c7:1a:70:
         f6:dc:2d:1f:3b:81:76:0a:cf:f3:77:ca:b6:0e:00:e8:5b:29:
         15:e0:92:b0:f5:bf:59:88:f1:2f:4e:5a:96:db:d0:be:46:74:
         ac:eb:49:d8:c2:fe:b6:75:29:b0:14:3a:45:e1:7d:91:8e:1c:
         80:a8:aa:ea:3a:8c:b7:23:fb:d0:d1:d9:0c:f5:45:93:28:61:
         85:f4:03:67:8f:f4:56:c0:f8:18:77:a3:d1:59:87:79:e2:01:
         9a:00:ea:4b:5c:f2:46:ce:5e:f9:6a:7f:1b:27:f8:00:ab:99:
         f0:e7:33:e6:72:57:bb:ac:49:72:02:90:ce:07:de:97:5b:09:
         4d:14:b3:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYynog/fMsUwN1sym9LRnOm/nqcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5
NEE3RUE5NDAeFw0yNjAxMTIxODQ5MTBaFw0yNjAxMTMyMjUwMTBaMDMxMTAvBgNV
BAMTKEZDRUNDMEZFRTAwRjM4NDE1MzREQTFCMDk3Mjg0MUEzQ0EyQjU0QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dVK7uEyPHnxWuFJ9l+gTwWUo
Z+8XX9uRBe6Qs7heeL04yC8ARG8Uti8pQGHzTkfJGS/gHlk1KCqmxZmYOul1gwTF
71QydgOuOG8vMfW1X58BGy3eqdoU1SnHX62edaMA8/llW5x8lRNYBubbz13eo4ui
80L9ucSd8Qg2raZxNnsYVxH4pWUF0QA9fTNYo/BNVWtFCaxP/CFAfQ2Kdh4agTtk
Pb6kQtV/4qKkSBQpMSJrfnGwaCCMSB7yI/e273WR1rr/k71yK5gDjog2tA/PNcd6
bKDNqa2HinrGx/LtwP6KBOqPCOGDWa9URAjAgbVY/7i1QxrHrC1j/pvZjjbhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/OzA/uAPOEFTTaGwlyhBo8orVKYwHwYDVR0j
BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2
eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD
MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2eHQvMC8z
MTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYq/Dv5z/ev6vhIqLsPJs2PoN5ofPAtgMgYlNfGICbn3Va4obOJacXUK/Y3v1
dm/2HRtieeVbj4KwAiZ9ftDquFqXrafbJv7rcn70hzNeg4ORRnD2/AAncVqMK8i8
zBaCzxitG1/Zr1AcBRW8IPbNgoN2oAINUopi1VqKxxpw9twtHzuBdgrP83fKtg4A
6FspFeCSsPW/WYjxL05altvQvkZ0rOtJ2ML+tnUpsBQ6ReF9kY4cgKiq6jqMtyP7
0NHZDPVFkyhhhfQDZ4/0VsD4GHej0VmHeeIBmgDqS1zyRs5e+Wp/Gyf4AKuZ8Ocz
5nJXu6xJcgKQzgfel1sJTRSzbg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:21:12 2026 by rpki-client