This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
File:                     3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json)
Hash identifier:          BbYw/Zri2kKKBqXVsGxkhF5gVHiuydv94pkRa5N1E54=
Subject key identifier:   FE:17:E8:DA:D7:B0:9F:0F:B4:93:FE:63:F2:A6:37:FF:5D:1A:15:24
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Certificate issuer:       /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial:       32653E6CF8CA23DE28594FE76072FB93481CCBE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
Manifest number:          013D
Signing time:             Thu 01 Jan 2026 02:56:45 +0000
Manifest this update:     Thu 01 Jan 2026 02:51:45 +0000
Manifest next update:     Fri 02 Jan 2026 03:44:45 +0000
Files and hashes:         1: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=)
                          2: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: BETSOkECtsOUuQF41uXULycDMA9+vMeEJXBgxsFkPdA=)
                          3: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=)
                          4: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
                          rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 03:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:3e:6c:f8:ca:23:de:28:59:4f:e7:60:72:fb:93:48:1c:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
        Validity
            Not Before: Jan  1 02:51:45 2026 GMT
            Not After : Jan  2 03:44:45 2026 GMT
        Subject: CN=FE17E8DAD7B09F0FB493FE63F2A637FF5D1A1524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:cf:18:5b:84:e1:7e:83:46:16:3b:a4:97:
                    dc:c2:98:ee:1b:a8:78:d2:64:2f:87:4d:31:6a:a8:
                    99:7c:0b:71:b3:0a:c9:60:1c:96:46:be:00:3f:e3:
                    b8:a6:8c:34:b1:84:af:41:58:8b:33:31:c4:1f:ee:
                    4a:c8:b7:8d:54:be:18:a6:d3:92:11:98:45:9f:5f:
                    3e:c6:e8:f3:0c:7f:88:ed:2b:19:ee:e9:12:f9:84:
                    cd:0c:9b:0b:63:f0:69:5a:f3:c1:ed:19:14:35:96:
                    c3:3a:65:fc:e6:47:82:2f:f5:e7:f5:2f:c1:49:f2:
                    d0:5e:74:4d:8a:9c:e8:60:6b:fa:8c:cc:ac:f6:e5:
                    ec:e4:71:d7:36:0d:34:fe:44:7d:b6:34:94:f4:c5:
                    85:2a:32:77:1b:71:21:29:af:8d:07:78:72:c7:1a:
                    a2:7a:c3:ac:00:5d:82:76:31:93:e3:b8:98:30:25:
                    b2:4f:d3:c7:e4:3a:d5:8f:56:a1:fa:2c:40:ab:bc:
                    6e:0b:3d:a0:00:02:df:44:39:8f:4a:9e:f6:4b:03:
                    ba:ea:c0:6e:a5:d7:7e:5c:f2:05:ae:ac:a5:d3:7f:
                    87:25:8a:4b:f3:6d:52:7b:10:91:61:b2:8d:66:48:
                    43:04:bd:2c:37:07:be:07:a0:4e:84:ed:b6:7f:29:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:17:E8:DA:D7:B0:9F:0F:B4:93:FE:63:F2:A6:37:FF:5D:1A:15:24
            X509v3 Authority Key Identifier:
                keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:64:f6:0f:bb:8e:28:ef:44:98:69:10:70:d1:e6:98:4a:
         19:55:eb:59:de:18:6d:91:4b:77:57:fc:b8:25:df:17:36:90:
         50:bc:9c:8f:cb:77:d6:e8:32:2b:c2:12:6a:11:83:81:6c:e9:
         e5:b5:7a:43:46:a1:97:85:e4:01:c2:c0:7d:34:13:51:35:88:
         4d:19:d2:d0:aa:4e:2c:4f:6e:4a:2c:7a:b0:e6:3f:2c:1c:b9:
         45:cc:19:90:97:a6:5d:19:76:7b:f1:20:e7:4b:d9:78:cf:be:
         96:c4:44:f5:9d:be:a4:4a:3b:25:78:ef:bc:cb:e9:73:5d:fd:
         49:e9:4d:94:5f:09:58:f7:4b:11:c1:36:36:1e:66:b9:0a:e4:
         93:98:05:c7:79:ed:58:67:15:1c:94:e5:6e:81:72:99:38:af:
         33:39:05:8e:51:0e:64:5f:07:80:d5:65:01:2c:07:9f:13:93:
         c3:ad:fc:09:cf:93:47:94:a5:29:a9:59:0e:50:07:92:06:3f:
         69:cc:0b:e4:ec:5f:35:32:41:4c:27:c9:12:59:de:e3:89:15:
         7f:6a:73:77:1b:c9:a7:0e:f4:ae:d4:a3:2b:e9:8f:6c:d1:e9:
         02:d4:a0:55:12:a6:33:70:b7:ae:56:7d:cf:be:42:a6:86:6b:
         03:2b:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 05:48:01 2026 by rpki-client