This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft
File:                     971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft (raw, json)
Hash identifier:          8iYZpaKk4gXHks/GK5cHGwM9SzBqdIZAZ9emyoSvozE=
Subject key identifier:   EE:BA:47:E8:F6:15:5A:C3:6B:2A:1B:92:A4:53:A0:BE:CB:0B:48:B4
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Certificate issuer:       /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial:       58CF8E3736643375A220FD05F39AA4688D7FFEC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft
Manifest number:          0344
Signing time:             Thu 01 Jan 2026 10:43:16 +0000
Manifest this update:     Thu 01 Jan 2026 10:38:16 +0000
Manifest next update:     Fri 02 Jan 2026 14:40:16 +0000
Files and hashes:         1: 3134332e302e32382e302f32322d3234203d3e20323633393931.roa (hash: Wv7aafBOKavYFmSaoVhpiNS+4s1lJbZCwKAk7saQK7Q=)
                          2: 3137302e3234352e31362e302f32322d3234203d3e20323633393931.roa (hash: HNUicqn6qSyWi2Wt9BIpemmTw/fvvp5aztIUAfpMo90=)
                          3: 323830343a323866633a3a2f33322d3438203d3e20323633393931.roa (hash: qbfq0CMcPlMmpmfD0XsH+pzR90cCRLYTNhdj/EtfBzY=)
                          4: 971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl (hash: NbclAPTPn/7+nXScGXV2MMModJK8U+Byadqb7DTMG5Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
                          rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 14:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cf:8e:37:36:64:33:75:a2:20:fd:05:f3:9a:a4:68:8d:7f:fe:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
        Validity
            Not Before: Jan  1 10:38:16 2026 GMT
            Not After : Jan  2 14:40:16 2026 GMT
        Subject: CN=EEBA47E8F6155AC36B2A1B92A453A0BECB0B48B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:4c:ed:62:a0:ab:24:c7:84:76:b8:ff:8a:
                    f0:ff:c8:99:04:ba:fe:40:2c:33:7b:cd:bb:b8:6c:
                    2f:0b:04:8a:7b:6c:26:07:c0:05:0a:f8:bb:c3:71:
                    50:65:29:55:f8:45:4f:af:d1:0d:35:80:7f:b2:b7:
                    e1:22:d1:af:8a:7f:d1:d8:91:a6:8b:61:32:71:4a:
                    40:0f:a3:d3:4b:12:33:80:3f:70:be:d4:ef:aa:e0:
                    05:20:c0:83:87:35:00:ae:92:d6:7a:09:9d:41:30:
                    a8:99:a0:a5:62:71:54:b5:2b:f4:d3:c3:d1:ec:0f:
                    a2:a4:1d:00:bf:24:72:a7:41:2e:c0:b2:31:51:89:
                    49:a0:42:58:2e:db:b9:1c:0c:40:2c:be:29:46:28:
                    90:db:4f:32:7c:1b:4d:4b:45:4b:5c:6b:a9:1d:2c:
                    93:9a:3e:5e:63:4e:5c:e8:48:08:ec:a6:af:ae:05:
                    7b:4e:d5:6c:10:4b:19:84:cc:bc:3c:30:8c:c9:8d:
                    f1:6f:32:b0:2c:b8:f3:c7:c4:3b:f4:2d:19:77:43:
                    a6:38:24:df:87:43:c4:34:1d:61:01:21:5a:44:32:
                    ae:ed:9d:06:ce:1a:db:b4:9d:6e:c9:c3:fb:53:ca:
                    45:fe:81:41:c6:51:b2:97:19:04:70:d2:d2:32:1b:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BA:47:E8:F6:15:5A:C3:6B:2A:1B:92:A4:53:A0:BE:CB:0B:48:B4
            X509v3 Authority Key Identifier:
                keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:60:9a:83:bc:90:51:85:51:7f:ab:9e:3d:37:e6:fc:b6:6e:
         74:75:ea:f3:f7:37:b2:fd:11:60:24:d2:94:48:b1:33:2a:e1:
         cd:8f:92:9e:73:bd:d7:56:db:eb:ca:38:f8:87:80:52:88:60:
         a5:58:ad:88:41:18:2a:10:fb:dd:25:76:1e:d7:9f:54:3c:e3:
         e5:53:17:60:f4:b6:ca:09:d4:90:5e:60:6f:ee:dd:46:92:3f:
         09:91:20:ba:81:ab:83:65:cd:08:99:e9:43:e3:91:1c:2e:21:
         c7:88:d8:f3:9b:18:cd:c1:5f:97:84:55:3a:fa:6b:2c:37:23:
         21:67:18:79:95:f5:27:69:21:6b:aa:ce:a3:a9:9c:ab:8c:af:
         93:dd:ef:0f:cd:ae:e5:d4:9e:d0:fd:45:b6:ff:c3:28:e1:43:
         41:30:87:70:49:eb:4b:bc:9e:d8:80:87:48:34:3a:9d:ea:f4:
         46:12:dd:33:61:44:1a:44:61:b4:0b:47:d9:9f:d2:51:f1:8b:
         89:80:67:16:01:79:c7:f2:e1:61:92:8b:2e:98:68:a9:76:fe:
         e9:80:94:e0:e1:10:85:66:f9:07:3b:de:c7:db:b0:1a:3b:7c:
         9d:1f:56:d1:39:60:90:97:43:6d:1c:8f:bf:53:fd:69:d7:d4:
         d2:05:c2:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWM+ONzZkM3WiIP0F85qkaI1//skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxMzM0QzEyMjNFNTEwQTJDMERBQTZBQzAwRjJENDAz
MzBENkM0ODAeFw0yNjAxMDExMDM4MTZaFw0yNjAxMDIxNDQwMTZaMDMxMTAvBgNV
BAMTKEVFQkE0N0U4RjYxNTVBQzM2QjJBMUI5MkE0NTNBMEJFQ0IwQjQ4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1UztYqCrJMeEdrj/ivD/yJkE
uv5ALDN7zbu4bC8LBIp7bCYHwAUK+LvDcVBlKVX4RU+v0Q01gH+yt+Ei0a+Kf9HY
kaaLYTJxSkAPo9NLEjOAP3C+1O+q4AUgwIOHNQCuktZ6CZ1BMKiZoKVicVS1K/TT
w9HsD6KkHQC/JHKnQS7AsjFRiUmgQlgu27kcDEAsvilGKJDbTzJ8G01LRUtca6kd
LJOaPl5jTlzoSAjspq+uBXtO1WwQSxmEzLw8MIzJjfFvMrAsuPPHxDv0LRl3Q6Y4
JN+HQ8Q0HWEBIVpEMq7tnQbOGtu0nW7Jw/tTykX+gUHGUbKXGQRw0tIyG4tBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7rpH6PYVWsNrKhuSpFOgvssLSLQwHwYDVR0j
BBgwFoAUlxM0wSI+UQosDapqwA8tQDMNbEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhwYnRBSjdyblBXTENyejJNTUtHSFU3WEdab1VxV0o5cHUxSkdDZkR2
QmYvMC85NzEzMzRDMTIyM0U1MTBBMkMwREFBNkFDMDBGMkQ0MDMzMEQ2QzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MTMzNEMxMjIzRTUxMEEy
QzBEQUE2QUMwMEYyRDQwMzMwRDZDNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGhwYnRBSjdyblBXTENyejJNTUtHSFU3WEdab1VxV0o5cHUxSkdDZkR2QmYvMC85
NzEzMzRDMTIyM0U1MTBBMkMwREFBNkFDMDBGMkQ0MDMzMEQ2QzQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB2Cag7yQUYVRf6uePTfm/LZudHXq8/c3sv0RYCTSlEixMyrhzY+SnnO911bb
68o4+IeAUohgpVitiEEYKhD73SV2HtefVDzj5VMXYPS2ygnUkF5gb+7dRpI/CZEg
uoGrg2XNCJnpQ+ORHC4hx4jY85sYzcFfl4RVOvprLDcjIWcYeZX1J2kha6rOo6mc
q4yvk93vD82u5dSe0P1Ftv/DKOFDQTCHcEnrS7ye2ICHSDQ6ner0RhLdM2FEGkRh
tAtH2Z/SUfGLiYBnFgF5x/LhYZKLLphoqXb+6YCU4OEQhWb5Bzvex9uwGjt8nR9W
0TlgkJdDbRyPv1P9adfU0gXCPw==
-----END CERTIFICATE-----
Generated at Thu Jan 1 18:04:46 2026 by rpki-client