This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json)
Hash identifier:          o/2iPL/kWET6YNA3qDXboTtxVEs84RRSyxVriTEIwW4=
Subject key identifier:   74:BC:E1:85:5F:FD:3E:55:8A:90:2F:90:39:00:39:A8:99:76:28:25
Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Certificate issuer:       /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
Certificate serial:       79572F0B20C3696811D4FA41FAD2848228542EEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
Manifest number:          0162
Signing time:             Mon 22 Dec 2025 16:57:42 +0000
Manifest this update:     Mon 22 Dec 2025 16:52:42 +0000
Manifest next update:     Tue 23 Dec 2025 17:54:42 +0000
Files and hashes:         1: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=)
                          2: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: SPwTXKjYxwQ7phVWCqG3MjAyHOqsfjZtzy+z89LX79w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 17:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:2f:0b:20:c3:69:68:11:d4:fa:41:fa:d2:84:82:28:54:2e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Validity
            Not Before: Dec 22 16:52:42 2025 GMT
            Not After : Dec 23 17:54:42 2025 GMT
        Subject: CN=74BCE1855FFD3E558A902F90390039A899762825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:e7:73:e6:fa:6e:26:12:46:ab:4d:43:5c:
                    8e:89:1c:ec:59:4c:08:83:a3:be:ea:6f:38:51:9e:
                    03:94:32:75:47:0f:73:88:3b:9a:59:a1:d8:99:0a:
                    5a:82:18:69:fe:a8:ed:51:a4:ef:33:48:e7:4e:0d:
                    61:48:bc:6b:eb:2d:f6:80:31:d8:fd:3a:ab:ba:a3:
                    9f:84:96:f0:ac:25:75:14:7a:3a:74:6c:f3:bf:a9:
                    0e:2a:7c:f5:46:76:8a:6a:df:e6:97:88:2f:e3:ba:
                    b5:fe:28:d3:b1:d4:2b:08:67:f8:55:fc:38:e3:0b:
                    2d:0c:0d:cb:af:a2:b0:3d:20:04:44:11:88:15:7c:
                    ae:9a:0b:61:cf:96:ef:5c:da:b2:a7:4f:56:59:45:
                    01:ab:2a:6f:45:e5:b1:91:0b:39:65:c3:ac:b6:54:
                    68:bc:79:e4:3b:d1:a9:aa:8d:42:e1:e1:2c:d4:5e:
                    e0:cf:5c:28:ef:00:eb:63:af:67:93:ff:20:ad:cc:
                    a7:6b:6c:b2:df:95:43:92:5f:27:93:92:2b:52:9f:
                    d5:4f:2e:59:1a:4a:67:88:ea:7b:cf:b8:c5:62:17:
                    7e:29:18:ca:e7:02:5f:99:c0:0d:86:0d:12:14:72:
                    b6:52:32:f9:24:e1:f0:c8:38:1f:41:a9:a0:3c:d2:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:E1:85:5F:FD:3E:55:8A:90:2F:90:39:00:39:A8:99:76:28:25
            X509v3 Authority Key Identifier:
                keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:6a:f7:15:4f:7a:4e:ad:69:7b:ba:09:12:40:96:2b:91:
         40:7c:3a:02:19:69:29:fb:de:52:7c:7f:b9:0c:85:33:e7:e5:
         b2:87:8a:2b:e3:40:ed:b6:db:df:5f:b3:e2:b9:78:92:b2:cf:
         be:24:ec:c7:3f:05:53:75:ef:4e:c1:0b:65:15:7c:eb:e1:b5:
         af:b7:1c:a3:e4:00:38:c2:88:62:ac:97:dc:e8:2d:f6:06:98:
         e8:65:2b:48:c6:a7:3a:12:9b:7a:21:35:e4:a9:ae:69:e0:c2:
         7e:25:b3:98:eb:82:ec:f6:e2:b1:39:11:75:7d:92:ae:ab:b8:
         24:4f:73:70:b4:dc:6c:ce:54:e0:e2:f5:24:a9:65:de:42:8f:
         29:89:fa:17:86:eb:7c:5d:93:b1:8b:5c:c6:23:27:2b:ac:b5:
         76:79:7a:ae:49:90:78:7c:c8:7e:d0:6d:4d:ce:fc:01:85:db:
         0e:c2:78:c9:a3:e6:53:38:06:fd:1c:fd:1d:1f:c3:fe:7a:27:
         be:c2:29:a9:b9:31:70:df:44:28:c4:d6:f9:65:7f:9b:32:12:
         96:eb:e9:7c:8b:09:c7:94:30:cd:2b:b7:9e:47:35:6e:50:be:
         0c:a4:a2:de:b3:72:0b:c6:b5:ca:a0:b4:54:a7:cc:ad:3e:48:
         58:c0:86:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeVcvCyDDaWgR1PpB+tKEgihULuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3
RDhDQ0Q0MTAeFw0yNTEyMjIxNjUyNDJaFw0yNTEyMjMxNzU0NDJaMDMxMTAvBgNV
BAMTKDc0QkNFMTg1NUZGRDNFNTU4QTkwMkY5MDM5MDAzOUE4OTk3NjI4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsedz5vpuJhJGq01DXI6JHOxZ
TAiDo77qbzhRngOUMnVHD3OIO5pZodiZClqCGGn+qO1RpO8zSOdODWFIvGvrLfaA
Mdj9Oqu6o5+ElvCsJXUUejp0bPO/qQ4qfPVGdopq3+aXiC/jurX+KNOx1CsIZ/hV
/DjjCy0MDcuvorA9IAREEYgVfK6aC2HPlu9c2rKnT1ZZRQGrKm9F5bGRCzllw6y2
VGi8eeQ70amqjULh4SzUXuDPXCjvAOtjr2eT/yCtzKdrbLLflUOSXyeTkitSn9VP
LlkaSmeI6nvPuMViF34pGMrnAl+ZwA2GDRIUcrZSMvkk4fDIOB9BqaA80gozAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdLzhhV/9PlWKkC+QOQA5qJl2KCUwHwYDVR0j
BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI
N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF
QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z
QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASvJq9xVPek6taXu6CRJAliuRQHw6AhlpKfveUnx/uQyFM+flsoeKK+NA7bbb
31+z4rl4krLPviTsxz8FU3XvTsELZRV86+G1r7cco+QAOMKIYqyX3Ogt9gaY6GUr
SManOhKbeiE15KmuaeDCfiWzmOuC7PbisTkRdX2Srqu4JE9zcLTcbM5U4OL1JKll
3kKPKYn6F4brfF2TsYtcxiMnK6y1dnl6rkmQeHzIftBtTc78AYXbDsJ4yaPmUzgG
/Rz9HR/D/nonvsIpqbkxcN9EKMTW+WV/mzISluvpfIsJx5QwzSu3nkc1blC+DKSi
3rNyC8a1yqC0VKfMrT5IWMCGOg==
-----END CERTIFICATE-----