This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          WM0f3LfofC6TML/ryEDaAKj6u0RqFyLtxYYnDziUn+0=
Subject key identifier:   9E:E2:66:EA:97:AA:E2:63:EE:CE:79:D6:EE:A3:77:7A:41:C4:64:10
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       746C859603734F79C9D50870037279E3C262399B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          01E2
Signing time:             Sat 06 Dec 2025 06:46:17 +0000
Manifest this update:     Sat 06 Dec 2025 06:41:17 +0000
Manifest next update:     Sun 07 Dec 2025 08:27:17 +0000
Files and hashes:         1: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
                          2: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
                          3: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
                          4: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
                          5: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: eRzR4Z18nvlJ4sOrPGvTphp8+Bb1y0sQkdJSuOUY5mU=)
                          6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
                          7: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
                          8: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6c:85:96:03:73:4f:79:c9:d5:08:70:03:72:79:e3:c2:62:39:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Dec  6 06:41:17 2025 GMT
            Not After : Dec  7 08:27:17 2025 GMT
        Subject: CN=9EE266EA97AAE263EECE79D6EEA3777A41C46410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:41:16:62:00:b8:9b:f9:70:0b:98:cd:2f:
                    16:57:b7:03:0e:f8:13:be:dd:08:8b:e3:1f:e2:55:
                    6b:38:a3:4c:06:80:51:60:45:14:70:b9:53:c0:38:
                    16:2d:a3:f0:54:99:bb:bd:9f:87:e2:90:79:2f:0f:
                    37:d7:dc:eb:4c:bb:f4:8f:15:d1:a8:71:b7:c1:33:
                    b6:b2:83:4f:39:bc:6a:9b:57:dc:aa:2b:f7:5c:58:
                    36:a9:f5:e9:a1:52:bb:11:6d:f3:c0:6c:37:f3:36:
                    a0:e0:b4:3e:1f:7d:ac:ab:06:f4:a2:02:27:a5:72:
                    41:27:89:02:81:92:87:88:9c:f0:d8:b5:23:d2:71:
                    62:99:9c:e3:5e:7d:70:89:47:72:5d:37:8c:63:dd:
                    87:d8:3c:6f:fa:ce:cb:3c:11:72:a9:46:1c:3e:b5:
                    85:2b:6d:49:15:b6:00:8e:08:e0:fc:31:5c:10:40:
                    4e:5f:25:0a:46:b6:b1:fd:84:9e:82:d6:9e:a3:67:
                    f7:5a:93:cb:4b:80:08:a2:4d:da:58:54:5b:df:47:
                    bd:b4:8b:ce:8c:f4:9b:e4:e6:2e:00:f3:0c:ea:04:
                    87:bd:80:04:ca:58:24:3a:68:76:fb:93:3e:fc:af:
                    76:16:aa:84:ce:a9:25:a0:96:f3:fb:6f:4c:d1:28:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:66:EA:97:AA:E2:63:EE:CE:79:D6:EE:A3:77:7A:41:C4:64:10
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:f9:7f:c7:1e:5a:eb:50:5e:76:9d:c3:15:5d:2a:e3:ce:
         96:0b:be:43:48:93:ee:53:d0:43:87:92:55:3a:07:84:7e:12:
         25:b8:11:82:f2:bd:fe:b9:bd:94:d0:8f:8c:00:ed:95:5d:f4:
         8f:97:41:c6:2a:97:9a:63:2b:9e:fc:4d:d3:d5:45:3d:cc:d1:
         38:9b:14:9c:05:d4:1c:2c:27:d1:ce:e9:58:cf:3d:99:96:bd:
         9d:3d:c0:05:6e:d2:fc:34:d1:d6:7b:d5:f1:f9:37:a2:99:3d:
         bc:33:a7:e5:43:3d:06:c3:6c:8b:c4:e6:20:b0:a4:38:ee:17:
         c7:34:05:07:d5:77:6c:91:73:1f:cb:81:96:0f:d8:91:8e:ce:
         0e:0f:d8:05:df:ee:50:9c:5d:cf:23:c5:85:c3:ec:2e:97:ef:
         14:5c:ea:4e:1a:b1:53:14:c2:79:10:de:69:bf:05:02:61:67:
         32:66:0a:0f:03:75:2a:e7:ab:ed:6e:d8:9c:06:21:f1:aa:7a:
         14:32:76:1e:89:5a:c7:d3:f1:47:0f:b3:ab:74:f4:3b:ee:14:
         39:29:18:91:b9:4d:bd:fa:93:f5:b0:be:76:f1:37:b5:d6:06:
         8b:45:72:06:9c:66:16:70:5b:78:ae:de:07:6d:ea:b9:4a:8f:
         10:62:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:40 2025 by rpki-client