This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          ERybLaDjEXboHKz8nQL8AArrH4J/pKrw4Pr5X3+x1Z4=
Subject key identifier:   27:10:A8:05:95:47:70:78:98:31:18:DB:BD:25:47:C4:48:51:54:63
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       5A9BC61BDF814806DF0F729C915C652A2455EB2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          0224
Signing time:             Sun 25 Jan 2026 10:42:38 +0000
Manifest this update:     Sun 25 Jan 2026 10:37:38 +0000
Manifest next update:     Mon 26 Jan 2026 11:36:38 +0000
Files and hashes:         1: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
                          2: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: pIZIOOYgquEsve7E5rAoXqoooWcbX9E7DVCuR4cXhPg=)
                          3: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
                          4: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
                          5: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
                          6: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
                          7: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
                          8: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9b:c6:1b:df:81:48:06:df:0f:72:9c:91:5c:65:2a:24:55:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Jan 25 10:37:38 2026 GMT
            Not After : Jan 26 11:36:38 2026 GMT
        Subject: CN=2710A80595477078983118DBBD2547C448515463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:14:52:63:03:3e:b7:96:58:a3:c0:29:29:
                    80:af:fb:40:c8:f6:81:df:7a:ae:62:da:cb:69:59:
                    cb:b9:82:f6:28:cb:3f:43:4e:ab:b0:f8:06:de:a6:
                    49:0a:4e:27:df:52:39:fd:45:22:c1:ca:cc:2e:00:
                    82:43:01:bd:58:25:21:e9:91:be:c3:23:70:7e:b1:
                    a1:ea:6f:53:f3:85:f8:18:7b:fd:33:b5:fc:28:60:
                    8c:e4:89:b5:33:15:68:64:3b:3a:f0:e5:25:bf:9a:
                    04:6b:94:f6:7d:e2:99:69:cf:c8:09:c4:fa:5b:37:
                    66:3d:74:de:95:ef:96:0e:91:6e:77:2f:e9:58:a9:
                    72:44:bc:51:e1:2f:d0:0f:6c:d8:ef:3d:0c:c4:1c:
                    60:1a:3e:f5:2a:c6:ba:00:b9:da:b5:ea:6d:95:89:
                    92:9b:c8:91:21:e9:b5:7b:d2:da:0a:14:fc:a6:64:
                    3b:ef:ee:37:81:1d:5c:43:9f:52:6c:9a:f7:e1:9a:
                    e0:02:c2:1c:f7:b3:9e:4e:a5:bb:9e:b5:f4:88:5e:
                    a0:3e:c6:4c:e9:af:6b:a6:be:58:21:c8:41:40:13:
                    93:58:85:72:cf:0f:b8:e1:d5:0f:7a:51:2a:3b:98:
                    e1:af:e8:5e:0e:67:ff:1e:d6:75:6a:54:d6:4b:46:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:A8:05:95:47:70:78:98:31:18:DB:BD:25:47:C4:48:51:54:63
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:20:ef:5b:9f:73:e5:b7:46:ee:25:e7:05:34:b8:3b:bc:
         99:ee:e5:29:9d:3b:5d:bf:04:c7:6e:50:99:31:a7:57:5b:a3:
         ad:d9:af:9d:17:7e:d1:34:a9:80:0e:3a:b2:98:7a:87:23:6b:
         11:27:6a:07:f7:c0:db:26:9b:3a:88:10:15:bd:c2:de:4a:7a:
         d4:5b:f8:68:c7:30:af:96:ca:f6:bf:e1:a7:04:ad:43:38:e6:
         33:f8:a4:8c:dc:25:d7:4a:b1:8e:f4:27:74:c4:2b:9d:9f:d6:
         a6:54:97:80:27:3c:27:f1:73:63:55:e5:86:52:0f:c0:f8:07:
         65:a1:0f:29:64:22:52:ba:9e:e1:3c:6d:da:4b:f0:54:de:e9:
         02:d6:3f:b7:4b:fe:66:82:50:fc:32:0c:5d:c7:58:6c:92:ed:
         6e:a4:8f:7b:ac:d5:ee:df:ea:5d:31:72:26:c3:d2:74:74:11:
         51:5b:68:d6:49:7c:d3:2f:56:d2:8d:69:e5:aa:de:56:75:99:
         66:3f:89:e8:ae:79:28:ae:15:80:22:df:1d:f9:ce:26:97:57:
         90:6d:dd:1d:40:d8:d8:c2:eb:38:97:25:52:78:d2:ef:27:86:
         40:a5:e2:af:b9:09:b7:97:dc:d1:78:28:d3:1e:d7:7e:0f:dc:
         cf:12:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:45 2026 by rpki-client