This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json) Hash identifier: Qzuyctevt+r5GSH8jfvfACfGDcPqdU0lY06rfpXw5ME= Subject key identifier: 2D:E6:47:4B:E5:2F:6C:86:37:6C:43:64:00:F1:39:94:3F:9B:22:10 Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 16EAE73272BC1075C7F5260E73AE89AAAE5470F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft Manifest number: 020A Signing time: Mon 05 Jan 2026 17:03:09 +0000 Manifest this update: Mon 05 Jan 2026 16:58:09 +0000 Manifest next update: Tue 06 Jan 2026 18:59:09 +0000 Files and hashes: 1: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=) 2: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=) 3: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=) 4: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: OodvzKlKUtipWi+geRZ4uHjbTGaoyNtT0V0clJ8Oigk=) 5: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=) 6: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=) 7: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=) 8: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 Jan 2026 18:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:e7:32:72:bc:10:75:c7:f5:26:0e:73:ae:89:aa:ae:54:70:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Jan 5 16:58:09 2026 GMT Not After : Jan 6 18:59:09 2026 GMT Subject: CN=2DE6474BE52F6C86376C436400F139943F9B2210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:45:37:18:13:f9:45:f7:dd:ae:5f:23:09: e0:44:55:7f:6e:3d:54:ec:28:35:bf:68:bc:41:24: f5:3f:14:d7:2f:99:87:7d:49:4f:f8:de:5c:d1:7e: 35:d2:f4:63:72:39:d5:42:66:55:3a:fc:76:6c:71: b2:ad:a4:8f:26:45:f6:33:2b:a9:a5:82:7b:74:5b: a9:68:ed:0f:a8:e2:14:77:43:e3:db:cf:83:d8:4f: b9:84:ec:e8:b8:72:6a:15:0c:00:bd:24:60:a1:70: 8e:aa:c4:8e:b1:8d:7f:f6:32:4c:8b:a0:36:36:f7: cc:3f:36:fe:42:77:32:f3:c1:f0:33:75:69:82:a0: e3:ec:72:9f:c1:77:0b:a0:70:e2:a1:7e:3c:4b:e7: 34:9e:96:47:7e:ff:d1:f6:e3:20:cf:e4:75:c8:54: bb:c3:cc:55:cf:33:df:4b:2b:21:05:b3:df:d1:e0: 6a:73:68:3c:ed:e9:63:ef:1b:a6:fa:53:07:30:f6: e1:97:68:17:2e:58:dd:6e:05:8f:cd:b8:20:3d:d9: 74:46:06:82:51:3a:43:d6:c5:a0:8a:dc:08:a2:8c: 6b:c2:91:98:77:ea:0e:ab:e4:a4:3d:d5:a1:4f:01: 44:c6:32:4a:9e:b4:e3:91:86:8c:49:da:59:e8:2c: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:47:4B:E5:2F:6C:86:37:6C:43:64:00:F1:39:94:3F:9B:22:10 X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b2:c2:85:5c:8d:14:5a:bd:dd:39:3a:e0:59:88:7e:9b:e2: 9e:c3:fe:55:6a:92:21:03:88:3c:45:31:77:99:f6:60:86:90: e0:7b:d4:61:15:d4:83:b8:02:f6:83:09:07:ea:91:b1:9a:fe: 6f:e8:cf:e6:0e:e4:a4:e1:13:de:7f:a9:90:98:fc:af:d8:72: 68:1d:65:9d:81:3c:49:55:30:61:46:15:c0:3d:50:89:d0:cd: ad:bb:9f:84:45:b4:7b:63:a1:df:82:f8:9c:13:c4:cc:47:92: 9f:38:e7:6f:8e:00:bb:be:a6:85:6c:13:2d:75:df:78:3e:83: 6a:ed:7e:98:21:0c:eb:7d:04:85:9a:c4:c7:22:9d:2f:27:db: 41:98:4f:ab:ab:e0:8e:2d:e6:4b:2a:25:9d:83:bc:5d:34:80: 34:3f:61:83:82:89:cd:8f:93:23:d5:d6:bd:48:61:03:ac:fd: 8e:b1:4a:fb:0a:92:91:c7:27:24:d1:08:5e:18:8b:4b:d3:18: 68:18:e8:79:aa:6b:f5:1d:02:b3:a9:24:0f:0a:cf:d0:0e:3c: f4:3f:ed:3c:f5:b6:4d:0e:af:6c:4a:c6:74:12:b9:32:a1:8e: 9d:47:c2:fc:02:36:7f:7b:db:3c:63:5c:b0:c3:2d:49:f9:0b: b6:96:16:0a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUFurnMnK8EHXH9SYOc66Jqq5UcPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNjAxMDUxNjU4MDlaFw0yNjAxMDYxODU5MDlaMDMxMTAvBgNV BAMTKDJERTY0NzRCRTUyRjZDODYzNzZDNDM2NDAwRjEzOTk0M0Y5QjIyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpUU3GBP5Rffdrl8jCeBEVX9u PVTsKDW/aLxBJPU/FNcvmYd9SU/43lzRfjXS9GNyOdVCZlU6/HZscbKtpI8mRfYz K6mlgnt0W6lo7Q+o4hR3Q+Pbz4PYT7mE7Oi4cmoVDAC9JGChcI6qxI6xjX/2MkyL oDY298w/Nv5CdzLzwfAzdWmCoOPscp/BdwugcOKhfjxL5zSelkd+/9H24yDP5HXI VLvDzFXPM99LKyEFs9/R4GpzaDzt6WPvG6b6Uwcw9uGXaBcuWN1uBY/NuCA92XRG BoJROkPWxaCK3AiijGvCkZh36g6r5KQ91aFPAUTGMkqetOORhoxJ2lnoLDGHAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQULeZHS+UvbIY3bENkAPE5lD+bIhAwHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2dF V1Q4YTRHZWNzMmZZNTZxUWQ5aTFVcktUbmVkeXFMWnNSZVlqdVh3NGUvMC8zQjYw QzAzQzA4MzQ5ODQ1NzBFNThEQjlCREU1RDNERDk3NkIwNzE3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA B7LChVyNFFq93Tk64FmIfpvinsP+VWqSIQOIPEUxd5n2YIaQ4HvUYRXUg7gC9oMJ B+qRsZr+b+jP5g7kpOET3n+pkJj8r9hyaB1lnYE8SVUwYUYVwD1QidDNrbufhEW0 e2Oh34L4nBPEzEeSnzjnb44Au76mhWwTLXXfeD6Dau1+mCEM630EhZrExyKdLyfb QZhPq6vgji3mSyolnYO8XTSAND9hg4KJzY+TI9XWvUhhA6z9jrFK+wqSkccnJNEI XhiLS9MYaBjoeapr9R0Cs6kkDwrP0A489D/tPPW2TQ6vbErGdBK5MqGOnUfC/AI2 f3vbPGNcsMMtSfkLtpYWCg== -----END CERTIFICATE-----Generated at Tue Jan 6 11:00:23 2026 by rpki-client