This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
File:                     296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json)
Hash identifier:          vImd6+/3cH5AE/mBukrQYpz9YkZHSwjHBh0z91XhVkk=
Subject key identifier:   28:27:B8:D1:B8:E2:82:9B:F3:9E:97:5D:BC:6B:BB:D8:D0:8A:40:D8
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       1CAB0DD0CCCFF3EA12C9A3D1E10C2121C40B6502
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
Manifest number:          0152
Signing time:             Sun 21 Dec 2025 00:44:45 +0000
Manifest this update:     Sun 21 Dec 2025 00:39:45 +0000
Manifest next update:     Mon 22 Dec 2025 00:52:45 +0000
Files and hashes:         1: 3137392e302e3137372e302f32342d3234203d3e20323730353634.roa (hash: HookaH1xG+0uVNOahIxghiyPvCC1vruoOgkrrWcOjcQ=)
                          2: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=)
                          3: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=)
                          4: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=)
                          5: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=)
                          6: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=)
                          7: 3137392e302e3137392e302f32342d3234203d3e20323730353634.roa (hash: z4tvoIY0Hh/hHU4Z4MuC98VYirdLEAUQGN2zlQtkOg8=)
                          8: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=)
                          9: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=)
                          10: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=)
                          11: 3137392e302e3137362e302f32342d3234203d3e20323730353634.roa (hash: NMbXwuMwhtT0ATTZ8U3lu3ihN4eGbajLgaaN0aFWB30=)
                          12: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: VcYean+ewD3eqJmbqpPvfV6AE0HwxJzPoQ++5hiosQY=)
                          13: 3137392e302e3137382e302f32342d3234203d3e20323730353634.roa (hash: W2be6dT5MbMfVP2psCvKFpY6oT+Pg4EtwumJbKoJYEM=)
                          14: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=)
                          15: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:0d:d0:cc:cf:f3:ea:12:c9:a3:d1:e1:0c:21:21:c4:0b:65:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Dec 21 00:39:45 2025 GMT
            Not After : Dec 22 00:52:45 2025 GMT
        Subject: CN=2827B8D1B8E2829BF39E975DBC6BBBD8D08A40D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:56:1b:a7:e8:69:fc:59:2f:27:f7:a2:05:
                    7b:8f:88:e9:bb:f9:77:b6:65:8e:e9:0b:c9:f5:19:
                    a7:f9:c1:8a:48:2a:52:67:12:a7:45:9a:9e:b8:4c:
                    d3:24:62:2a:1f:d0:fe:2d:77:31:3b:18:31:30:8f:
                    2c:90:f2:7b:9f:0d:19:0b:60:15:80:6a:f8:ec:55:
                    58:a2:5e:70:f7:69:52:10:be:73:62:a5:07:e3:c2:
                    1e:58:f4:94:0d:42:7b:ef:fd:ea:7d:03:24:99:98:
                    45:3c:98:82:50:2f:8a:1f:13:af:f5:96:ac:01:91:
                    a8:3f:b5:91:0a:31:32:e3:5c:27:42:45:d2:63:0a:
                    a1:64:d6:c2:22:e9:ab:7d:7d:71:33:83:b0:c7:1d:
                    b9:03:50:69:a7:c1:d8:65:fe:73:7c:cf:ea:3c:ec:
                    e9:db:dc:69:75:43:d6:2b:5a:27:3d:c1:a9:f1:a0:
                    a2:ea:88:5a:88:5b:ad:d5:98:48:2b:6b:9c:50:c8:
                    6e:a7:ae:33:7f:9a:d3:5a:c1:a8:f2:ef:3e:6c:d8:
                    e8:73:84:df:55:0c:f0:14:7a:1e:67:44:ba:6a:e6:
                    76:5c:4e:7f:9b:33:c7:96:96:0d:63:e2:53:2a:63:
                    9e:1c:98:e1:36:6f:13:62:46:fe:74:00:5d:dc:54:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:B8:D1:B8:E2:82:9B:F3:9E:97:5D:BC:6B:BB:D8:D0:8A:40:D8
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:ad:9a:35:ec:15:12:4e:5e:d0:6e:81:91:b3:2f:68:64:
         ad:4f:14:e6:bd:ea:d9:20:e4:95:2f:18:5e:51:bd:25:7c:05:
         fc:94:62:46:42:b7:07:c5:94:a2:72:4a:f6:1f:99:f3:0a:02:
         d6:25:d0:d2:77:1b:fe:ed:a8:eb:db:12:a3:5a:55:5f:6e:38:
         d2:c9:1d:67:e2:66:e3:af:af:fe:a8:ef:eb:54:a4:39:55:f5:
         91:7a:ca:5e:31:c0:b1:f8:53:c6:b5:13:3f:e6:b8:25:41:27:
         fe:4a:9d:24:ec:39:db:c6:da:a6:8e:d1:a6:67:18:8f:47:d8:
         d9:96:bb:db:90:54:0b:44:fc:02:1f:c4:2b:db:9e:31:20:fb:
         ad:5d:96:28:71:36:46:c2:5e:ae:34:0a:98:a9:56:f7:7d:b6:
         d6:1a:ce:8c:5e:f2:1d:d2:20:2f:5f:8e:2b:5b:ce:f7:c4:24:
         42:ad:0b:63:19:23:ed:6b:9a:78:9b:5c:c5:d5:34:0a:1d:e4:
         78:4a:01:d0:e8:00:1a:42:af:06:3c:6b:28:00:f5:2a:5b:e8:
         d2:2b:d5:2b:6e:ef:1c:bb:9a:6e:2d:96:df:6c:41:00:7c:9a:
         7c:75:b8:f5:b7:34:e6:46:1c:d2:aa:94:fb:56:a0:f3:f8:12:
         87:56:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:32:43 2025 by rpki-client