This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
File:                     7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft (raw, json)
Hash identifier:          yU14S1W7I0RSNEXWVJ4IM5YHx2onsXpNrZwPh0bj1OM=
Subject key identifier:   36:DE:F9:93:73:C8:8F:0F:7E:D6:24:F8:BA:7B:13:FD:2E:A2:3D:FB
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       48DFE4F1E55FDE73F9F9ECE145B6008D414B50B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
Manifest number:          0299
Signing time:             Sat 20 Dec 2025 09:58:50 +0000
Manifest this update:     Sat 20 Dec 2025 09:53:50 +0000
Manifest next update:     Sun 21 Dec 2025 11:41:50 +0000
Files and hashes:         1: 3137302e38332e32302e302f32322d3234203d3e20323632353233.roa (hash: QAmlgUCDSPgAJEAIQJ+f/LOKcTzFbNILzCd0fOiiFyg=)
                          2: 7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl (hash: hvhvorAtlRDoTsPHlMaihaBe1GXJA6HPBqhIL/rNpSI=)
                          3: 3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (hash: zVBroeCJA2nYjdOPPJkMg5gv2wVlLTMnTjsCADq/4Ok=)
                          4: 323830343a3539303a3a2f33322d3438203d3e20323632353233.roa (hash: UIZVw5CVrMJVVAYGVNA/F8mJ8zczqqcpB7QFBw6FUCw=)
                          5: 3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa (hash: A+K2SOqUqSSa8DXz8l6SudubL6ufkSKuN318IyGW+cE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:df:e4:f1:e5:5f:de:73:f9:f9:ec:e1:45:b6:00:8d:41:4b:50:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Dec 20 09:53:50 2025 GMT
            Not After : Dec 21 11:41:50 2025 GMT
        Subject: CN=36DEF99373C88F0F7ED624F8BA7B13FD2EA23DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:d3:6a:10:89:9a:37:5c:10:41:9f:cc:80:
                    ae:dc:82:92:56:fe:49:03:f1:55:d4:d9:62:eb:af:
                    12:fa:ea:6a:3c:68:9f:9f:45:10:73:2f:1e:80:bf:
                    07:5c:18:69:c3:52:3d:14:3d:47:d6:bc:02:0a:cf:
                    e0:37:cf:83:e4:de:ac:be:88:c7:5f:72:55:ff:96:
                    2d:2b:7e:81:92:c0:ac:93:f5:57:25:25:f3:24:50:
                    ac:80:47:4d:28:55:90:29:f5:0b:36:0a:8d:b8:d2:
                    02:c9:53:7d:0c:a9:ab:d2:73:4d:67:d4:f9:ab:f7:
                    75:f6:57:3f:27:32:a9:18:7f:ce:e9:db:bb:f8:65:
                    22:f8:ad:fd:01:d3:2a:41:e2:ea:7b:9c:1c:6a:d9:
                    03:b2:3d:46:33:ad:93:a0:cb:fe:e7:78:ba:c6:b2:
                    ee:8a:65:cb:9e:ed:2e:30:49:cf:43:e2:b9:97:74:
                    5c:0e:84:68:4b:75:2e:a9:36:49:18:74:53:c2:45:
                    60:45:11:d1:08:34:57:b6:08:72:5c:75:c5:19:0e:
                    2e:17:6e:ac:1e:98:8c:69:ef:f1:00:ac:f4:e7:7f:
                    1f:8e:35:1a:38:1f:8d:e6:a4:91:a7:4f:3b:f1:2f:
                    f1:f9:81:2e:60:ed:b2:cf:80:f8:dd:c7:ab:eb:38:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DE:F9:93:73:C8:8F:0F:7E:D6:24:F8:BA:7B:13:FD:2E:A2:3D:FB
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:e7:0e:25:70:31:20:a8:ce:99:93:4f:89:3d:d0:53:c0:
         cb:41:ae:37:be:a3:15:b7:9e:32:c0:3b:3f:82:7c:f8:af:66:
         3e:56:11:fb:2b:cf:24:23:99:84:65:45:47:8f:04:58:d5:ae:
         e3:dd:f7:e7:89:ab:11:c7:03:e2:5e:88:31:f7:d8:9d:b3:66:
         39:af:28:d9:55:df:c6:a7:14:01:59:8f:f8:49:b4:3b:25:00:
         ae:01:3c:70:cf:77:10:3d:20:df:3e:60:ad:d2:ba:d5:d4:87:
         91:06:41:02:9c:69:01:bf:6c:80:d7:fb:c9:1d:6f:c9:cd:47:
         c9:ed:e6:1e:78:ba:7f:34:0d:bd:a3:86:88:a3:c5:fe:28:e9:
         42:cb:58:fa:31:95:76:5c:db:a2:26:ba:05:8d:77:c7:69:49:
         c1:8b:bb:09:98:cf:a9:78:b9:c8:0b:00:7d:15:c2:3f:fa:1b:
         53:2b:3d:c6:c4:31:ba:a4:2d:f0:fa:74:de:31:b1:9a:58:a7:
         a3:4e:e1:25:e3:4b:35:2d:de:d2:0b:86:37:f5:d7:df:93:eb:
         43:9a:97:8d:6b:7b:64:a4:d5:46:7a:fa:66:c8:b1:bb:f0:a9:
         95:81:21:1c:1c:05:a0:1b:c6:3a:dd:6f:5a:42:0d:ae:e7:ed:
         a3:ff:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:48 2025 by rpki-client