This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
File:                     229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft (raw, json)
Hash identifier:          Dxwegbsq/asZf4uWPLPtSa3/19nENtZeWiQEr2gPnMI=
Subject key identifier:   3F:A5:2C:B7:B5:C6:A0:F6:BD:AE:0A:64:B5:75:AE:7F:AF:24:BA:69
Authority key identifier: 22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF
Certificate issuer:       /CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
Certificate serial:       1D9C3428361F8403E71E6E62C449FB703438F272
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
Manifest number:          D3
Signing time:             Mon 22 Dec 2025 12:38:52 +0000
Manifest this update:     Mon 22 Dec 2025 12:33:52 +0000
Manifest next update:     Tue 23 Dec 2025 14:14:52 +0000
Files and hashes:         1: 3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (hash: EviOo/e14n6iGDXpo9WcpNiSM/ryw379BmrBxMsZWUQ=)
                          2: 323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (hash: Z8hcM4Fs7TkbVISQhGVObSaac8C7SQ91HxK3mbC1W9Q=)
                          3: 229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl (hash: kyy2aEP0VBbj+HMT6SxeV78QCaJzYuDq0Uqr/MbgsNg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:34:28:36:1f:84:03:e7:1e:6e:62:c4:49:fb:70:34:38:f2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
        Validity
            Not Before: Dec 22 12:33:52 2025 GMT
            Not After : Dec 23 14:14:52 2025 GMT
        Subject: CN=3FA52CB7B5C6A0F6BDAE0A64B575AE7FAF24BA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:5a:07:8c:6d:fc:13:56:4e:40:dd:0e:b6:
                    64:25:2c:62:bb:82:c1:d2:9f:d2:e4:34:98:08:f8:
                    f7:b4:fe:ec:b9:cb:d1:ee:31:dd:2f:6b:9e:00:2e:
                    fc:0a:39:df:a9:e5:1c:79:76:21:6c:fd:17:31:5b:
                    de:17:be:30:cf:80:73:d6:48:21:82:d4:47:8a:68:
                    2a:b3:fd:bf:ff:18:5d:17:3f:42:7a:e2:cd:a2:b9:
                    5c:fa:99:cf:a3:0a:22:d1:b8:dd:e2:f4:58:dd:0c:
                    07:c2:de:5f:5b:36:d9:d1:3d:0f:c1:16:3c:d8:07:
                    ce:d6:17:5d:44:7c:ff:62:e8:7d:c2:f9:31:02:16:
                    27:96:e2:9b:55:eb:de:f7:c1:50:62:ef:38:9f:ec:
                    20:fa:34:db:20:f1:1a:9d:3c:51:d3:62:f3:4b:c6:
                    73:6e:a1:88:ee:43:25:76:7f:3f:15:e2:83:8b:e5:
                    ad:27:a7:b1:aa:9a:f2:50:7e:fc:f6:df:19:3b:ed:
                    ba:f5:a6:2b:e8:74:53:df:a9:1c:a3:9b:02:a7:99:
                    9d:c5:a7:c0:16:7f:b7:82:48:d6:09:a1:bf:8d:d4:
                    37:46:9f:c8:69:11:c1:8a:2a:c9:e9:b4:d6:45:b8:
                    bf:c3:46:a2:8f:72:53:0b:8f:ad:8e:83:f3:74:18:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:2C:B7:B5:C6:A0:F6:BD:AE:0A:64:B5:75:AE:7F:AF:24:BA:69
            X509v3 Authority Key Identifier:
                keyid:22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:3c:a0:ff:a1:3f:83:dd:21:e1:19:85:37:f0:14:92:fd:
         80:f5:b1:35:f9:53:95:ed:0d:25:38:0a:00:da:d8:6d:ae:cc:
         75:b5:dd:95:28:16:d0:a4:0d:25:62:7c:1e:86:78:a1:c6:67:
         9d:df:8c:50:0c:90:a3:b0:7b:7e:7f:76:fc:02:fb:28:a1:a9:
         94:94:46:b8:62:28:e2:56:da:39:04:d0:20:f8:de:be:b2:10:
         9f:2f:a8:a1:1a:a5:65:73:f2:90:d2:b7:bd:e1:f4:f0:d7:b9:
         09:ec:b7:bd:25:18:80:2c:9c:66:9f:4a:5b:02:68:0c:8c:80:
         78:dc:62:c3:7c:93:84:69:25:cb:cb:0a:2c:16:ed:50:d7:13:
         c5:6f:00:87:a3:31:4f:b5:00:e9:3c:da:32:2f:a4:25:3c:a9:
         94:d2:5d:f5:c6:3c:38:bd:82:87:1d:c2:bb:c1:a6:f9:ea:d0:
         53:47:a9:98:41:b3:64:ee:b8:7b:6e:b2:1a:46:c2:11:2d:ab:
         a8:11:e6:19:f1:a8:2e:82:8d:3d:db:ff:62:2e:1d:3c:d4:2e:
         7b:d9:a8:ed:c2:f7:db:14:55:0f:48:71:18:b7:cb:52:56:75:
         49:35:9d:42:93:09:b4:7d:16:4c:aa:10:1d:d9:f4:45:84:e7:
         9a:7c:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:40:59 2025 by rpki-client