This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
File:                     A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json)
Hash identifier:          if5/cDHe1Wd69P/7Ypj8GIgly75C4atQGKgwK4ijXZs=
Subject key identifier:   79:D5:F5:7A:F2:88:AB:CB:4E:C8:9E:7D:45:38:9C:54:BF:05:D5:9C
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       09EBA14FFA198E4AB46C74C38CE231E5FE9A38D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
Manifest number:          034D
Signing time:             Sat 20 Dec 2025 02:15:34 +0000
Manifest this update:     Sat 20 Dec 2025 02:10:34 +0000
Manifest next update:     Sun 21 Dec 2025 03:51:34 +0000
Files and hashes:         1: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: +DHHjsus6rvmQukhbQXRc30kQTzUp+xEzFA2CntqNck=)
                          2: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=)
                          3: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: r8cnAZ/4v8S40dmgDmHooqNyAvqo3wuz9559tBYcDq0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:eb:a1:4f:fa:19:8e:4a:b4:6c:74:c3:8c:e2:31:e5:fe:9a:38:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Dec 20 02:10:34 2025 GMT
            Not After : Dec 21 03:51:34 2025 GMT
        Subject: CN=79D5F57AF288ABCB4EC89E7D45389C54BF05D59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d1:2a:3d:81:6a:0a:2c:77:74:37:5b:10:66:
                    f6:a7:25:0b:3c:a8:91:4b:7f:c4:81:00:91:86:a3:
                    76:c4:6a:16:5d:35:74:10:52:4c:5a:62:55:78:c8:
                    6d:12:7c:e5:48:50:77:e8:24:41:97:41:72:91:ac:
                    82:55:9a:4a:b2:f2:87:c9:f4:21:aa:c6:97:84:4a:
                    5c:1c:ee:89:98:31:9e:6a:cf:2a:8b:48:ba:78:36:
                    0b:ab:01:fb:cf:40:6a:10:a9:ff:4f:6d:ea:2d:42:
                    d3:55:3a:12:f5:5f:4c:e6:0e:08:d3:da:3a:51:6b:
                    f9:48:6d:0c:64:c5:0f:34:63:d0:45:2f:6d:b4:89:
                    99:66:01:58:cb:8d:05:d0:ab:2c:c7:9b:81:62:07:
                    af:55:31:53:31:4a:bd:0b:52:a7:75:b7:a4:ad:58:
                    d4:15:f9:99:ae:e5:5c:cb:04:49:f9:08:8c:d3:60:
                    04:8b:21:8c:e7:e1:31:9f:31:ab:7c:c2:86:e8:0a:
                    b5:b2:b6:d7:4c:f0:35:3d:55:68:cd:94:ed:55:f5:
                    db:e4:3d:45:1e:aa:92:db:01:07:0d:a6:96:a5:7a:
                    e9:97:0d:c1:3c:a1:12:66:dd:57:b7:a7:f3:47:71:
                    92:71:7f:09:f3:60:12:b6:bc:99:81:92:a0:92:8c:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:F5:7A:F2:88:AB:CB:4E:C8:9E:7D:45:38:9C:54:BF:05:D5:9C
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:ab:d1:c6:6e:3e:6a:56:89:3a:87:af:d5:11:2c:2e:86:
         b5:14:e6:04:9b:71:92:9b:06:86:3f:2e:f7:22:b5:a9:20:1e:
         f2:b5:d6:a3:d9:1e:3d:df:0b:ef:46:02:74:42:f9:f4:c2:bf:
         a6:5f:c6:ca:d6:73:08:a2:88:8e:c7:af:e3:25:97:6b:4b:e6:
         73:8f:f4:bc:2b:b6:e8:5f:02:0d:34:36:15:40:29:ad:f8:c9:
         70:e7:af:79:99:6d:98:09:af:b5:a6:27:6c:b3:8e:83:d9:ce:
         46:b7:e4:fc:a7:cf:3a:6a:d4:ba:59:0a:9e:e4:c6:cf:d9:62:
         96:47:83:c0:26:8f:d0:5b:0d:fe:9e:af:16:d2:02:c2:b1:6c:
         85:df:03:7c:ad:c7:55:c1:f2:7a:18:f6:e8:76:64:4d:ac:fd:
         3a:62:63:d4:bd:76:23:55:1f:e1:68:5e:eb:70:52:2d:4f:7b:
         2d:8b:b0:af:6e:e2:b2:8d:24:ac:60:1f:f6:dc:86:c4:9e:27:
         aa:b6:77:b7:0d:e9:25:14:3f:4f:56:e9:1a:7f:df:36:3e:a2:
         26:20:59:74:2d:e9:23:83:c2:d3:35:3b:c2:d6:8a:64:c3:70:
         b5:07:3c:40:75:50:dd:d0:82:5e:df:d5:92:ac:dd:89:86:94:
         d0:5a:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:10:31 2025 by rpki-client