This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
File:                     7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft (raw, json)
Hash identifier:          gDppaBX/WT7kC8ineCYwLrggUadPu619/F39Jz5QOQk=
Subject key identifier:   A3:0B:C7:E2:7D:77:CC:95:F9:FB:F6:31:12:85:4B:96:98:E4:BA:51
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       35F898E09F7E67532F8C419253A56C746C9A3C3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
Manifest number:          029B
Signing time:             Sun 21 Dec 2025 21:09:04 +0000
Manifest this update:     Sun 21 Dec 2025 21:04:04 +0000
Manifest next update:     Tue 23 Dec 2025 00:56:04 +0000
Files and hashes:         1: 7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl (hash: w3iMgInRGEBG2vQoi6BvQ6sijqY5R/1hMQzwvb/THUs=)
                          2: 3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa (hash: A+K2SOqUqSSa8DXz8l6SudubL6ufkSKuN318IyGW+cE=)
                          3: 323830343a3539303a3a2f33322d3438203d3e20323632353233.roa (hash: UIZVw5CVrMJVVAYGVNA/F8mJ8zczqqcpB7QFBw6FUCw=)
                          4: 3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (hash: zVBroeCJA2nYjdOPPJkMg5gv2wVlLTMnTjsCADq/4Ok=)
                          5: 3137302e38332e32302e302f32322d3234203d3e20323632353233.roa (hash: QAmlgUCDSPgAJEAIQJ+f/LOKcTzFbNILzCd0fOiiFyg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 00:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:98:e0:9f:7e:67:53:2f:8c:41:92:53:a5:6c:74:6c:9a:3c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Dec 21 21:04:04 2025 GMT
            Not After : Dec 23 00:56:04 2025 GMT
        Subject: CN=A30BC7E27D77CC95F9FBF63112854B9698E4BA51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:7b:61:54:d8:9a:bd:94:81:ab:52:0c:67:
                    61:40:a9:87:77:23:25:96:c7:14:7a:e3:ae:8e:76:
                    33:43:99:75:32:e8:a5:ce:b3:fc:58:a7:84:88:41:
                    28:90:b3:e9:86:75:05:25:3f:63:c0:26:48:56:2e:
                    fa:03:f8:d9:16:b6:e2:41:44:62:cb:4a:e2:73:5a:
                    7a:34:01:fa:da:88:2f:6e:54:a5:7d:5a:e5:14:00:
                    d1:35:9f:cd:5d:96:11:fc:19:e1:8c:d5:63:c0:8e:
                    bd:8d:a5:57:81:b5:73:30:74:37:16:94:7c:53:e6:
                    05:1b:76:b9:c9:ae:0d:21:25:be:71:35:07:6f:d8:
                    f7:a4:3d:53:4d:e2:23:6a:79:f1:57:8e:6e:7a:b9:
                    30:c0:67:7d:3b:8e:15:a0:f6:a8:68:d5:ae:67:80:
                    16:5d:e3:e3:4d:93:05:e2:26:83:49:ed:f3:e4:34:
                    f1:ed:6c:e1:ff:93:d3:f4:93:d2:5b:d3:a8:3c:04:
                    5b:31:c6:da:18:8e:bb:be:15:06:27:84:3e:26:a2:
                    43:99:2a:6e:22:b5:b8:fd:43:a9:ad:bb:18:72:e9:
                    15:f9:3c:c4:0d:8f:1b:47:cd:fc:09:f4:5a:86:d1:
                    a0:13:a1:9e:4b:4f:ff:c5:76:fe:81:c0:15:72:3f:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:C7:E2:7D:77:CC:95:F9:FB:F6:31:12:85:4B:96:98:E4:BA:51
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:ac:97:a7:57:42:17:6a:f1:1e:20:2c:df:0e:3e:c2:9e:
         a9:1f:66:1b:7a:fb:f9:0b:ef:3a:ea:cc:ca:5a:46:0f:bf:96:
         ce:69:06:d0:cf:2f:a2:d1:eb:b9:28:fa:05:4f:56:65:d0:3c:
         a0:aa:4f:7b:5a:fe:e6:7a:ed:80:58:32:1c:a0:12:6e:6c:46:
         87:c6:0a:5a:5c:1b:a4:b8:8f:5c:c8:53:92:26:0f:7a:1d:13:
         25:8d:b0:45:fb:2e:08:31:6b:9c:90:bb:da:c7:87:ff:ae:cc:
         4e:a0:3f:b0:3b:3d:8b:92:7d:cc:fe:77:f7:3b:4b:2a:0d:30:
         38:db:f5:39:d3:9e:9d:4e:36:bb:02:97:35:77:1d:36:d1:f2:
         29:60:29:5c:e9:06:41:99:d7:68:c0:18:fe:fd:53:fd:d1:5b:
         64:df:bb:48:c5:ad:47:61:9a:2a:c8:c1:e2:29:4c:00:65:b9:
         0c:31:a3:75:3d:2d:3c:23:b6:ab:14:c6:c2:10:9f:fc:e1:f9:
         e0:41:4f:2b:a0:b0:14:d5:93:04:8a:b9:b9:a6:e4:48:c1:b1:
         92:fe:5d:f3:e8:80:fc:9f:3b:3d:8d:64:91:e6:45:08:0f:75:
         15:90:c5:02:86:14:07:f9:82:3f:9b:ee:49:de:a7:bf:62:e2:
         fd:ba:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:54:24 2025 by rpki-client