This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
File:                     229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft (raw, json)
Hash identifier:          vrdMwx9s6S9YD9CesjU3Q29MMA3o/1/A03jGk9Uwov8=
Subject key identifier:   A1:70:BC:9F:59:5D:6E:C0:43:75:75:70:39:AF:11:01:7E:03:37:E3
Authority key identifier: 22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF
Certificate issuer:       /CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
Certificate serial:       578F44BCBD818FB4E4B63F37961ED057CED1EB5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
Manifest number:          D5
Signing time:             Wed 24 Dec 2025 01:53:52 +0000
Manifest this update:     Wed 24 Dec 2025 01:48:52 +0000
Manifest next update:     Thu 25 Dec 2025 02:56:52 +0000
Files and hashes:         1: 229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl (hash: J2sLXJnu+VojDVgSxz3Oi4gDzgTsDEmM050JoBmzBo0=)
                          2: 3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (hash: EviOo/e14n6iGDXpo9WcpNiSM/ryw379BmrBxMsZWUQ=)
                          3: 323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (hash: Z8hcM4Fs7TkbVISQhGVObSaac8C7SQ91HxK3mbC1W9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:44:bc:bd:81:8f:b4:e4:b6:3f:37:96:1e:d0:57:ce:d1:eb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
        Validity
            Not Before: Dec 24 01:48:52 2025 GMT
            Not After : Dec 25 02:56:52 2025 GMT
        Subject: CN=A170BC9F595D6EC04375757039AF11017E0337E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:81:b4:23:09:48:78:47:9f:e2:18:72:a8:
                    03:8b:92:47:9f:f0:fb:59:aa:ca:b2:46:ad:4a:1c:
                    97:7b:ea:32:98:89:3e:ef:5a:2b:b5:1f:11:50:9b:
                    9f:75:13:ac:b7:90:ec:64:74:66:f1:e6:d8:f9:84:
                    bd:8b:a0:55:69:1f:96:2a:dc:b9:30:81:5d:97:06:
                    f8:a1:41:e9:d3:11:c3:e3:63:fe:8b:af:90:d5:e0:
                    b5:24:54:ba:18:af:8c:58:8b:22:91:bc:01:d2:66:
                    78:50:33:ad:10:3b:84:95:6e:6e:82:8d:09:7b:da:
                    fc:f7:ae:51:d4:73:b9:df:64:d0:04:7e:c8:58:4a:
                    b3:91:b7:69:87:8f:f7:05:2b:c7:0f:27:bc:0a:6d:
                    1e:7f:65:a9:43:0a:c2:b2:44:17:54:0a:e3:68:e8:
                    47:eb:14:cb:c7:56:8e:11:7e:55:10:58:9c:38:63:
                    ce:3d:5f:48:a1:3e:f1:6c:f3:6e:b3:e7:86:b3:87:
                    61:f2:a1:2e:2b:f9:09:d9:73:0a:83:5f:f1:08:fe:
                    76:48:de:1c:c9:11:db:5a:a1:a1:e8:44:6d:57:0e:
                    2d:cc:c1:e9:76:9f:90:2a:bc:a4:4f:07:69:2a:ce:
                    fd:3a:7e:93:bd:b9:95:17:88:16:73:14:1c:56:3f:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:BC:9F:59:5D:6E:C0:43:75:75:70:39:AF:11:01:7E:03:37:E3
            X509v3 Authority Key Identifier:
                keyid:22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:0f:62:03:b9:35:20:7c:1c:52:7e:d1:fd:d5:a8:b6:2a:
         17:01:ba:6a:e8:ee:46:3a:fd:86:2a:f8:40:cf:d1:2b:5d:83:
         80:a1:3a:a2:f2:fa:28:36:47:2d:8f:40:e8:2a:a7:92:75:ae:
         7d:d3:81:28:39:ff:5f:af:15:a5:61:e1:3f:ba:e6:a8:25:c2:
         a2:0f:92:87:71:9b:c3:1b:66:b4:70:64:e9:eb:71:50:8e:8a:
         98:cb:f6:40:3b:a6:57:a7:04:e6:ec:0c:a5:00:b3:1b:74:3d:
         ce:00:7b:53:5c:51:ac:42:bf:aa:4f:1b:68:08:3a:e3:d1:6c:
         1c:d0:75:45:c8:f6:64:39:31:69:b4:30:ab:10:8d:42:e3:ce:
         a7:c5:1c:28:23:fe:ce:9d:93:53:5d:c1:d5:5a:ef:06:c0:25:
         e1:c0:0f:1f:0f:ad:9d:29:8c:3e:36:0e:25:c8:52:cc:68:c9:
         8a:11:ab:22:48:29:89:cd:0d:48:45:3b:d2:f0:8a:80:55:c8:
         71:57:30:99:33:d9:e6:a3:98:a3:17:70:59:76:fd:c5:84:68:
         9a:5d:73:73:8e:8e:e5:58:60:ec:08:8f:ba:52:1c:71:5c:a1:
         cd:23:22:e6:5b:04:35:d6:f1:b5:da:5f:68:4f:8e:c0:7a:df:
         b4:34:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:48 2025 by rpki-client