This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
File:                     29458830F065A1888B513BA8F48CF0ACB0C499EA.mft (raw, json)
Hash identifier:          07FXPBXCcVd1/8H4aSZykDOw81HBEsM1V4AJVHJ1Fq8=
Subject key identifier:   75:27:7E:AD:1E:9E:01:A3:BA:83:7F:BE:DF:86:BA:78:0D:80:03:0B
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       6F87C29765429B060208CF5E45878DDE8CA919BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
Manifest number:          68
Signing time:             Tue 23 Dec 2025 21:32:48 +0000
Manifest this update:     Tue 23 Dec 2025 21:27:48 +0000
Manifest next update:     Thu 25 Dec 2025 00:38:48 +0000
Files and hashes:         1: 34352e3233342e35322e302f32342d3234203d3e20323637333630.roa (hash: JtM1U2RJ5LKQmmHfCEhbcOTZcB1t+ZFZbkF5tvO/TSg=)
                          2: 34352e3233342e35332e302f32342d3234203d3e20323637333630.roa (hash: LVmgQqqbS2elkZ2mqZGLVE/tgV89bc5fmf/LkO5Mkv8=)
                          3: 323830343a346334343a343030303a3a2f33342d3334203d3e20323637333630.roa (hash: UqBIHaQv2JU+u+CYNsvdmYJVGJCHLmIi1/WOX+royRc=)
                          4: 29458830F065A1888B513BA8F48CF0ACB0C499EA.crl (hash: 8DFNWDhpt3gO75pGiDk/ynvWH0ncXkPuPsKEx+HJbzw=)
                          5: 323830343a346334343a3a2f33342d3334203d3e20323637333630.roa (hash: QE/1ESuLjHU7Kf63UTGAKTsp2nC5dLoGBX1vGp3iwJs=)
                          6: 34352e3233342e35352e302f32342d3234203d3e20323637333630.roa (hash: VYcyk8N9kBs9oj2H1brliUrALhn8hDxTcIS107klMO4=)
                          7: 34352e3233342e35322e302f32332d3233203d3e20323637333630.roa (hash: LTYV/WcS9fu0T1nTpFzc2H7LN0RuZ1SfXJ5CCmQE/3c=)
                          8: 323830343a346334343a3a2f33322d3332203d3e20323637333630.roa (hash: yaVSa7/Ta2quaYo9fCa4KbFwYSfErJlqjlSDqJSieyc=)
                          9: 323830343a346334343a383030303a3a2f33342d3334203d3e20323637333630.roa (hash: 2XTGLRcLjvwUckFIQAphWhPvtcIVow3Cd4u+8ujRWPQ=)
                          10: 323830343a346334343a633030303a3a2f33342d3334203d3e20323637333630.roa (hash: i2Zqa6EevPWEtRdnBNKHm8+IHqmea5wYw4HmpEbBCuo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:c2:97:65:42:9b:06:02:08:cf:5e:45:87:8d:de:8c:a9:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Dec 23 21:27:48 2025 GMT
            Not After : Dec 25 00:38:48 2025 GMT
        Subject: CN=75277EAD1E9E01A3BA837FBEDF86BA780D80030B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:df:20:d7:7a:00:66:75:51:d6:dd:26:d3:
                    ab:b5:09:7f:aa:41:f1:85:9d:55:f8:b8:c3:c3:41:
                    44:12:5e:e9:93:e6:85:a1:d1:19:e1:29:ee:9c:01:
                    a5:a9:d3:10:e0:40:8f:ea:44:7a:92:9f:95:1b:f1:
                    cf:c2:1d:cf:f2:ab:c2:fc:d3:cd:06:e1:d6:30:bf:
                    de:57:51:5b:48:03:c8:9a:0d:f5:df:25:e4:87:43:
                    ce:67:22:69:36:aa:a2:af:04:f6:cd:16:2a:a4:04:
                    bf:8f:d3:ba:e7:d4:85:c8:1e:84:9e:cc:6d:c4:cd:
                    66:d6:a9:4d:a3:64:b0:0a:d4:ff:79:d5:ee:de:4c:
                    c9:9f:c1:7e:6c:fa:1a:1a:17:ad:a0:bb:f0:2d:17:
                    c0:d9:e5:ec:ec:d3:93:9f:52:5b:a4:75:a4:06:42:
                    80:67:f3:4e:d4:49:c4:0b:7d:e2:f2:ae:5e:c8:15:
                    c8:a0:7f:b0:57:f0:7e:34:25:a5:2e:8b:9c:19:aa:
                    85:f3:46:88:be:35:0c:af:db:a4:3d:d9:0a:2b:33:
                    c2:ec:af:19:df:25:7c:d7:8b:9d:9f:b9:eb:a5:59:
                    88:65:4d:a9:ec:f8:49:f9:a0:bb:2e:01:73:a4:d4:
                    c8:d6:e2:66:7a:4d:37:63:13:ae:89:61:28:a6:a4:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:7E:AD:1E:9E:01:A3:BA:83:7F:BE:DF:86:BA:78:0D:80:03:0B
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:85:3a:37:a6:d9:d8:d6:d8:bc:f1:6b:99:53:f6:e2:41:
         75:dd:74:da:1a:72:05:7c:f4:a9:48:87:c5:3a:67:9e:d7:9e:
         cd:7a:e5:09:01:86:77:2f:97:64:4a:72:10:f8:70:e2:e3:1c:
         6d:58:7a:a7:55:73:8e:9f:8f:ce:97:97:60:3f:2d:1c:f9:83:
         b4:82:f8:c0:ff:f6:6d:08:6c:f8:4e:a3:cd:ff:6c:78:d2:1a:
         12:f3:cf:ca:c3:1d:39:3a:77:69:a6:87:6b:5c:84:02:3f:78:
         60:41:6e:eb:e4:cc:8f:98:9f:05:6e:99:27:1a:df:a8:79:b2:
         e7:86:6f:7c:1b:a5:93:5f:8c:1b:f5:83:f5:b3:e2:97:23:80:
         32:6b:ae:82:7f:4d:c1:22:d0:5c:9f:a8:a2:7b:d5:51:2b:e7:
         6d:b3:df:ae:e3:fd:d9:89:8d:49:d5:9f:92:a3:7a:68:1e:73:
         ab:65:28:da:76:e1:41:b0:0c:43:f7:96:47:29:74:2c:75:0f:
         93:da:d7:43:dc:b4:a3:a1:e0:b7:b0:1d:76:c7:a3:ad:74:82:
         79:f8:29:c4:14:3b:3b:92:28:3a:f0:91:32:bf:d2:43:2e:d7:
         6e:bb:6d:86:cb:a0:22:d8:f8:2e:bc:a6:25:04:6f:fd:4a:14:
         df:a7:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:26 2025 by rpki-client