This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft
File:                     29C5DA244743877B068DCECE28A41814C0136412.mft (raw, json)
Hash identifier:          SAFDIovxmkDRJ7+0MEoutBFOrpTi8qIkxLmXcoO+MmA=
Subject key identifier:   7D:B8:D0:78:AA:FD:70:0B:7A:95:B6:4F:B4:7F:32:AE:B1:ED:87:C0
Authority key identifier: 29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12
Certificate issuer:       /CN=29C5DA244743877B068DCECE28A41814C0136412
Certificate serial:       64FF1CC29C762F09A6B40F3E04679721CCBFE84D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft
Manifest number:          64
Signing time:             Fri 05 Dec 2025 19:49:00 +0000
Manifest this update:     Fri 05 Dec 2025 19:44:00 +0000
Manifest next update:     Sat 06 Dec 2025 22:48:00 +0000
Files and hashes:         1: 29C5DA244743877B068DCECE28A41814C0136412.crl (hash: gxIdqiVkJiCye73qpHIdGg83A5z6yQd/nn3gZ7wInTs=)
                          2: 323830343a376631303a3a2f33322d313238203d3e20323731363634.roa (hash: rCg+1x7rvT5gEZ5o+LsNuO2V3UaS52kjVNkqIZewH5Y=)
                          3: 3137372e37332e3231362e302f32322d3332203d3e20323731363634.roa (hash: j29ZxVSYsUNejCvY4kKbXn6PRxKnz3wHSI3dhQAy5bo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.crl
                          rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:1c:c2:9c:76:2f:09:a6:b4:0f:3e:04:67:97:21:cc:bf:e8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C5DA244743877B068DCECE28A41814C0136412
        Validity
            Not Before: Dec  5 19:44:00 2025 GMT
            Not After : Dec  6 22:48:00 2025 GMT
        Subject: CN=7DB8D078AAFD700B7A95B64FB47F32AEB1ED87C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:7a:80:58:ff:f8:a2:fb:61:dd:40:f1:bf:
                    44:e3:5e:9e:af:e8:30:d9:67:3a:00:69:f3:ed:17:
                    a4:08:e7:e1:ce:18:74:73:53:ae:3d:79:36:b6:63:
                    e3:57:54:c2:96:03:6c:14:44:b2:a6:59:49:ca:46:
                    25:b7:38:23:d9:6e:a2:66:da:9c:79:bd:f3:65:6f:
                    28:71:d0:66:7f:12:e6:6a:bc:8d:9c:9b:e1:94:22:
                    ac:7c:8f:15:df:03:b8:c8:b4:0f:09:3c:40:10:48:
                    24:c4:ea:b1:4a:bc:62:e6:85:e8:55:90:e9:42:fe:
                    41:a8:18:37:ff:1f:ac:fc:9e:49:c7:5a:33:d1:e4:
                    9d:03:fa:0e:3c:c0:52:e0:db:d8:4a:87:76:ea:49:
                    d1:90:7d:d1:a9:a1:8a:c6:fc:0b:5a:95:4d:66:1f:
                    54:19:f2:6a:4e:68:90:b3:20:bd:b3:b4:6f:be:9b:
                    07:2b:c0:94:dc:b6:ec:e2:c4:1f:1c:d0:a5:a5:b5:
                    93:34:11:50:30:b3:1e:47:44:5b:13:63:c2:da:6c:
                    25:82:52:80:59:96:83:af:44:24:27:aa:e8:99:33:
                    87:b7:7c:fa:0b:99:44:a1:26:54:d8:26:c1:90:df:
                    8a:15:73:6b:a4:35:60:43:fa:57:21:1b:f4:d4:64:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:D0:78:AA:FD:70:0B:7A:95:B6:4F:B4:7F:32:AE:B1:ED:87:C0
            X509v3 Authority Key Identifier:
                keyid:29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:56:89:c6:c3:51:09:54:f1:fa:61:b4:d7:9b:26:78:a9:c9:
         ee:39:51:30:77:63:0a:a3:b2:b7:4c:e8:b7:3a:97:2e:4c:ea:
         c9:36:16:03:55:19:76:45:44:7b:8d:56:ec:2a:9d:f3:1a:eb:
         f2:5f:80:7b:8d:e4:f2:e0:f4:4f:59:4c:22:83:43:42:ff:ca:
         b6:1a:ba:93:32:5d:7a:a3:55:5f:74:f6:51:72:7d:e1:eb:f2:
         79:f0:26:be:3a:99:b1:2d:15:9d:ce:55:84:46:51:af:78:ac:
         9a:2d:c1:7f:ab:bc:05:bc:ea:d9:29:81:20:d7:21:86:2d:80:
         ce:a4:42:f2:e3:6b:47:5e:37:df:ae:04:2b:dd:23:1a:48:4f:
         d4:fd:f2:3d:0f:79:31:cc:85:b9:3b:bd:eb:5d:d2:60:43:89:
         b4:ba:99:dc:21:ce:e5:8b:c6:82:e8:2a:65:5f:ea:4a:29:bc:
         c0:f3:2e:ab:43:9b:0e:e3:3a:e2:e6:15:c3:64:f7:de:9c:de:
         d9:d6:0b:1b:e0:0f:4d:3a:da:39:f1:7f:ab:ff:a7:76:91:ff:
         00:e1:23:cd:8d:33:7f:3d:2a:0f:00:88:ca:54:12:d7:d6:3b:
         14:21:4b:fc:3c:c7:e8:13:32:16:ea:0d:0d:4e:f6:8a:a7:35:
         68:f4:33:c1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZP8cwpx2LwmmtA8+BGeXIcy/6E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlDNURBMjQ0NzQzODc3QjA2OERDRUNFMjhBNDE4MTRD
MDEzNjQxMjAeFw0yNTEyMDUxOTQ0MDBaFw0yNTEyMDYyMjQ4MDBaMDMxMTAvBgNV
BAMTKDdEQjhEMDc4QUFGRDcwMEI3QTk1QjY0RkI0N0YzMkFFQjFFRDg3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dnqAWP/4ovth3UDxv0TjXp6v
6DDZZzoAafPtF6QI5+HOGHRzU649eTa2Y+NXVMKWA2wURLKmWUnKRiW3OCPZbqJm
2px5vfNlbyhx0GZ/EuZqvI2cm+GUIqx8jxXfA7jItA8JPEAQSCTE6rFKvGLmhehV
kOlC/kGoGDf/H6z8nknHWjPR5J0D+g48wFLg29hKh3bqSdGQfdGpoYrG/AtalU1m
H1QZ8mpOaJCzIL2ztG++mwcrwJTctuzixB8c0KWltZM0EVAwsx5HRFsTY8LabCWC
UoBZloOvRCQnquiZM4e3fPoLmUShJlTYJsGQ34oVc2ukNWBD+lchG/TUZLQHAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUfbjQeKr9cAt6lbZPtH8yrrHth8AwHwYDVR0j
BBgwFoAUKcXaJEdDh3sGjc7OKKQYFMATZBIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9OZXE4cmRzRjJDQW91M2haRDZxTHpRM2FLNGlOZnczc3FLa204RjJ3NFRk
LzAvMjlDNURBMjQ0NzQzODc3QjA2OERDRUNFMjhBNDE4MTRDMDEzNjQxMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOUM1REEyNDQ3NDM4NzdCMDY4
RENFQ0UyOEE0MTgxNEMwMTM2NDEyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL05l
cThyZHNGMkNBb3UzaFpENnFMelEzYUs0aU5mdzNzcUtrbThGMnc0VGQvMC8yOUM1
REEyNDQ3NDM4NzdCMDY4RENFQ0UyOEE0MTgxNEMwMTM2NDEyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
dFaJxsNRCVTx+mG015smeKnJ7jlRMHdjCqOyt0zotzqXLkzqyTYWA1UZdkVEe41W
7Cqd8xrr8l+Ae43k8uD0T1lMIoNDQv/Kthq6kzJdeqNVX3T2UXJ94evyefAmvjqZ
sS0Vnc5VhEZRr3ismi3Bf6u8Bbzq2SmBINchhi2AzqRC8uNrR143364EK90jGkhP
1P3yPQ95McyFuTu9613SYEOJtLqZ3CHO5YvGgugqZV/qSim8wPMuq0ObDuM64uYV
w2T33pze2dYLG+APTTraOfF/q/+ndpH/AOEjzY0zfz0qDwCIylQS19Y7FCFL/DzH
6BMyFuoNDU72iqc1aPQzwQ==
-----END CERTIFICATE-----