This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
File:                     CC9F42C3A1E6623612312417013AA12DC19734C3.mft (raw, json)
Hash identifier:          ERqewh8SFA+QhgYU1lPwRoDHMXk42T/aj/CSuJxkkqc=
Subject key identifier:   A7:76:4D:5E:5A:0F:41:8F:1F:A1:4E:2A:C6:80:FE:45:7C:C1:2B:B9
Authority key identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3
Certificate issuer:       /CN=CC9F42C3A1E6623612312417013AA12DC19734C3
Certificate serial:       2129284B910492E22D762292F7A99733CFEA8998
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
Manifest number:          0116
Signing time:             Sat 29 Nov 2025 01:14:05 +0000
Manifest this update:     Sat 29 Nov 2025 01:09:05 +0000
Manifest next update:     Sun 30 Nov 2025 03:22:05 +0000
Files and hashes:         1: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: GFslzGMs5oIwXSuzFgkW9lwIslCumt75u502gJdO0cM=)
                          2: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: REH6hncucQPixihQMSIQOS/b1bX4EMEcVsaPP3LjZxA=)
                          3: CC9F42C3A1E6623612312417013AA12DC19734C3.crl (hash: idoaMUg3A0vwlryMK/6kGTzCjr/JtBXpBKgeyWbHytg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:28:4b:91:04:92:e2:2d:76:22:92:f7:a9:97:33:cf:ea:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9F42C3A1E6623612312417013AA12DC19734C3
        Validity
            Not Before: Nov 29 01:09:05 2025 GMT
            Not After : Nov 30 03:22:05 2025 GMT
        Subject: CN=A7764D5E5A0F418F1FA14E2AC680FE457CC12BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:58:54:26:11:be:4b:37:97:9c:b1:c5:fd:
                    09:3b:ad:2e:3d:82:2d:ec:ab:13:b5:82:ef:c1:ee:
                    39:60:35:18:03:63:a8:f7:d5:cb:bd:9d:06:f5:2d:
                    82:bd:ac:95:37:61:b8:77:41:a0:f6:d2:71:6b:76:
                    75:f2:b1:c6:81:b0:1d:1a:e7:20:4b:5d:87:ed:e2:
                    ce:82:02:77:61:02:d7:da:7f:75:17:8d:5d:20:37:
                    7b:59:f0:02:f5:30:08:93:6c:4c:d0:bd:7c:f2:4a:
                    35:73:0d:fb:7a:93:32:bf:0c:3c:bd:e5:d4:3e:bc:
                    da:50:a3:8f:17:0f:ed:9a:15:3a:e7:d4:7d:6a:9c:
                    ef:8a:76:59:a4:ee:df:a2:f6:5a:5b:bc:22:63:2a:
                    fd:1f:63:ef:89:b1:d3:93:24:27:e5:26:72:41:0a:
                    16:0e:0d:cf:80:73:f5:11:41:4d:1e:41:37:a4:bf:
                    bd:00:3e:ec:c4:eb:df:c1:42:6a:1a:69:4e:32:c6:
                    28:b3:8c:06:39:aa:42:0e:2a:8b:91:66:a7:7a:9d:
                    99:65:05:46:b1:8d:c8:fc:78:b4:9d:db:18:a5:c1:
                    e8:0a:ab:38:7a:63:ba:02:02:6f:84:4d:33:34:d8:
                    52:4d:a0:81:92:49:84:61:9b:b1:21:36:34:d2:1c:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:4D:5E:5A:0F:41:8F:1F:A1:4E:2A:C6:80:FE:45:7C:C1:2B:B9
            X509v3 Authority Key Identifier:
                keyid:CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:5f:0e:0d:5a:39:04:1e:82:f9:34:f1:65:94:25:08:a6:
         03:ca:05:27:b5:3e:a2:3e:dd:6a:82:38:f3:5b:d2:37:74:ef:
         79:a6:c3:c3:10:9b:13:5b:a9:b2:8d:7c:a1:bc:9f:1c:fc:69:
         71:36:e0:79:f5:f2:dd:f0:17:65:58:ff:a1:e8:95:d5:5a:b9:
         cc:dd:87:e1:35:70:50:a2:ed:8a:60:6a:ae:88:cb:71:2e:50:
         45:b3:93:09:6e:04:fa:67:96:e7:7a:07:07:0b:53:66:70:48:
         ae:18:2a:e6:e0:86:92:25:c1:4d:d3:ae:f0:17:6e:c0:60:b1:
         ac:1d:ce:8b:94:a6:60:f9:c2:c1:24:80:b9:7c:51:31:a8:bd:
         d6:b9:55:3e:b0:2c:cf:1b:99:7d:b7:4e:60:21:47:55:83:21:
         c6:e6:63:e6:7a:38:c6:12:e9:bc:c3:a9:c7:1d:36:e5:a2:b7:
         b1:bb:26:97:3f:35:b8:3b:5d:fd:3f:b6:26:a4:d1:74:e9:0a:
         ac:be:11:bd:8c:56:40:32:bc:6d:18:a2:b1:3d:24:4e:ef:64:
         0d:90:8d:54:28:4a:c5:88:af:ef:3d:a3:3a:f0:49:f6:5d:e6:
         32:a6:97:d9:15:71:4f:82:e9:d0:18:e9:ed:ae:02:f0:60:76:
         25:67:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:40:05 2025 by rpki-client