This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.mft
File:                     2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.mft (raw, json)
Hash identifier:          W+bX9DioMqTvjzf0x4IqmaZ6IC7dJtor3x3AqEpRccE=
Subject key identifier:   DC:0C:C7:36:DA:4B:BE:18:58:38:C4:6B:C6:22:11:03:59:0E:BA:75
Authority key identifier: 2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
Certificate issuer:       /CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Certificate serial:       7F456E50C94B51DC1DA49EE0D4A3C7592B0B0A07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.mft
Manifest number:          0F
Signing time:             Tue 06 May 2025 12:24:51 +0000
Manifest this update:     Tue 06 May 2025 12:19:51 +0000
Manifest next update:     Wed 07 May 2025 14:39:51 +0000
Files and hashes:         1: 3230312e3134382e3137322e302f32322d3234203d3e20323632363232.roa (hash: GSKq6WMo1jEzoJM3zjk/0mUwBsToAhsx33+8b7wLNP4=)
                          2: 2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl (hash: Et0edQ0YrCb4GPXQr9wjwgbK4xTYpC0C8KrCOnk7trk=)
                          3: 323830343a3733303a3a2f33322d3332203d3e20323632363232.roa (hash: XENJEeuT8ZmdXwsCH6cQnmmHTVTT8Ft2+Q+L4em7FYw=)
                          4: 3133382e3138362e38302e302f32322d3234203d3e20323632363232.roa (hash: EM6KS+vuevkYYHeF2ZDJw5UcSDfnVI/jQNW0Z379mPA=)
                          5: 3137372e38362e34302e302f32322d3234203d3e20323632363232.roa (hash: ZWZVYogJK2uJv23wIjfTYwgsMsA1XqkNODIX7U9zhsk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:45:6e:50:c9:4b:51:dc:1d:a4:9e:e0:d4:a3:c7:59:2b:0b:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
        Validity
            Not Before: May  6 12:19:51 2025 GMT
            Not After : May  7 14:39:51 2025 GMT
        Subject: CN=DC0CC736DA4BBE185838C46BC6221103590EBA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:e3:55:8f:86:8a:c3:19:d8:a7:28:9f:c4:
                    17:42:68:df:43:eb:9b:7a:f9:f0:01:03:94:5b:f6:
                    d5:25:49:2a:84:be:25:57:10:97:96:93:11:a7:a6:
                    08:b8:d5:8a:e4:52:85:94:e8:42:ec:3d:44:8b:97:
                    5a:9d:bf:5f:00:37:b5:5b:03:df:5a:53:af:3d:89:
                    3e:e3:ce:5a:bd:94:00:66:44:14:86:06:e6:d8:82:
                    9e:e0:aa:87:eb:a4:d1:ea:15:7a:17:b8:66:0f:31:
                    74:50:92:48:ca:bb:62:06:7b:2a:10:dc:fb:bb:b7:
                    83:08:ec:86:b7:f9:49:37:4a:31:4e:a9:9e:b1:88:
                    57:d3:eb:04:89:4b:17:09:75:f8:fa:8c:64:6a:3f:
                    04:d2:be:9d:dd:05:7f:4a:e4:87:27:27:f9:36:c6:
                    c3:23:9a:96:cd:80:a6:5e:ab:9a:c2:88:ce:c2:f2:
                    35:03:cc:9e:6d:26:94:0d:50:09:f2:c7:53:aa:96:
                    80:b8:b3:22:c9:3a:26:dd:60:fb:d9:4c:53:1a:2a:
                    2e:12:d7:39:fa:1e:2c:6f:62:c0:18:8f:98:50:e9:
                    fa:58:02:55:c9:8d:e9:5b:d8:56:e2:34:05:30:af:
                    e2:87:6a:cc:5e:b3:29:c7:f6:32:98:c0:52:7b:dc:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:C7:36:DA:4B:BE:18:58:38:C4:6B:C6:22:11:03:59:0E:BA:75
            X509v3 Authority Key Identifier:
                keyid:2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:24:f2:75:fc:1f:dd:9f:ee:95:5c:3b:d7:f4:06:24:78:ee:
         3a:d8:7b:0e:bb:3c:bd:93:b1:ef:aa:fd:f3:ea:07:9d:c1:4b:
         6a:09:8a:6d:53:0d:21:9c:f1:09:43:12:62:4d:1d:f8:ca:02:
         67:29:94:a1:81:f6:1c:d2:9f:ff:48:70:6b:f1:38:78:d0:c0:
         bf:c6:e8:c8:08:bf:da:c0:15:c6:2f:7b:77:1a:eb:58:04:e2:
         ca:6e:0f:8f:13:88:4e:73:5d:b5:ef:55:b4:85:cc:b9:cd:a5:
         e8:62:09:ca:a6:b7:4d:a1:14:d6:5b:bc:d3:b0:b0:fd:17:9e:
         56:0a:25:2e:c5:75:77:ea:2c:30:32:1c:dc:55:dc:c1:d7:24:
         84:c9:8e:35:e3:1f:00:1a:08:30:98:04:78:c8:57:29:01:72:
         7f:47:e0:47:a9:19:b2:a2:81:ce:2c:3e:2c:37:77:df:6f:38:
         2f:1f:12:ff:d6:ce:7f:0c:2a:a4:9c:91:9c:98:5a:c3:13:26:
         c8:a6:67:94:41:a6:ef:ef:d4:e0:99:ac:6b:c6:26:cf:b2:35:
         a6:24:d6:a8:6c:1b:87:98:42:4c:d5:55:40:0b:92:bf:b3:be:
         dc:70:ba:7e:d6:ca:fc:52:8b:04:75:6b:80:91:f6:8b:0e:43:
         8f:34:d0:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf0VuUMlLUdwdpJ7g1KPHWSsLCgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVGMENGNzI3RDI1NzNCM0NDQjcxMTAzQzJFNDREMUY2
NzgxN0U2RDAeFw0yNTA1MDYxMjE5NTFaFw0yNTA1MDcxNDM5NTFaMDMxMTAvBgNV
BAMTKERDMENDNzM2REE0QkJFMTg1ODM4QzQ2QkM2MjIxMTAzNTkwRUJBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKuNVj4aKwxnYpyifxBdCaN9D
65t6+fABA5Rb9tUlSSqEviVXEJeWkxGnpgi41YrkUoWU6ELsPUSLl1qdv18AN7Vb
A99aU689iT7jzlq9lABmRBSGBubYgp7gqofrpNHqFXoXuGYPMXRQkkjKu2IGeyoQ
3Pu7t4MI7Ia3+Uk3SjFOqZ6xiFfT6wSJSxcJdfj6jGRqPwTSvp3dBX9K5IcnJ/k2
xsMjmpbNgKZeq5rCiM7C8jUDzJ5tJpQNUAnyx1OqloC4syLJOibdYPvZTFMaKi4S
1zn6HixvYsAYj5hQ6fpYAlXJjelb2FbiNAUwr+KHasxesynH9jKYwFJ73H5JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3AzHNtpLvhhYOMRrxiIRA1kOunUwHwYDVR0j
BBgwFoAULvDPcn0lc7PMtxEDwuRNH2eBfm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2p5d0xvTUVLYUhSaWJYdld2RU1Yazk1Ym4zR01rRkc3OEQ0OFF4OFVv
QkcvMC8yRUYwQ0Y3MjdEMjU3M0IzQ0NCNzExMDNDMkU0NEQxRjY3ODE3RTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRjBDRjcyN0QyNTczQjND
Q0I3MTEwM0MyRTQ0RDFGNjc4MTdFNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2p5d0xvTUVLYUhSaWJYdld2RU1Yazk1Ym4zR01rRkc3OEQ0OFF4OFVvQkcvMC8y
RUYwQ0Y3MjdEMjU3M0IzQ0NCNzExMDNDMkU0NEQxRjY3ODE3RTZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAiTydfwf3Z/ulVw71/QGJHjuOth7Drs8vZOx76r98+oHncFLagmKbVMNIZzx
CUMSYk0d+MoCZymUoYH2HNKf/0hwa/E4eNDAv8boyAi/2sAVxi97dxrrWATiym4P
jxOITnNdte9VtIXMuc2l6GIJyqa3TaEU1lu807Cw/ReeVgolLsV1d+osMDIc3FXc
wdckhMmONeMfABoIMJgEeMhXKQFyf0fgR6kZsqKBziw+LDd33284Lx8S/9bOfwwq
pJyRnJhawxMmyKZnlEGm7+/U4Jmsa8Ymz7I1piTWqGwbh5hCTNVVQAuSv7O+3HC6
ftbK/FKLBHVrgJH2iw5DjzTQeQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:34 2025 by rpki-client