This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.mft
File:                     0B302D978198636085D3E247B598AC1275D02145.mft (raw, json)
Hash identifier:          mXZ+L96eiEcXbvWlrklBjRE4p0eXNH0TKp7qJWOn4zI=
Subject key identifier:   39:6A:0C:C4:98:86:B4:92:19:92:21:FA:F0:53:12:67:A5:6E:7A:62
Authority key identifier: 0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45
Certificate issuer:       /CN=0B302D978198636085D3E247B598AC1275D02145
Certificate serial:       16BAEAA2A8F86FB8E9EDADCB5CC8C5B80FBAB767
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B302D978198636085D3E247B598AC1275D02145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.mft
Manifest number:          01D1
Signing time:             Mon 01 Dec 2025 18:43:00 +0000
Manifest this update:     Mon 01 Dec 2025 18:38:00 +0000
Manifest next update:     Tue 02 Dec 2025 22:22:00 +0000
Files and hashes:         1: 323830343a386463633a3a2f33322d3332203d3e20323733333831.roa (hash: r4k4UX26Ybx3NHmoECYExfgBZfyFNTOZt74n4nO3H84=)
                          2: 0B302D978198636085D3E247B598AC1275D02145.crl (hash: vOiaeTTN6kjgkYcIdVlfIzftbdkMK+meta0WGCRlM10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ba:ea:a2:a8:f8:6f:b8:e9:ed:ad:cb:5c:c8:c5:b8:0f:ba:b7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B302D978198636085D3E247B598AC1275D02145
        Validity
            Not Before: Dec  1 18:38:00 2025 GMT
            Not After : Dec  2 22:22:00 2025 GMT
        Subject: CN=396A0CC49886B492199221FAF0531267A56E7A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:6d:a6:14:82:4c:09:45:72:d9:cb:2b:0c:
                    82:74:4c:7e:84:ae:dd:5e:a6:b2:d5:e4:68:83:79:
                    68:45:97:d2:b8:28:2c:18:58:d9:cf:5d:b1:70:6d:
                    a4:de:e2:95:73:b5:6f:16:e0:ae:d8:6c:fc:46:c8:
                    3e:d6:d4:db:24:a7:ba:f0:38:1a:09:41:58:8d:71:
                    8a:51:79:3f:c0:f8:2a:b4:40:43:f2:55:f3:ef:68:
                    48:d7:35:3a:55:6c:db:71:65:90:ed:a6:2e:aa:b3:
                    4f:68:b4:1e:b5:b6:0c:13:b4:ba:52:3e:cc:60:e2:
                    5a:eb:fb:50:92:66:31:6d:01:8f:43:e2:3f:2d:66:
                    39:0b:ce:b9:8b:fc:a1:f4:e0:a5:db:b6:3a:19:58:
                    47:ff:06:c5:6b:0e:cd:ad:0d:37:f7:3f:10:b6:69:
                    c9:a2:90:6d:3b:77:b5:1b:40:b7:91:3e:7f:aa:4b:
                    c0:6e:f5:f2:96:31:4e:e2:b1:d0:1a:53:d4:1e:3d:
                    37:61:38:5c:65:e5:1c:66:7b:a5:70:78:0c:10:c7:
                    f7:ca:c6:3b:0e:2f:a8:c7:84:db:8c:ba:47:94:77:
                    0e:bf:95:aa:c4:f4:4b:e8:be:0f:7b:6e:0b:9f:10:
                    9f:44:24:0d:33:a5:68:1a:0c:3a:52:88:07:41:03:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:0C:C4:98:86:B4:92:19:92:21:FA:F0:53:12:67:A5:6E:7A:62
            X509v3 Authority Key Identifier:
                keyid:0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B302D978198636085D3E247B598AC1275D02145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:d3:be:f0:07:49:f9:e8:43:20:17:c6:fc:e5:41:25:80:
         00:32:00:48:14:12:5b:d6:e4:5c:55:09:f0:c1:94:9f:c0:5d:
         6e:2f:7b:84:b9:35:d8:fb:39:a4:01:37:1e:18:1a:c2:3b:e2:
         cb:86:13:c5:92:26:5d:ca:a6:dc:e1:8e:f4:8e:47:3e:12:f7:
         c3:d6:90:12:ee:2a:5a:91:51:0d:01:20:0b:da:43:5e:ad:a1:
         cc:69:31:f8:d7:3a:a9:ef:29:d9:f7:60:9d:01:d3:74:07:a1:
         ce:46:6e:9d:91:d9:bb:6c:ff:12:bc:09:7d:b2:4e:28:7b:0d:
         da:e2:67:37:e3:62:80:30:66:51:48:b5:65:16:13:f9:c2:96:
         55:ed:b0:12:a9:0c:a2:84:44:a0:cd:90:11:64:61:f1:b2:73:
         04:dd:8d:d5:24:25:e3:63:bc:aa:ab:c5:d0:80:2e:e5:7c:31:
         e2:1b:60:0e:87:cc:d0:72:d9:ab:16:fb:32:c1:f4:76:80:d1:
         f1:89:6a:23:13:1c:59:8b:58:e7:e7:71:fe:c3:e4:fc:59:95:
         5c:5a:7c:a9:ff:7c:87:0c:f3:74:57:85:c0:0d:a0:b6:d3:1f:
         c5:ed:f2:7c:60:a6:dd:c8:d5:6a:f0:56:b0:6a:ae:46:11:52:
         6a:ca:b9:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFrrqoqj4b7jp7a3LXMjFuA+6t2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIzMDJEOTc4MTk4NjM2MDg1RDNFMjQ3QjU5OEFDMTI3
NUQwMjE0NTAeFw0yNTEyMDExODM4MDBaFw0yNTEyMDIyMjIyMDBaMDMxMTAvBgNV
BAMTKDM5NkEwQ0M0OTg4NkI0OTIxOTkyMjFGQUYwNTMxMjY3QTU2RTdBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk7W2mFIJMCUVy2csrDIJ0TH6E
rt1eprLV5GiDeWhFl9K4KCwYWNnPXbFwbaTe4pVztW8W4K7YbPxGyD7W1Nskp7rw
OBoJQViNcYpReT/A+Cq0QEPyVfPvaEjXNTpVbNtxZZDtpi6qs09otB61tgwTtLpS
Psxg4lrr+1CSZjFtAY9D4j8tZjkLzrmL/KH04KXbtjoZWEf/BsVrDs2tDTf3PxC2
acmikG07d7UbQLeRPn+qS8Bu9fKWMU7isdAaU9QePTdhOFxl5Rxme6VweAwQx/fK
xjsOL6jHhNuMukeUdw6/larE9Evovg97bgufEJ9EJA0zpWgaDDpSiAdBA8S7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOWoMxJiGtJIZkiH68FMSZ6VuemIwHwYDVR0j
BBgwFoAUCzAtl4GYY2CF0+JHtZisEnXQIUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEZrQUFkUmU2SEdRZ29uUUtEZnVtSndiUTlpYlN1U0E1THo3OHJUSnZI
c0cvMC8wQjMwMkQ5NzgxOTg2MzYwODVEM0UyNDdCNTk4QUMxMjc1RDAyMTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMzAyRDk3ODE5ODYzNjA4
NUQzRTI0N0I1OThBQzEyNzVEMDIxNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEZrQUFkUmU2SEdRZ29uUUtEZnVtSndiUTlpYlN1U0E1THo3OHJUSnZIc0cvMC8w
QjMwMkQ5NzgxOTg2MzYwODVEM0UyNDdCNTk4QUMxMjc1RDAyMTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY+LTvvAHSfnoQyAXxvzlQSWAADIASBQSW9bkXFUJ8MGUn8Bdbi97hLk12Ps5
pAE3Hhgawjviy4YTxZImXcqm3OGO9I5HPhL3w9aQEu4qWpFRDQEgC9pDXq2hzGkx
+Nc6qe8p2fdgnQHTdAehzkZunZHZu2z/ErwJfbJOKHsN2uJnN+NigDBmUUi1ZRYT
+cKWVe2wEqkMooREoM2QEWRh8bJzBN2N1SQl42O8qqvF0IAu5Xwx4htgDofM0HLZ
qxb7MsH0doDR8YlqIxMcWYtY5+dx/sPk/FmVXFp8qf98hwzzdFeFwA2gttMfxe3y
fGCm3cjVavBWsGquRhFSasq5Rw==
-----END CERTIFICATE-----