This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
File:                     E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft (raw, json)
Hash identifier:          xPtdprXThUHtpzVP+ORuxPUYfZ+8W++NP8bkoOM2Okw=
Subject key identifier:   A4:07:5B:7D:50:3B:A3:2F:44:69:7B:EA:33:C0:D3:1F:F1:04:B7:42
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Certificate issuer:       /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial:       4FDEA8BF4ACCD3FA751870D5614F1F18EFE996BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
Manifest number:          02E2
Signing time:             Thu 09 Oct 2025 22:03:56 +0000
Manifest this update:     Thu 09 Oct 2025 21:58:56 +0000
Manifest next update:     Sat 11 Oct 2025 01:20:56 +0000
Files and hashes:         1: 3133382e39392e32342e302f32322d3234203d3e203631383639.roa (hash: WgI8Zhb1GLe/K5Bakvg6hlLt+5T+jD5n4GEb0PPSpVQ=)
                          2: 3133312e302e33362e302f32322d3234203d3e203631383639.roa (hash: qqmoc/mCwk8/qZmMrgPgadFk5hcj1oFTVBnQuSivKHc=)
                          3: E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl (hash: 7G8S/+iPw4ONQ9ibZj2kAE97RYxS5U3WOPNaJFYqJ/Y=)
                          4: 323830343a316139343a3a2f33322d3438203d3e203631383639.roa (hash: mpL6GhGK6J+O2fxRiEFeXck7mCBVnlY9RqzfrvGdhoc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:de:a8:bf:4a:cc:d3:fa:75:18:70:d5:61:4f:1f:18:ef:e9:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
        Validity
            Not Before: Oct  9 21:58:56 2025 GMT
            Not After : Oct 11 01:20:56 2025 GMT
        Subject: CN=A4075B7D503BA32F44697BEA33C0D31FF104B742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:09:4a:1f:a2:1c:01:9b:c0:db:2a:1b:98:
                    e4:80:83:ad:67:50:54:71:9f:09:37:b7:45:a0:4b:
                    83:c4:c0:a2:ea:31:b1:9b:ba:82:5f:91:c1:1f:6b:
                    32:cc:f2:e2:61:96:bd:1f:4c:4b:0b:14:e6:01:61:
                    9e:02:f9:bc:36:15:5f:56:d9:c1:07:ce:fc:51:c5:
                    b2:2e:f3:54:22:54:5e:64:43:83:7b:8e:cb:d0:64:
                    0a:1e:b4:2a:25:6c:a9:ed:02:c6:5b:a3:e1:b7:72:
                    40:7f:61:6f:c8:36:6c:18:5d:e3:03:b4:2d:28:3d:
                    2b:4f:e5:51:78:c3:cc:af:13:49:9e:a3:5f:0e:dd:
                    e4:a3:17:24:ab:e0:88:71:e7:fb:08:df:7a:76:ab:
                    1e:1a:03:f9:ed:3e:ef:7a:dc:b8:98:33:71:dd:d3:
                    5f:84:72:aa:b0:e7:c0:ce:9e:2e:5c:11:fc:ee:ac:
                    9f:6f:59:de:ba:75:b3:48:7b:14:65:07:f5:c0:a5:
                    02:38:ad:15:4b:c6:b1:d3:b6:e1:9d:76:84:05:fd:
                    88:85:78:21:40:44:77:5e:31:5b:76:fb:8a:93:86:
                    a3:d7:08:7a:9d:3f:b3:3c:10:66:1c:4c:78:84:e6:
                    10:d4:c9:fa:b8:a0:4b:ef:9f:20:4f:84:2a:6b:67:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:07:5B:7D:50:3B:A3:2F:44:69:7B:EA:33:C0:D3:1F:F1:04:B7:42
            X509v3 Authority Key Identifier:
                keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:76:a0:6a:5d:34:2d:16:e2:a7:e6:65:fc:3b:bf:8f:25:
         de:b6:4f:62:51:32:65:ed:c9:df:f9:f6:9c:1c:a0:11:1d:94:
         1b:23:a3:af:fc:aa:8a:dd:45:58:61:c8:d0:a1:03:1c:c9:65:
         c0:04:2b:b6:f4:47:20:c6:90:83:ad:45:7a:6d:0a:99:5b:51:
         61:67:d1:69:0f:81:1d:65:df:8c:64:38:28:61:d7:fb:ce:51:
         6e:4e:ab:4f:69:80:3f:52:69:91:6c:5e:9b:6e:47:0d:11:cc:
         0c:05:35:5e:52:a7:d2:7c:35:90:9d:b4:c9:96:87:28:30:bd:
         3d:dc:cc:32:34:b1:87:32:ac:9d:a1:31:59:97:e9:8d:50:90:
         e2:cc:70:55:b4:04:a0:31:ad:4e:b5:3f:f8:d1:9e:59:24:30:
         49:8f:cf:a8:ce:28:43:c9:6c:32:17:9e:0c:7d:f6:96:7a:93:
         7d:da:86:d9:ae:f6:3a:6b:57:8f:ca:3e:50:9e:c1:30:0e:1f:
         c6:b2:b2:6d:fe:0f:c4:c3:03:f4:e3:f2:0a:26:a6:5e:e6:cb:
         a7:f1:4e:5a:50:57:26:92:98:b4:3a:b8:57:b7:c2:54:17:5f:
         4f:4d:64:2c:ca:0a:79:68:45:88:50:e3:4b:7c:40:c0:16:af:
         68:84:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:40:23 2025 by rpki-client