This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft
File:                     4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json)
Hash identifier:          n5UBPahNB26NecLeN/L50OGvVI5/Gq/Fh8ZigKJFUl0=
Subject key identifier:   AA:E5:88:C8:9F:4B:49:39:36:E5:C6:B0:E4:26:5E:24:90:AA:FC:18
Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97
Certificate issuer:       /CN=4B238277BD4501DC3B75403E74D8B541B7643097
Certificate serial:       20C6E9E696ADF8F3DD47E8E82EF3C5DDC9C86F82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft
Manifest number:          DB
Signing time:             Mon 29 Sep 2025 10:48:37 +0000
Manifest this update:     Mon 29 Sep 2025 10:43:37 +0000
Manifest next update:     Tue 30 Sep 2025 14:26:37 +0000
Files and hashes:         1: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=)
                          2: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: /FyrjMG84IkVdBdA1x0Aa2fV/eJHF8qEC8/0091Lwpg=)
                          3: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c6:e9:e6:96:ad:f8:f3:dd:47:e8:e8:2e:f3:c5:dd:c9:c8:6f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097
        Validity
            Not Before: Sep 29 10:43:37 2025 GMT
            Not After : Sep 30 14:26:37 2025 GMT
        Subject: CN=AAE588C89F4B493936E5C6B0E4265E2490AAFC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:35:35:bd:3f:d5:bc:ef:62:5a:99:52:81:
                    3e:77:01:ed:69:21:11:73:6b:26:1d:3d:8d:cf:40:
                    6f:d7:74:29:53:38:55:d5:64:8b:fb:72:0a:ee:f2:
                    ef:a2:ee:b4:d6:73:a6:3b:8a:4a:09:9a:ad:21:b9:
                    c5:dd:24:c9:83:c4:77:d8:da:87:4f:af:d4:69:ab:
                    13:16:35:bf:b9:90:67:fd:08:bb:f0:64:80:e5:6a:
                    84:90:b6:d5:e2:8a:1a:c0:80:37:37:89:67:f3:50:
                    8e:26:3a:1c:a0:ec:97:bd:53:e2:c1:33:bd:f5:4c:
                    5c:8e:68:7c:c0:d9:f1:60:c0:d9:e7:25:7e:ed:0f:
                    66:02:6a:3d:a2:db:08:31:97:de:fb:93:8c:c5:6c:
                    32:52:05:2a:f8:08:28:52:b0:e7:6a:b7:72:af:fd:
                    4e:e8:7e:42:8d:91:cc:d6:cf:ec:c4:af:66:8c:69:
                    8e:72:52:13:6e:1d:39:a4:fc:dd:0a:88:e2:ef:1a:
                    95:35:a3:c1:d8:a5:23:2c:66:d7:62:80:89:b0:0a:
                    cd:4d:c9:4f:59:2a:ae:cc:db:b0:11:b2:7b:59:0f:
                    70:82:da:05:1d:f2:73:ec:03:cb:34:b3:87:83:e0:
                    db:36:a3:ad:77:63:c7:c4:bf:78:f5:2a:1b:1c:b7:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:88:C8:9F:4B:49:39:36:E5:C6:B0:E4:26:5E:24:90:AA:FC:18
            X509v3 Authority Key Identifier:
                keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b1:aa:86:2e:9b:4b:66:a8:34:6e:a3:2a:4a:b8:2b:54:1f:
         eb:73:2a:12:c3:d1:c1:7f:78:34:58:c6:61:1b:42:2e:d5:27:
         c2:62:3c:cf:e0:ea:dc:95:d0:42:1d:90:0c:90:d8:00:cd:be:
         3b:e6:4e:0a:62:2e:c3:75:31:85:2a:bf:8c:ed:5e:b0:1f:59:
         66:3e:36:13:be:58:13:75:92:36:1b:be:ff:58:93:b7:56:7d:
         b6:eb:c2:04:c6:cb:b9:1a:f6:9e:11:84:13:22:91:04:e0:df:
         3c:a4:df:02:2f:59:46:17:ab:4c:7d:b2:3e:3f:7a:3d:ac:03:
         81:a0:a3:1b:42:f1:fa:6a:d5:e4:c9:ce:55:d2:0e:a9:da:4d:
         9e:67:e3:62:54:e3:05:17:2d:32:8b:5f:ca:9c:8a:1f:eb:5b:
         13:5d:98:ef:4a:4b:32:68:b0:69:49:c3:e4:57:5e:09:ff:71:
         67:45:1c:46:07:ac:3b:55:5b:7c:d6:21:01:8d:53:77:b4:b1:
         9a:4b:0a:3f:14:a1:c8:12:33:4c:ff:2c:32:23:c0:81:51:5a:
         ab:b5:fd:86:d3:b5:08:e4:dc:92:ff:3e:32:d7:10:fb:a0:e2:
         0e:91:85:79:e5:8f:a3:08:cc:97:5d:10:06:0a:87:7b:80:ff:
         43:0b:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:47:41 2025 by rpki-client