This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft
File:                     BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft (raw, json)
Hash identifier:          /K6TeEaevvXsnUlCLE2K0U0cVacr5hgAUfqe5EZBcvI=
Subject key identifier:   73:FA:4F:0C:1C:D0:FB:99:B3:FC:22:BD:EF:0E:B2:28:55:18:B2:DB
Authority key identifier: BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71
Certificate issuer:       /CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571
Certificate serial:       543CBC9BBFFEED7A3E92AB26A2D13C93CF01F0A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft
Manifest number:          6D
Signing time:             Fri 21 Nov 2025 10:49:21 +0000
Manifest this update:     Fri 21 Nov 2025 10:44:21 +0000
Manifest next update:     Sat 22 Nov 2025 12:50:21 +0000
Files and hashes:         1: 3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa (hash: u9UeKbx4FcpGTjJ1bJCBWQFeQp6MwY/Kx450+8R+jTw=)
                          2: 3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa (hash: Gw0w6/XHY5uXKKoYqHsoCvzCsfCKEZbo5G7i3zFpGms=)
                          3: 323830343a386266633a3a2f33322d3438203d3e20323733373732.roa (hash: hPLGbkZpq6Hh/FzDP3WLvcuRJVW4ZgPLFOTAGf4jPrQ=)
                          4: 3138372e31392e302e302f32302d3234203d3e20323733373732.roa (hash: rBUcPreq8zbepd40IAQI6yE4iKA5Qln5t14lwCFVkBo=)
                          5: BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl (hash: mS1FycD6dQb3tgyYzPZPhoH1+nV2uhft5QnjEUm4URU=)
                          6: 323830343a3831303a3a2f33322d3438203d3e20323632333434.roa (hash: aUfa68wfYSWsbQ60Z5lQBS/ZV9FGI7Y3i3goDCLHiQU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3c:bc:9b:bf:fe:ed:7a:3e:92:ab:26:a2:d1:3c:93:cf:01:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571
        Validity
            Not Before: Nov 21 10:44:21 2025 GMT
            Not After : Nov 22 12:50:21 2025 GMT
        Subject: CN=73FA4F0C1CD0FB99B3FC22BDEF0EB2285518B2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:39:0d:f0:bf:53:47:17:c1:ff:6f:74:55:
                    b2:e8:2e:4d:dc:13:37:35:7a:af:ca:1a:2b:4d:89:
                    d6:20:2b:90:c6:da:2c:00:8d:86:4e:7d:c0:35:3a:
                    a5:dd:d0:da:50:2c:c5:5a:8c:6f:19:fb:88:a1:d0:
                    f5:27:cd:03:9b:df:0b:d8:5b:f7:11:26:a8:97:73:
                    fb:26:5d:c9:8d:4c:eb:64:ea:ac:6b:ff:2b:76:aa:
                    66:77:14:9c:2f:92:0e:4b:2c:c3:4d:f3:bb:22:db:
                    12:ec:c2:16:9b:50:36:7f:d9:af:65:10:06:25:88:
                    70:3b:61:76:67:19:fe:04:cf:e0:91:87:cc:82:24:
                    4f:29:39:31:0c:4d:fc:41:cb:8d:66:6c:0c:39:32:
                    26:7f:d1:cc:db:d9:cc:ba:52:35:46:8d:a6:eb:44:
                    81:5e:45:9c:df:ef:50:81:ba:ec:5f:78:72:b7:73:
                    48:73:5f:8c:7c:a9:46:bf:34:3d:d8:8f:02:2b:3c:
                    5b:8d:a1:36:0b:54:ad:bf:ba:62:44:b3:07:3a:bd:
                    54:8e:45:42:89:14:8a:9a:04:c7:c4:38:8d:34:aa:
                    9d:a2:17:b7:32:c6:7f:34:e4:4a:20:e3:61:3e:d4:
                    2d:af:89:1e:aa:08:73:cd:4e:f9:6f:11:1c:a8:36:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:4F:0C:1C:D0:FB:99:B3:FC:22:BD:EF:0E:B2:28:55:18:B2:DB
            X509v3 Authority Key Identifier:
                keyid:BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:34:5a:01:82:dd:a1:2f:aa:64:4f:30:fe:46:a6:11:e0:f3:
         22:91:1c:f0:13:20:d7:ce:fe:7f:22:28:1a:92:0e:42:75:3f:
         a5:c1:2f:6d:57:cf:0e:e1:55:87:f9:19:9f:91:f4:aa:1d:91:
         01:3c:51:12:49:21:6b:d5:a0:1d:51:33:60:17:ae:2c:75:ea:
         44:6a:a8:38:ed:d1:3d:d7:ed:e6:4c:a1:98:9c:04:32:92:86:
         41:2c:d3:99:50:f5:26:69:52:fb:8f:d2:35:39:60:56:91:1b:
         bc:14:21:d9:69:42:b4:2b:1f:83:fc:a9:03:12:2b:c3:b9:48:
         fc:70:7f:06:35:0e:8b:8d:90:2d:86:fa:38:ae:f9:c1:ee:cf:
         ee:37:42:5d:04:38:d4:e4:a3:e2:1a:16:dd:43:e3:6a:41:a8:
         49:85:11:37:19:39:ca:90:a3:a3:f2:f3:39:a0:11:3e:ec:96:
         78:90:d6:55:7e:1e:70:af:9b:ec:75:1f:5b:fd:e2:b7:52:36:
         12:28:87:9d:04:d4:4d:1f:b5:61:7a:09:8e:8f:6b:09:3d:4d:
         13:65:f2:b7:ac:4a:0f:0a:d8:18:6a:03:fe:31:c0:63:18:1b:
         49:c9:45:cd:a7:64:ca:21:d6:5d:b9:4b:0b:15:f2:a6:e2:5d:
         6c:bd:10:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVDy8m7/+7Xo+kqsmotE8k88B8KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE1MjMyM0MwNEIwQTcwQ0U4RTMxOTE5Q0U2Q0M4QkZE
QTNEMjU3MTAeFw0yNTExMjExMDQ0MjFaFw0yNTExMjIxMjUwMjFaMDMxMTAvBgNV
BAMTKDczRkE0RjBDMUNEMEZCOTlCM0ZDMjJCREVGMEVCMjI4NTUxOEIyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamTkN8L9TRxfB/290VbLoLk3c
Ezc1eq/KGitNidYgK5DG2iwAjYZOfcA1OqXd0NpQLMVajG8Z+4ih0PUnzQOb3wvY
W/cRJqiXc/smXcmNTOtk6qxr/yt2qmZ3FJwvkg5LLMNN87si2xLswhabUDZ/2a9l
EAYliHA7YXZnGf4Ez+CRh8yCJE8pOTEMTfxBy41mbAw5MiZ/0czb2cy6UjVGjabr
RIFeRZzf71CBuuxfeHK3c0hzX4x8qUa/ND3YjwIrPFuNoTYLVK2/umJEswc6vVSO
RUKJFIqaBMfEOI00qp2iF7cyxn805Eog42E+1C2viR6qCHPNTvlvERyoNr5jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc/pPDBzQ+5mz/CK97w6yKFUYstswHwYDVR0j
BBgwFoAUulIyPASwpwzo4xkZzmzIv9o9JXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZzTXNDMU1DVUNKYW84ZGtHa1c2U2pBQ1pjUXdNWGY4U2VyMVZlanJl
Rm0vMC9CQTUyMzIzQzA0QjBBNzBDRThFMzE5MTlDRTZDQzhCRkRBM0QyNTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTIzMjNDMDRCMEE3MENF
OEUzMTkxOUNFNkNDOEJGREEzRDI1NzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODZzTXNDMU1DVUNKYW84ZGtHa1c2U2pBQ1pjUXdNWGY4U2VyMVZlanJlRm0vMC9C
QTUyMzIzQzA0QjBBNzBDRThFMzE5MTlDRTZDQzhCRkRBM0QyNTcxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYDRaAYLdoS+qZE8w/kamEeDzIpEc8BMg187+fyIoGpIOQnU/pcEvbVfPDuFV
h/kZn5H0qh2RATxREkkha9WgHVEzYBeuLHXqRGqoOO3RPdft5kyhmJwEMpKGQSzT
mVD1JmlS+4/SNTlgVpEbvBQh2WlCtCsfg/ypAxIrw7lI/HB/BjUOi42QLYb6OK75
we7P7jdCXQQ41OSj4hoW3UPjakGoSYURNxk5ypCjo/LzOaARPuyWeJDWVX4ecK+b
7HUfW/3it1I2EiiHnQTUTR+1YXoJjo9rCT1NE2Xyt6xKDwrYGGoD/jHAYxgbSclF
zadkyiHWXblLCxXypuJdbL0QJQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 10:19:25 2025 by rpki-client