This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft
File:                     C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft (raw, json)
Hash identifier:          /HtjTdHcC7OgXxC4D9e5NF5fbHvc22tf3zzmkwhQ01g=
Subject key identifier:   1D:EA:09:7D:23:BA:EC:4C:39:B6:72:D2:C1:57:FF:83:B7:B2:B3:C5
Authority key identifier: C2:89:5E:37:EB:31:DF:15:86:41:21:25:B2:BD:AD:40:BE:FF:4F:BA
Certificate issuer:       /CN=C2895E37EB31DF1586412125B2BDAD40BEFF4FBA
Certificate serial:       45F4D8400D79BD5E954CC2ED6504D6B9B5856265
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft
Manifest number:          1A
Signing time:             Sat 22 Nov 2025 00:11:19 +0000
Manifest this update:     Sat 22 Nov 2025 00:06:19 +0000
Manifest next update:     Sun 23 Nov 2025 03:35:19 +0000
Files and hashes:         1: 323830343a386263303a3a2f33322d3438203d3e20323733373536.roa (hash: qRt27gpQ1RG4VHZ93R/+bdlUlpPnfo9FjvSMkWf944k=)
                          2: C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.crl (hash: AXsjLNc+EQZ37vVrRQFitSsZYEAlpXKdgDga0whkrd8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f4:d8:40:0d:79:bd:5e:95:4c:c2:ed:65:04:d6:b9:b5:85:62:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2895E37EB31DF1586412125B2BDAD40BEFF4FBA
        Validity
            Not Before: Nov 22 00:06:19 2025 GMT
            Not After : Nov 23 03:35:19 2025 GMT
        Subject: CN=1DEA097D23BAEC4C39B672D2C157FF83B7B2B3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:35:1f:2f:cc:46:e3:a3:2c:07:af:9d:66:
                    e0:a3:f9:c4:f4:2e:77:a7:9b:ae:d0:d9:4e:16:34:
                    bf:17:49:06:c3:6a:96:96:71:ff:22:f2:61:a1:6e:
                    83:ff:92:59:d6:7c:9a:8c:d3:43:12:e3:56:da:a0:
                    37:b0:56:b6:4b:0d:5c:2a:08:6f:44:ef:86:fa:60:
                    a1:e1:82:0a:f4:69:24:f4:ef:48:fe:d0:40:85:7a:
                    47:a8:25:ec:a5:dc:60:c4:0a:4d:2e:32:32:8d:b5:
                    63:e3:92:e9:96:87:80:17:dc:59:7b:a4:c9:c8:1f:
                    1e:f2:b4:50:e1:e0:e5:12:00:dc:d6:2f:6b:23:7a:
                    46:f6:4c:91:f0:df:26:1b:7b:6f:da:7c:ad:87:7d:
                    59:5c:c8:50:d7:2d:f2:1a:77:1f:ab:3a:80:5b:db:
                    cb:0d:76:09:92:81:8a:b9:2a:f3:fa:ab:f0:b0:3b:
                    22:11:31:21:af:9b:79:39:83:17:03:30:cd:04:e1:
                    0a:bc:22:ad:ee:17:74:52:a6:91:82:c4:7f:3f:2d:
                    f3:14:72:4f:ca:c2:c2:c5:a7:c1:a4:bc:d7:20:36:
                    ca:56:e2:1c:09:61:6a:c4:9b:b3:70:fe:0f:ee:05:
                    4d:e5:ae:35:4f:98:92:17:00:2f:26:d3:72:48:30:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:09:7D:23:BA:EC:4C:39:B6:72:D2:C1:57:FF:83:B7:B2:B3:C5
            X509v3 Authority Key Identifier:
                keyid:C2:89:5E:37:EB:31:DF:15:86:41:21:25:B2:BD:AD:40:BE:FF:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:2d:0b:17:07:c5:09:bc:ca:5e:fc:eb:d2:dd:e7:ea:40:
         f0:37:ec:c7:fc:33:6c:26:88:ee:48:38:68:30:34:9f:a8:5d:
         12:11:96:d6:be:f7:fd:48:9e:9f:28:98:c1:5b:3e:ef:c2:d2:
         86:d5:9a:2c:ea:2c:4f:7a:27:6b:d8:37:5d:ab:a9:c0:d8:f5:
         38:58:4b:d6:be:47:2c:18:19:af:2f:2e:30:5d:bd:58:eb:ec:
         c4:76:20:9f:7f:b5:f6:1d:33:3d:dc:fd:0e:ca:a3:69:91:59:
         35:83:5b:49:20:ca:a7:08:e7:5a:16:9a:05:3d:b4:43:88:24:
         c3:5f:e9:6f:ec:dc:aa:5b:18:c1:d7:04:c9:c4:e7:89:d1:06:
         b6:12:32:70:71:03:92:53:de:25:d4:eb:fa:a5:9f:5c:83:98:
         87:4f:d4:49:37:7f:25:bb:94:f8:24:38:d5:f0:05:26:73:83:
         2e:23:ac:15:f3:3e:6b:c4:09:19:c0:89:40:ae:09:4c:10:8f:
         16:37:7e:0a:a1:68:f8:b2:97:cd:77:36:22:97:00:82:68:70:
         50:20:10:23:1a:b8:87:6b:bb:af:13:3c:25:92:af:bc:6b:bf:
         dd:a8:fc:d9:19:25:fd:22:44:40:6f:8a:b5:37:7c:ab:a8:77:
         72:ab:5e:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURfTYQA15vV6VTMLtZQTWubWFYmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4OTVFMzdFQjMxREYxNTg2NDEyMTI1QjJCREFENDBC
RUZGNEZCQTAeFw0yNTExMjIwMDA2MTlaFw0yNTExMjMwMzM1MTlaMDMxMTAvBgNV
BAMTKDFERUEwOTdEMjNCQUVDNEMzOUI2NzJEMkMxNTdGRjgzQjdCMkIzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAejUfL8xG46MsB6+dZuCj+cT0
Lnenm67Q2U4WNL8XSQbDapaWcf8i8mGhboP/klnWfJqM00MS41baoDewVrZLDVwq
CG9E74b6YKHhggr0aST070j+0ECFekeoJeyl3GDECk0uMjKNtWPjkumWh4AX3Fl7
pMnIHx7ytFDh4OUSANzWL2sjekb2TJHw3yYbe2/afK2HfVlcyFDXLfIadx+rOoBb
28sNdgmSgYq5KvP6q/CwOyIRMSGvm3k5gxcDMM0E4Qq8Iq3uF3RSppGCxH8/LfMU
ck/KwsLFp8GkvNcgNspW4hwJYWrEm7Nw/g/uBU3lrjVPmJIXAC8m03JIMBKVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHeoJfSO67Ew5tnLSwVf/g7eys8UwHwYDVR0j
BBgwFoAUwoleN+sx3xWGQSElsr2tQL7/T7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTkyRzdlZmFBR0UxWlRWaUV1SlZEWGhRMlc0YnNmTHlldkhLN0ZTZUx2
Qm0vMC9DMjg5NUUzN0VCMzFERjE1ODY0MTIxMjVCMkJEQUQ0MEJFRkY0RkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyODk1RTM3RUIzMURGMTU4
NjQxMjEyNUIyQkRBRDQwQkVGRjRGQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTkyRzdlZmFBR0UxWlRWaUV1SlZEWGhRMlc0YnNmTHlldkhLN0ZTZUx2Qm0vMC9D
Mjg5NUUzN0VCMzFERjE1ODY0MTIxMjVCMkJEQUQ0MEJFRkY0RkJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHfgtCxcHxQm8yl7869Ld5+pA8Dfsx/wzbCaI7kg4aDA0n6hdEhGW1r73/Uie
nyiYwVs+78LShtWaLOosT3ona9g3XaupwNj1OFhL1r5HLBgZry8uMF29WOvsxHYg
n3+19h0zPdz9DsqjaZFZNYNbSSDKpwjnWhaaBT20Q4gkw1/pb+zcqlsYwdcEycTn
idEGthIycHEDklPeJdTr+qWfXIOYh0/USTd/JbuU+CQ41fAFJnODLiOsFfM+a8QJ
GcCJQK4JTBCPFjd+CqFo+LKXzXc2IpcAgmhwUCAQIxq4h2u7rxM8JZKvvGu/3aj8
2Rkl/SJEQG+KtTd8q6h3cqteuQ==
-----END CERTIFICATE-----