This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft
File:                     4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft (raw, json)
Hash identifier:          S7r74Ed2NeHLf+kkdXrKArC1ZNbnyFWuteMbeQL4H5Y=
Subject key identifier:   57:48:AD:06:A5:4B:6B:B9:39:10:04:4F:A0:E1:20:6C:11:04:9C:85
Authority key identifier: 42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A
Certificate issuer:       /CN=4280F26A98E865073FE5F6E4DBB52E60A4F5952A
Certificate serial:       2D33326DA79F153BB7DE67392C597293CCCE687F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft
Manifest number:          03
Signing time:             Tue 29 Jul 2025 11:20:35 +0000
Manifest this update:     Tue 29 Jul 2025 11:15:35 +0000
Manifest next update:     Wed 30 Jul 2025 12:48:35 +0000
Files and hashes:         1: 4280F26A98E865073FE5F6E4DBB52E60A4F5952A.crl (hash: gmPXAzjm/a1f8b4H2xTMVEut6LoikkiW2AmDkAn76I0=)
                          2: 3138372e312e33322e302f32302d3332203d3e203238323436.roa (hash: NmR+KFTDM6GxjnvsBfiau6fx/I5PkQgyw6fI4JnzqVc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:33:32:6d:a7:9f:15:3b:b7:de:67:39:2c:59:72:93:cc:ce:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4280F26A98E865073FE5F6E4DBB52E60A4F5952A
        Validity
            Not Before: Jul 29 11:15:35 2025 GMT
            Not After : Jul 30 12:48:35 2025 GMT
        Subject: CN=5748AD06A54B6BB93910044FA0E1206C11049C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:44:92:0e:49:88:12:97:7e:89:1f:72:11:
                    b0:a7:c0:d5:4b:10:16:70:01:d1:4a:37:6b:d1:9c:
                    15:88:40:8b:c9:fa:65:9b:84:ec:19:94:2d:b5:cd:
                    b7:03:10:0b:07:e3:9e:43:0a:a5:44:a0:d9:e3:7b:
                    5a:db:80:90:ce:0e:6f:9a:50:b3:b9:18:24:19:63:
                    1c:ee:29:41:a4:be:0c:59:65:03:5d:4a:a4:57:21:
                    73:8d:2b:a1:0b:6c:fb:2f:12:0c:4b:55:35:ab:61:
                    c6:b7:e7:da:8c:a6:a4:a4:4b:96:f0:c1:06:99:30:
                    e5:58:9b:db:6a:d3:10:cd:e9:a1:41:40:8e:00:e2:
                    c7:4a:d4:1d:e5:ee:c5:f4:74:20:de:85:82:7a:56:
                    90:d3:c0:03:5d:2f:39:3a:5d:3f:ed:fa:88:b5:4e:
                    03:68:66:f6:c9:16:aa:22:1e:1c:cc:94:06:25:80:
                    13:0f:b2:5e:9c:e5:97:ab:fe:86:8f:06:f9:d1:07:
                    7e:34:6e:28:fd:06:21:94:c2:c7:cf:5a:78:37:8e:
                    cb:18:fe:42:09:d5:78:a1:83:d6:14:df:7a:e1:f6:
                    42:5e:d3:39:4e:8d:71:60:c7:f3:e6:8b:01:ee:dd:
                    41:aa:f1:a3:63:1c:5c:0f:c8:a5:e7:6d:2f:db:b3:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:AD:06:A5:4B:6B:B9:39:10:04:4F:A0:E1:20:6C:11:04:9C:85
            X509v3 Authority Key Identifier:
                keyid:42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:24:ec:86:6c:3a:f2:87:1e:87:2c:25:27:5f:ce:4f:6a:
         90:94:7e:90:67:73:3c:e6:8c:27:84:d3:fb:1d:bd:9f:e6:ce:
         b9:de:e7:97:fc:12:17:66:a4:ab:70:59:1e:cb:58:bc:e6:0e:
         9b:2e:04:91:0a:aa:f1:1c:08:51:b1:71:ca:dd:c5:31:ed:3c:
         9b:82:bd:bc:8f:dd:a3:d2:e3:b6:c8:6b:fe:6f:ec:0a:fa:f4:
         cc:e8:1f:42:a3:69:d1:7b:49:1a:10:af:15:cf:d6:23:e9:23:
         e0:22:70:fd:d4:68:9f:98:86:64:d5:f4:7f:ce:84:ed:73:94:
         a5:75:24:af:78:0f:9f:84:2e:9f:40:24:1e:6d:ab:3c:d6:aa:
         17:ee:8e:18:2f:a8:4a:9e:f9:6b:67:d2:00:04:0c:39:89:14:
         74:98:37:0d:62:73:30:c8:f4:a1:34:65:aa:30:de:93:bf:82:
         0c:32:e5:34:6e:69:13:90:ca:40:e5:d1:1f:45:23:aa:6e:ec:
         27:17:f5:4c:fc:2e:23:c8:26:39:3e:54:02:77:07:a4:0c:b4:
         8c:12:c6:79:42:cf:aa:c1:fc:7f:b4:f3:34:24:8c:13:42:8e:
         71:87:d1:1c:08:4a:4c:87:ef:68:01:2c:1d:ae:ec:f9:2a:a4:
         8e:cd:49:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULTMybaefFTu33mc5LFlyk8zOaH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI4MEYyNkE5OEU4NjUwNzNGRTVGNkU0REJCNTJFNjBB
NEY1OTUyQTAeFw0yNTA3MjkxMTE1MzVaFw0yNTA3MzAxMjQ4MzVaMDMxMTAvBgNV
BAMTKDU3NDhBRDA2QTU0QjZCQjkzOTEwMDQ0RkEwRTEyMDZDMTEwNDlDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcUSSDkmIEpd+iR9yEbCnwNVL
EBZwAdFKN2vRnBWIQIvJ+mWbhOwZlC21zbcDEAsH455DCqVEoNnje1rbgJDODm+a
ULO5GCQZYxzuKUGkvgxZZQNdSqRXIXONK6ELbPsvEgxLVTWrYca359qMpqSkS5bw
wQaZMOVYm9tq0xDN6aFBQI4A4sdK1B3l7sX0dCDehYJ6VpDTwANdLzk6XT/t+oi1
TgNoZvbJFqoiHhzMlAYlgBMPsl6c5Zer/oaPBvnRB340bij9BiGUwsfPWng3jssY
/kIJ1Xihg9YU33rh9kJe0zlOjXFgx/PmiwHu3UGq8aNjHFwPyKXnbS/bs+FRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUV0itBqVLa7k5EARPoOEgbBEEnIUwHwYDVR0j
BBgwFoAUQoDyapjoZQc/5fbk27UuYKT1lSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVR6RUFYeDY0ZjlCSFQ1TmhtVWlkY3FRMjFCWEtjSGd2cnFYS3J5NW1Y
RXQvMC80MjgwRjI2QTk4RTg2NTA3M0ZFNUY2RTREQkI1MkU2MEE0RjU5NTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyODBGMjZBOThFODY1MDcz
RkU1RjZFNERCQjUyRTYwQTRGNTk1MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVR6RUFYeDY0ZjlCSFQ1TmhtVWlkY3FRMjFCWEtjSGd2cnFYS3J5NW1YRXQvMC80
MjgwRjI2QTk4RTg2NTA3M0ZFNUY2RTREQkI1MkU2MEE0RjU5NTJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgMEk7IZsOvKHHocsJSdfzk9qkJR+kGdzPOaMJ4TT+x29n+bOud7nl/wSF2ak
q3BZHstYvOYOmy4EkQqq8RwIUbFxyt3FMe08m4K9vI/do9Ljtshr/m/sCvr0zOgf
QqNp0XtJGhCvFc/WI+kj4CJw/dRon5iGZNX0f86E7XOUpXUkr3gPn4Qun0AkHm2r
PNaqF+6OGC+oSp75a2fSAAQMOYkUdJg3DWJzMMj0oTRlqjDek7+CDDLlNG5pE5DK
QOXRH0Ujqm7sJxf1TPwuI8gmOT5UAncHpAy0jBLGeULPqsH8f7TzNCSME0KOcYfR
HAhKTIfvaAEsHa7s+Sqkjs1Jug==
-----END CERTIFICATE-----