This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
File:                     D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft (raw, json)
Hash identifier:          FoQ1iITgrQTaYFE2oe1T46n5Gw91Et1OhQTWvP40rEg=
Subject key identifier:   FE:9E:0A:77:D9:16:6D:AE:C1:9E:A2:2B:30:7D:66:63:28:47:28:F5
Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Certificate issuer:       /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Certificate serial:       61BEB86AB057AAED9D032A01A4067C2BD8D75690
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
Manifest number:          027D
Signing time:             Tue 18 Nov 2025 08:00:33 +0000
Manifest this update:     Tue 18 Nov 2025 07:55:33 +0000
Manifest next update:     Wed 19 Nov 2025 10:39:33 +0000
Files and hashes:         1: D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl (hash: 3eTBViMQKrm9K55vMN1sGwOsAditBASnJoV1ucoHGLU=)
                          2: 323830343a363661303a3a2f33322d313238203d3e20323639353732.roa (hash: JtRy4cmBKBuI/QiHNBhdDeJlqIh4qsk+0GGS5pqApHw=)
                          3: 34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (hash: ngoWma8TsSEzSWbq6GfRF4ba2k9dPiM3jeI36G1Dcfo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:b8:6a:b0:57:aa:ed:9d:03:2a:01:a4:06:7c:2b:d8:d7:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
        Validity
            Not Before: Nov 18 07:55:33 2025 GMT
            Not After : Nov 19 10:39:33 2025 GMT
        Subject: CN=FE9E0A77D9166DAEC19EA22B307D6663284728F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:d4:57:4d:f2:e3:20:7c:7a:7a:6a:1b:fc:
                    bc:75:5b:d9:28:db:b0:96:26:04:53:96:dd:1a:2a:
                    00:ad:7d:36:20:c9:8c:8d:bc:b7:45:06:a6:a9:81:
                    06:67:1d:d2:aa:83:33:fd:30:59:fd:5f:ac:eb:03:
                    1e:40:9f:e7:a2:2a:4b:1b:c0:66:53:93:22:a2:01:
                    0c:d0:4d:fb:72:95:bc:3b:fe:44:4a:ee:82:bf:34:
                    6f:89:8b:2c:ca:1b:dd:95:3a:f4:9c:0a:e5:2b:32:
                    23:17:65:e7:41:ae:d3:ac:ae:7f:a4:b5:b1:79:ae:
                    e0:71:19:f5:1a:31:a3:94:11:7d:66:55:8f:7d:fc:
                    34:1e:fc:17:38:5e:0c:c3:45:68:04:dc:9b:cf:f8:
                    a7:f7:e2:af:64:2e:44:07:05:0a:58:89:25:9c:be:
                    f3:c2:72:a1:c2:46:3b:9a:c9:83:12:e6:f1:eb:ac:
                    36:1f:6e:e6:45:17:b5:cb:b3:39:5f:55:5e:e7:f3:
                    a0:01:80:8f:77:55:18:c1:4a:09:cc:83:1d:ed:50:
                    b4:fd:cb:cd:e3:4b:e4:9b:b9:46:ef:78:fe:68:25:
                    dc:a4:6b:57:2d:52:dc:9a:63:33:ed:6a:c1:97:bc:
                    ba:c4:15:fd:71:c2:1d:3c:a1:ff:a0:10:5d:d6:8d:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:0A:77:D9:16:6D:AE:C1:9E:A2:2B:30:7D:66:63:28:47:28:F5
            X509v3 Authority Key Identifier:
                keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:65:9d:2e:ae:38:3c:64:44:53:50:68:a2:48:8a:6e:ab:6d:
         3a:4a:26:63:1c:cf:a3:94:fa:0e:2c:f8:98:33:64:4f:9b:16:
         9d:98:1f:10:73:43:39:a0:2b:2c:db:fe:cc:bb:88:37:39:ef:
         07:86:ac:4b:6a:f0:11:fb:67:64:ea:0d:43:eb:ec:25:12:34:
         07:6e:ca:8c:20:1f:2a:be:fa:76:cf:27:7e:bc:26:fc:ff:a8:
         a5:1e:b4:ef:6a:ba:cc:a1:79:98:b3:27:b5:b5:68:a2:d1:e4:
         d8:23:1d:80:10:1f:58:f6:af:4a:da:e2:93:d6:c4:36:15:1f:
         5f:29:6b:ea:da:92:4d:ff:4b:cd:ef:83:e4:b4:d2:93:2c:5b:
         b3:3e:6f:6c:7b:5b:87:28:cf:11:78:62:df:fd:a6:81:c3:75:
         f4:d8:e3:f7:0f:cd:75:98:ce:f4:0d:53:df:5d:5c:04:5f:4b:
         02:a1:43:75:93:c4:b2:86:74:dd:8c:8d:4b:88:02:1c:c4:4f:
         2a:65:1f:e6:84:ea:dd:f4:37:16:e1:97:c4:a6:22:7b:5c:2c:
         d4:77:a5:12:65:6d:22:9c:6d:28:4c:a7:36:46:b9:cd:14:83:
         9a:2f:4f:a3:4d:c7:d0:c4:61:ef:f3:db:91:83:67:39:f0:3f:
         3b:fd:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----