This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft
File:                     4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft (raw, json)
Hash identifier:          DxcjB+9o9jDkYj8luY+w5l++kYM37z+tLApon6A8TK0=
Subject key identifier:   3C:1E:87:D5:20:16:BC:E7:D8:3D:EE:0E:00:55:45:58:0E:CA:87:41
Authority key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF
Certificate issuer:       /CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF
Certificate serial:       AFE6B45CA059E8D8E3A458B54D478EAE578FC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft
Manifest number:          0153
Signing time:             Thu 11 Dec 2025 06:50:16 +0000
Manifest this update:     Thu 11 Dec 2025 06:45:16 +0000
Manifest next update:     Fri 12 Dec 2025 10:46:16 +0000
Files and hashes:         1: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl (hash: AiwHO1rKA6XzjXIoRq1AV8KMocx32HrLU6S9q1AtrnM=)
                          2: 3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (hash: krULwq9Rhl+VvAB64k7HqwFs18gauIlz8FGNJJMo8fQ=)
                          3: 323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (hash: 77sf5PFcSpII+KrrS4nSPlOkVTpoGT3FycBU93oqWsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:e6:b4:5c:a0:59:e8:d8:e3:a4:58:b5:4d:47:8e:ae:57:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF
        Validity
            Not Before: Dec 11 06:45:16 2025 GMT
            Not After : Dec 12 10:46:16 2025 GMT
        Subject: CN=3C1E87D52016BCE7D83DEE0E005545580ECA8741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:9f:38:8a:08:37:83:57:81:a9:7b:8c:ae:
                    ea:77:0c:3f:4b:38:72:c5:ec:26:82:dc:fe:69:da:
                    c0:1e:32:2b:41:08:5a:c8:9d:21:f9:4f:7e:73:07:
                    df:fc:9b:37:98:13:30:14:cd:dd:bb:e1:a0:be:2f:
                    35:43:38:9a:cb:34:96:b0:47:35:16:04:b6:78:07:
                    91:47:92:a8:11:d8:92:61:ba:0d:fe:b7:cf:6f:4e:
                    63:46:78:b8:a2:fe:52:4f:e6:a1:a9:eb:23:19:28:
                    00:e2:7a:d1:c0:10:48:8e:dd:7b:88:f7:48:9e:54:
                    fd:db:a3:eb:e1:d5:0a:1b:fd:bb:b9:73:fb:64:45:
                    6e:47:5a:1f:8b:78:0d:d5:d8:d0:9d:21:83:84:19:
                    48:9d:05:7b:45:21:60:c6:80:5d:f8:c9:8b:cf:48:
                    c5:a2:2b:b3:69:81:49:63:43:bd:57:66:b9:61:95:
                    fb:35:f0:4b:21:4a:4e:d7:1f:17:b9:7b:07:5d:95:
                    44:b1:9d:1e:31:c4:d2:89:a9:0a:0d:74:8b:81:05:
                    1b:e7:e3:a2:6b:90:93:47:ed:ce:be:68:c6:47:30:
                    19:64:83:2c:fc:32:4e:7f:a6:2a:de:b3:05:35:33:
                    be:d8:98:f6:51:3d:3f:2b:40:44:98:d1:70:63:56:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:87:D5:20:16:BC:E7:D8:3D:EE:0E:00:55:45:58:0E:CA:87:41
            X509v3 Authority Key Identifier:
                keyid:4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:14:1b:a9:4f:3b:4c:ed:f0:c7:5e:46:67:47:be:c6:ee:
         ed:05:94:a1:12:3a:0e:c0:a1:11:6a:ac:40:59:e9:a6:55:d3:
         31:0c:41:11:c0:69:14:cc:09:3d:e8:c0:d7:b7:e2:ac:4b:de:
         bf:63:e8:c8:8b:64:f6:ff:90:b1:61:26:83:43:70:2f:62:e8:
         6e:d2:9f:a9:fe:76:d2:e0:26:99:64:1b:4b:e2:a4:c0:92:7e:
         8a:60:48:f7:ad:5a:1d:4f:1b:95:be:23:72:4e:b1:e8:e7:ab:
         68:8a:45:ac:ad:96:3d:59:71:71:c9:e5:a9:55:5f:32:9c:4e:
         40:fe:76:ca:8d:87:5e:8c:7e:97:f7:d0:36:66:17:18:4d:0c:
         71:0b:81:51:68:29:64:c3:dc:41:d0:a9:bc:3e:f9:d1:32:c4:
         2c:21:bb:e5:c9:2b:f2:e9:0f:4d:3c:f6:d8:2f:ce:84:64:86:
         fb:4c:a8:5f:50:27:1a:3a:7f:b4:d4:b7:87:a6:62:7f:af:b8:
         89:60:08:cb:2b:32:5c:16:c4:88:e5:03:35:66:46:d0:ff:02:
         81:e9:c7:6c:bf:16:51:d9:c0:4c:76:c5:86:d7:c6:f8:14:7a:
         ec:40:25:1a:ee:eb:ac:fd:c7:1e:d3:f9:35:c8:43:50:3f:dc:
         33:46:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----