This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.mft
File:                     2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.mft (raw, json)
Hash identifier:          vHgyGUk5swL8yReYnaQHafrsza94JjLxwH7G3P8mvKc=
Subject key identifier:   63:4B:B8:EC:E4:90:54:D9:0A:AA:48:BC:DB:43:39:7D:CA:C4:13:B5
Authority key identifier: 2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7
Certificate issuer:       /CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
Certificate serial:       5323FF9B7E7912E9C529D99CE1ADA491F5465351
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.mft
Manifest number:          0164
Signing time:             Fri 12 Dec 2025 15:17:43 +0000
Manifest this update:     Fri 12 Dec 2025 15:12:43 +0000
Manifest next update:     Sat 13 Dec 2025 17:58:43 +0000
Files and hashes:         1: 34352e3137382e3230382e302f32322d3234203d3e20323633333332.roa (hash: ROEwcs6t5sVgA1PxDofFidDHtRe6THnJmRMqOCfewjE=)
                          2: 2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl (hash: L42XGUCfPY3SykQU3AnwUnCb2n1uDStoGHz2PUdnufg=)
                          3: 323830343a356561343a3a2f33322d3438203d3e20323633333332.roa (hash: 1Jmh4vtx1GSRtuoL//I2ju6u5fI6fYWJOJLb+ZLhLnE=)
                          4: 323830343a356561343a3a2f33322d3438203d3e20323639303437.roa (hash: pvaUlMTt8Ix5bav5kCiR3Eajo0ykDIRGsnqA+TZzILM=)
                          5: 34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa (hash: ksxTxwC1nvXtfamTEK9SCZeLP3p53LrAwncEcspwQ3A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:23:ff:9b:7e:79:12:e9:c5:29:d9:9c:e1:ad:a4:91:f5:46:53:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
        Validity
            Not Before: Dec 12 15:12:43 2025 GMT
            Not After : Dec 13 17:58:43 2025 GMT
        Subject: CN=634BB8ECE49054D90AAA48BCDB43397DCAC413B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:96:64:7f:b3:cb:60:d8:cf:1f:e0:14:17:
                    7c:80:df:4c:0d:b9:78:cc:e1:d5:30:03:ab:9d:c2:
                    15:d6:dc:1c:ad:0d:39:1a:44:e9:87:ea:a3:6e:d5:
                    9e:ce:ab:ea:5e:c8:5c:dd:73:c9:e7:b9:f6:4f:d1:
                    ee:e6:4d:53:65:62:07:dd:83:ba:b1:89:62:db:96:
                    54:76:d8:f0:74:3e:47:a9:6e:54:9e:74:64:bf:ab:
                    2e:58:4c:1a:a6:22:1f:7a:da:d6:7d:50:5d:35:70:
                    95:95:35:ea:70:77:cb:96:e7:af:76:36:86:07:dd:
                    9b:e2:de:dd:a1:d7:54:a3:0c:95:81:a2:ba:b7:b7:
                    72:fd:db:82:eb:d8:c4:b6:1b:42:6b:bc:73:04:89:
                    fe:a1:fb:47:03:21:72:64:81:eb:0d:74:4a:d4:af:
                    5c:26:a2:c0:e4:47:0b:ed:22:62:c2:3f:32:ed:d4:
                    ec:37:8b:bb:51:e9:cd:2b:ae:dd:10:0c:ee:34:f4:
                    4d:7a:fc:88:e9:39:d6:82:7e:db:67:bb:5d:ee:d4:
                    60:e6:b8:ad:b3:f9:d3:a9:68:8a:d2:c1:8c:19:e2:
                    20:07:80:63:94:fc:b0:5c:98:41:5f:7c:ef:7e:f3:
                    f2:ec:9d:68:73:a0:84:f0:b8:b0:8e:f9:fc:af:e2:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:B8:EC:E4:90:54:D9:0A:AA:48:BC:DB:43:39:7D:CA:C4:13:B5
            X509v3 Authority Key Identifier:
                keyid:2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0b:33:f5:49:dd:1f:8a:87:8c:b5:b3:8f:a9:a7:ca:01:42:
         2c:29:ca:5f:1f:98:ad:fc:fe:1a:b9:74:04:63:50:4d:92:c2:
         30:3d:60:81:0e:93:00:7a:a0:c7:26:ff:19:b2:c3:c7:5c:b2:
         0d:02:de:6d:bb:e4:39:a2:e4:48:6f:d8:b1:ca:d6:37:1d:8c:
         07:17:59:d7:7f:60:41:a2:9b:4b:3f:00:cc:0c:d4:c2:59:28:
         2c:10:b6:aa:7d:b3:01:e1:c3:70:73:12:a8:a6:4a:7a:24:b5:
         0a:70:b1:97:86:12:bf:2b:a4:04:f2:37:74:05:6f:30:10:df:
         64:aa:3f:4f:35:8f:e3:a7:13:5b:6b:07:a4:05:d0:b9:98:21:
         88:33:e9:8c:e8:6c:b7:2c:88:af:1d:b4:a6:9c:0d:ca:74:b5:
         45:e4:1c:7d:e3:f9:b1:e4:6e:80:3f:d5:80:e6:8c:c0:3c:5b:
         31:97:1e:cc:9c:10:35:20:f2:9a:96:77:9e:63:d1:d9:8d:f1:
         c7:b0:80:f8:d4:68:79:fa:2f:58:85:fc:d8:94:77:b7:97:e9:
         ad:84:88:97:c1:53:5e:ac:d2:43:be:f3:f6:b3:78:4d:05:38:
         fc:e7:ed:f5:cb:76:3d:22:5e:a7:59:b3:61:42:c8:58:c5:57:
         1b:f4:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:00:32 2025 by rpki-client