This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft
File:                     9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft (raw, json)
Hash identifier:          vyDkWkoM3cCoSK+q55uEdGC6r1G80jlFYKYd722BNAI=
Subject key identifier:   09:AA:CB:24:56:AE:80:A3:D4:48:12:3F:B8:A6:1A:19:8E:51:28:E9
Authority key identifier: 9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF
Certificate issuer:       /CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF
Certificate serial:       74EAC20E7CF3CB31FF50C8C2C2A5B9476F8B5201
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft
Manifest number:          F4
Signing time:             Tue 23 Sep 2025 10:33:25 +0000
Manifest this update:     Tue 23 Sep 2025 10:28:25 +0000
Manifest next update:     Wed 24 Sep 2025 11:55:25 +0000
Files and hashes:         1: 9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl (hash: LDM+/a2ryy12F0gle8s1qmK1kKxZNs68ruScSBfI8p4=)
                          2: 3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa (hash: hFRV97wA8T/QDnmF7Ijr8alWrMcuht4PcO84oSwDwus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:c2:0e:7c:f3:cb:31:ff:50:c8:c2:c2:a5:b9:47:6f:8b:52:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF
        Validity
            Not Before: Sep 23 10:28:25 2025 GMT
            Not After : Sep 24 11:55:25 2025 GMT
        Subject: CN=09AACB2456AE80A3D448123FB8A61A198E5128E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:25:7b:b5:be:1b:c5:f2:d0:f3:37:d8:b0:
                    f6:0f:e8:f4:68:9e:c5:e3:6d:e9:2d:d8:91:24:91:
                    3f:24:cf:4d:8f:c0:7b:40:73:c7:34:d3:80:1c:42:
                    93:53:c4:fe:68:01:ab:e1:ae:0c:0e:d8:de:84:50:
                    c2:ae:bd:4a:b4:92:d3:4f:3c:78:1d:89:4b:e0:ef:
                    f7:2e:cb:3b:78:4b:6a:ef:12:13:ae:a1:40:b9:b4:
                    d5:bc:0d:4a:7d:93:ec:73:b6:58:7a:16:a8:83:84:
                    18:20:a4:9d:76:6e:d5:ca:a3:f0:d8:99:91:6e:10:
                    eb:f0:c1:a8:b3:b2:aa:b8:34:e9:03:87:06:40:4a:
                    13:e2:50:39:29:e9:ee:66:16:9e:44:9b:6d:48:19:
                    d8:28:42:54:b7:21:9f:de:35:5e:79:93:21:5b:fa:
                    35:fb:f0:33:95:e6:6d:c5:64:54:7c:6e:3d:89:02:
                    4a:1e:fb:bf:8b:77:da:dc:e8:a2:14:ba:ab:b1:c5:
                    be:46:ab:f6:27:b7:cd:6d:e2:05:fa:0d:87:25:ae:
                    a9:dc:a3:40:44:10:c8:ab:ca:db:4e:44:3f:df:f1:
                    95:50:c5:b7:64:4f:07:fa:4d:e7:5e:ff:f0:0a:40:
                    38:f2:1f:d6:ab:36:a2:52:16:8b:70:77:45:5f:b8:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AA:CB:24:56:AE:80:A3:D4:48:12:3F:B8:A6:1A:19:8E:51:28:E9
            X509v3 Authority Key Identifier:
                keyid:9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:b9:09:3e:aa:28:a7:46:c5:50:20:d3:f0:4a:aa:a1:aa:
         68:c4:65:ab:43:06:36:95:00:3b:6b:08:88:4f:35:29:48:8e:
         4b:4d:32:28:db:cf:cb:37:c0:9f:a1:76:62:59:93:7e:b7:2f:
         5c:a2:98:38:1b:0f:f4:5b:45:7b:33:73:0d:e5:c2:1d:fb:3e:
         bf:dc:46:8a:f4:76:a5:9d:d6:50:7a:fa:dc:b9:6e:4b:95:80:
         d2:53:98:3c:5a:09:19:c5:13:4b:ee:f9:1a:5a:9b:c6:0f:39:
         8b:92:a3:42:94:ce:f9:cb:b0:40:72:7f:1a:eb:82:3f:17:cf:
         2b:f2:db:59:ab:14:e0:e9:84:80:e7:e2:72:7e:70:01:07:b1:
         db:aa:53:65:be:1d:99:7e:a9:73:6b:cb:7d:77:7f:5d:bb:85:
         98:4c:64:fa:b5:e5:22:53:12:37:eb:46:59:58:3a:28:dc:25:
         f8:f0:c6:3d:d7:0e:3a:4d:1c:7e:aa:27:98:49:f0:ef:83:bd:
         16:9b:40:bf:2d:a5:f2:99:88:48:8f:20:00:47:bc:c1:71:34:
         da:27:fc:95:48:d5:53:bd:eb:34:a3:24:6f:aa:ea:bd:bc:62:
         1c:b9:a7:a0:b0:f1:9b:4a:43:80:83:57:34:b4:68:06:e7:e3:
         68:5c:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----