This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft
File:                     5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft (raw, json)
Hash identifier:          cChuXA12Le+dIclWDsid07gWHlG2HVCVsJWSvfLUyoQ=
Subject key identifier:   CE:9D:DA:83:4B:41:10:C1:1D:81:01:91:10:20:1A:9A:2C:8B:D3:9D
Authority key identifier: 5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51
Certificate issuer:       /CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
Certificate serial:       5091672D247CCABE466B23E356F3E35648DAA9CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft
Manifest number:          62
Signing time:             Wed 01 Oct 2025 21:11:23 +0000
Manifest this update:     Wed 01 Oct 2025 21:06:23 +0000
Manifest next update:     Fri 03 Oct 2025 00:10:23 +0000
Files and hashes:         1: 3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa (hash: AjAGOAOR0UBQSzIoMS3TO/ZxsfluIuVXYR5MhAQhehc=)
                          2: 3136382e3138312e3137332e302f32342d3234203d3e20323635333432.roa (hash: vuq7TWcDcgNfP9anfxwr3KZcyBbujT1cfT8qQzzCf9k=)
                          3: 3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa (hash: RO0dMMtpa74Lzkefm8v4BPAHu04y6hf67g6js3TztaU=)
                          4: 3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa (hash: H5mWNZtuIAuL6Bg33XuUVczbkhMaM27ZOFlLG3H8nes=)
                          5: 323830343a326536303a3a2f33322d3332203d3e20323635333432.roa (hash: e0aIvwRwRGH7iMCEivEgxCv/LyPo1JLqklYbRYUS6tU=)
                          6: 3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa (hash: UagkNYkQxxauGlmhfzGx64sB+plJcFtBjxUskcWqzmk=)
                          7: 5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl (hash: Co1v7+zA08B5tm2IrGRXDtn2+dVJ8wTLmMqVE2ZuDys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:91:67:2d:24:7c:ca:be:46:6b:23:e3:56:f3:e3:56:48:da:a9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
        Validity
            Not Before: Oct  1 21:06:23 2025 GMT
            Not After : Oct  3 00:10:23 2025 GMT
        Subject: CN=CE9DDA834B4110C11D81019110201A9A2C8BD39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:b7:44:96:69:de:78:3f:ee:36:c4:3c:14:
                    a5:5a:93:c4:bd:96:2b:1d:f8:4e:d3:8e:8c:76:9c:
                    e9:d9:c8:c8:22:98:ad:d2:e2:45:53:8f:fc:50:08:
                    31:09:a3:28:b6:e1:45:f6:c2:08:b3:e9:81:2a:3c:
                    6d:2c:83:1e:c3:f9:5a:d5:f3:64:a3:1b:d9:ec:11:
                    1a:0f:dc:a3:cb:bf:f9:de:99:9a:09:14:cd:c6:ad:
                    0d:9f:b0:6f:1d:ca:7b:c0:15:24:8c:09:dc:4d:7b:
                    2d:b4:47:8a:c0:83:7c:19:5c:a6:54:17:fb:21:0b:
                    31:95:58:9a:63:50:c8:ee:e4:9d:1d:f2:e4:91:2f:
                    9c:e7:41:84:55:58:d8:45:84:aa:08:c1:a1:9c:16:
                    5b:43:8f:99:37:d7:fa:4e:9b:da:43:ed:79:3b:d7:
                    98:0c:dd:22:a9:a6:a1:46:cb:56:68:67:45:79:2d:
                    88:8b:95:d0:c0:a5:9c:52:d1:7f:fc:5e:b9:c8:c7:
                    28:d4:91:3a:1f:41:45:70:7f:f4:ec:34:1d:b4:f0:
                    3e:fa:7e:ca:8c:9c:2d:c9:e6:b7:c3:5e:e9:49:47:
                    eb:d6:4b:37:b7:11:5f:9e:a9:ed:6e:55:bd:99:94:
                    66:04:d0:b7:64:90:ab:3c:87:e1:87:95:e8:fb:00:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:DA:83:4B:41:10:C1:1D:81:01:91:10:20:1A:9A:2C:8B:D3:9D
            X509v3 Authority Key Identifier:
                keyid:5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:3a:51:7e:74:a9:66:29:c5:38:d1:de:88:63:00:9e:8d:
         56:bf:60:f8:b2:c9:2d:d1:d1:5b:c2:c2:37:bf:52:7e:ec:fe:
         73:52:93:d9:30:b8:64:6e:82:8e:8b:d6:8f:47:76:7e:8c:59:
         29:71:b4:fb:34:3f:d4:ea:2e:cc:84:98:1c:9b:1a:12:9f:98:
         de:81:0d:69:87:b5:f4:d2:a5:72:5a:f7:0b:27:26:25:97:82:
         b6:9c:7a:22:42:cf:c8:2e:cb:76:0f:c9:4f:a9:43:cf:b2:c7:
         30:bc:91:57:61:ac:7c:46:cc:8d:62:2c:c4:10:50:e3:2f:44:
         0f:8f:f3:a6:40:31:e5:f6:f0:92:c9:5f:67:c0:b6:65:07:49:
         bd:4f:65:2b:8d:b5:d4:fa:5a:29:07:a1:a2:e6:2d:5e:ec:58:
         27:73:74:86:b0:e6:d2:c8:5e:87:01:9b:54:07:fb:48:67:af:
         2e:6d:c1:eb:7b:5d:ed:66:04:5b:02:a5:47:8d:ff:a4:5c:92:
         f6:9e:f8:ea:cb:cb:32:67:c1:b8:db:2a:7b:16:3f:9b:e2:f3:
         30:6a:ed:29:e2:75:ee:dd:25:ec:94:a1:f3:c5:0f:a4:74:51:
         4f:80:54:4e:bc:4c:eb:84:85:fd:76:17:df:c5:37:06:27:38:
         5b:1d:72:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUJFnLSR8yr5GayPjVvPjVkjaqcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMyOEM4QkRFRTRGREYxMjc0MTU3MjFCMzFCMUQ5MDk4
REQ2RTg1MTAeFw0yNTEwMDEyMTA2MjNaFw0yNTEwMDMwMDEwMjNaMDMxMTAvBgNV
BAMTKENFOUREQTgzNEI0MTEwQzExRDgxMDE5MTEwMjAxQTlBMkM4QkQzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbLdElmneeD/uNsQ8FKVak8S9
lisd+E7Tjox2nOnZyMgimK3S4kVTj/xQCDEJoyi24UX2wgiz6YEqPG0sgx7D+VrV
82SjG9nsERoP3KPLv/nemZoJFM3GrQ2fsG8dynvAFSSMCdxNey20R4rAg3wZXKZU
F/shCzGVWJpjUMju5J0d8uSRL5znQYRVWNhFhKoIwaGcFltDj5k31/pOm9pD7Xk7
15gM3SKppqFGy1ZoZ0V5LYiLldDApZxS0X/8XrnIxyjUkTofQUVwf/TsNB208D76
fsqMnC3J5rfDXulJR+vWSze3EV+eqe1uVb2ZlGYE0LdkkKs8h+GHlej7AD+9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzp3ag0tBEMEdgQGRECAamiyL050wHwYDVR0j
BBgwFoAUXCjIve5P3xJ0FXIbMbHZCY3W6FEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFg3ZW9UV29rd2d2a0tKZ0R6SmpLUDY5aGhrUlJWTkNYUXR6VExqMVZ3
b0wvMC81QzI4QzhCREVFNEZERjEyNzQxNTcyMUIzMUIxRDkwOThERDZFODUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMjhDOEJERUU0RkRGMTI3
NDE1NzIxQjMxQjFEOTA5OERENkU4NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFg3ZW9UV29rd2d2a0tKZ0R6SmpLUDY5aGhrUlJWTkNYUXR6VExqMVZ3b0wvMC81
QzI4QzhCREVFNEZERjEyNzQxNTcyMUIzMUIxRDkwOThERDZFODUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVsQ6UX50qWYpxTjR3ohjAJ6NVr9g+LLJLdHRW8LCN79Sfuz+c1KT2TC4ZG6C
jovWj0d2foxZKXG0+zQ/1OouzISYHJsaEp+Y3oENaYe19NKlclr3CycmJZeCtpx6
IkLPyC7Ldg/JT6lDz7LHMLyRV2GsfEbMjWIsxBBQ4y9ED4/zpkAx5fbwkslfZ8C2
ZQdJvU9lK4211PpaKQehouYtXuxYJ3N0hrDm0shehwGbVAf7SGevLm3B63td7WYE
WwKlR43/pFyS9p746svLMmfBuNsqexY/m+LzMGrtKeJ17t0l7JSh88UPpHRRT4BU
TrxM64SF/XYX38U3Bic4Wx1yKw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:29:08 2025 by rpki-client