This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
File:                     BA84972F94DED1627363CADBFA872D5EA75BBC41.mft (raw, json)
Hash identifier:          RLLmuxlPOUKraBB/QDekLk/83Ws8iy99hIb1XBNBhJo=
Subject key identifier:   6A:C1:07:F1:9F:18:DC:E4:9C:78:1B:3A:F0:BD:EC:4C:F8:E8:16:0A
Authority key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
Certificate issuer:       /CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
Certificate serial:       3936D9DBBDB9059D4C1995DE3ED8C2FC5BC2A452
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
Manifest number:          0338
Signing time:             Tue 09 Dec 2025 11:10:04 +0000
Manifest this update:     Tue 09 Dec 2025 11:05:04 +0000
Manifest next update:     Wed 10 Dec 2025 13:41:04 +0000
Files and hashes:         1: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: DwVRyItCXzF1NtVNIos708VR3IDVRGGvieLyPzQ1SNM=)
                          2: BA84972F94DED1627363CADBFA872D5EA75BBC41.crl (hash: hvoLUeTJwag0M5iyuFdyKxbQJDNOXJIvJ/DYvLFQFVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:d9:db:bd:b9:05:9d:4c:19:95:de:3e:d8:c2:fc:5b:c2:a4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
        Validity
            Not Before: Dec  9 11:05:04 2025 GMT
            Not After : Dec 10 13:41:04 2025 GMT
        Subject: CN=6AC107F19F18DCE49C781B3AF0BDEC4CF8E8160A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:26:28:8a:dc:c9:0c:ae:28:d9:f4:4d:bf:
                    83:32:e2:da:e0:ae:d9:53:2a:8c:d4:49:54:96:85:
                    cf:aa:13:eb:2b:80:7c:6a:03:a6:79:16:36:5f:4b:
                    35:0a:50:4b:ba:1d:0b:a7:36:60:3b:07:9b:ba:59:
                    31:ac:b7:fd:21:d8:bb:c6:a3:d9:dd:62:66:dc:3d:
                    b1:38:aa:0f:5c:24:b0:1f:48:3f:a6:9a:83:22:6d:
                    d3:e8:57:62:91:85:d6:b8:8c:a5:77:8a:0f:64:4e:
                    4a:10:45:e4:e9:c4:5a:22:cb:da:46:3a:df:e6:26:
                    dc:a8:13:9c:c8:17:01:53:81:aa:b7:2a:3b:a2:2e:
                    f2:3a:a4:48:8c:c4:25:d9:f6:9f:a4:75:4b:5c:11:
                    1a:a5:b4:f6:4b:e7:49:2f:22:02:b0:e9:af:b6:ed:
                    82:ba:63:28:d5:fe:ee:89:10:b3:f9:01:66:98:11:
                    c0:43:4a:09:b1:75:19:25:f5:75:ae:ea:4d:45:1f:
                    9e:62:3d:6a:82:b0:86:65:71:22:66:54:cf:e8:44:
                    ad:9e:09:4e:ba:ed:43:05:b0:b6:f9:8e:99:dd:fb:
                    d4:8a:1a:f4:26:36:48:f2:c6:e9:88:d5:9b:2e:1f:
                    e4:2e:47:14:a6:d0:c5:c7:0d:67:6f:05:51:94:ea:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C1:07:F1:9F:18:DC:E4:9C:78:1B:3A:F0:BD:EC:4C:F8:E8:16:0A
            X509v3 Authority Key Identifier:
                keyid:BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b5:cb:bd:a9:fe:08:ec:9a:1a:21:c5:0d:50:12:59:c9:fa:
         e0:36:7f:f1:c4:ca:65:18:95:e6:b6:04:c9:6e:c7:7b:0d:c0:
         66:2e:df:f1:72:65:01:9e:13:f1:b4:a2:a6:b7:84:0a:f4:54:
         43:fa:98:78:05:ea:a6:f5:20:6c:b8:a7:b0:2e:d2:ac:f1:c2:
         fd:8d:db:e3:2d:ed:c6:60:d0:e3:79:7f:80:6b:e7:47:19:a8:
         41:3f:d9:74:1e:a3:1e:4d:cc:6e:63:55:59:d0:dc:c4:87:8f:
         f9:7f:6f:d7:18:c1:ec:05:bc:d0:cf:ac:64:24:20:c2:5d:65:
         ab:5e:68:83:db:03:11:f5:82:33:9d:56:d3:f8:6e:8b:da:da:
         d3:f4:5a:63:c7:9a:68:30:3b:ea:ab:26:e7:4c:8c:3a:91:2d:
         9a:86:1f:28:41:a5:f9:51:a0:5c:c3:2f:f6:a6:a9:73:72:c3:
         c0:d2:cb:18:ec:e9:ef:3b:bb:24:49:5d:b1:fe:cc:eb:da:e2:
         09:f3:63:bb:3b:25:ca:d3:a2:5b:df:16:aa:2f:d7:57:a1:c8:
         b2:39:15:0d:35:9e:e8:51:b5:e9:92:e5:82:eb:5a:9d:cc:8b:
         8a:5e:8a:95:e6:98:e6:9b:be:d9:e8:2a:82:62:09:95:12:87:
         3a:69:04:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOTbZ2725BZ1MGZXePtjC/FvCpFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE4NDk3MkY5NERFRDE2MjczNjNDQURCRkE4NzJENUVB
NzVCQkM0MTAeFw0yNTEyMDkxMTA1MDRaFw0yNTEyMTAxMzQxMDRaMDMxMTAvBgNV
BAMTKDZBQzEwN0YxOUYxOERDRTQ5Qzc4MUIzQUYwQkRFQzRDRjhFODE2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFSYoitzJDK4o2fRNv4My4trg
rtlTKozUSVSWhc+qE+srgHxqA6Z5FjZfSzUKUEu6HQunNmA7B5u6WTGst/0h2LvG
o9ndYmbcPbE4qg9cJLAfSD+mmoMibdPoV2KRhda4jKV3ig9kTkoQReTpxFoiy9pG
Ot/mJtyoE5zIFwFTgaq3KjuiLvI6pEiMxCXZ9p+kdUtcERqltPZL50kvIgKw6a+2
7YK6YyjV/u6JELP5AWaYEcBDSgmxdRkl9XWu6k1FH55iPWqCsIZlcSJmVM/oRK2e
CU667UMFsLb5jpnd+9SKGvQmNkjyxumI1ZsuH+QuRxSm0MXHDWdvBVGU6pHFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUasEH8Z8Y3OSceBs68L3sTPjoFgowHwYDVR0j
BBgwFoAUuoSXL5Te0WJzY8rb+octXqdbvEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE
cGQvMS9CQTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBODQ5NzJGOTRERUQxNjI3
MzYzQ0FEQkZBODcyRDVFQTc1QkJDNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMS9C
QTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzLXLvan+COyaGiHFDVASWcn64DZ/8cTKZRiV5rYEyW7Hew3AZi7f8XJlAZ4T
8bSipreECvRUQ/qYeAXqpvUgbLinsC7SrPHC/Y3b4y3txmDQ43l/gGvnRxmoQT/Z
dB6jHk3MbmNVWdDcxIeP+X9v1xjB7AW80M+sZCQgwl1lq15og9sDEfWCM51W0/hu
i9ra0/RaY8eaaDA76qsm50yMOpEtmoYfKEGl+VGgXMMv9qapc3LDwNLLGOzp7zu7
JEldsf7M69riCfNjuzslytOiW98Wqi/XV6HIsjkVDTWe6FG16ZLlgutancyLil6K
leaY5pu+2egqgmIJlRKHOmkE8A==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:00:40 2025 by rpki-client