This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft
File:                     4448E004036F523126413C919162478D2C301762.mft (raw, json)
Hash identifier:          YkAw3gfVU1y0OfO1D3KCQmEHqd8Xwo/wfIYHYCKW90I=
Subject key identifier:   B7:73:5D:81:CA:77:52:0F:2B:57:51:89:CE:A0:57:35:EC:32:9A:70
Authority key identifier: 44:48:E0:04:03:6F:52:31:26:41:3C:91:91:62:47:8D:2C:30:17:62
Certificate issuer:       /CN=4448E004036F523126413C919162478D2C301762
Certificate serial:       58B838903F5B4E4B2993E53435018062AFAE7475
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4448E004036F523126413C919162478D2C301762.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft
Manifest number:          01ED
Signing time:             Wed 29 Oct 2025 10:05:59 +0000
Manifest this update:     Wed 29 Oct 2025 10:00:59 +0000
Manifest next update:     Thu 30 Oct 2025 12:37:59 +0000
Files and hashes:         1: 4448E004036F523126413C919162478D2C301762.crl (hash: dIl/0ffvsAj8ck5Xyjlb81uV6dN3oUpU8ZKuIdU3nPo=)
                          2: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: hl6Rdra4g51hRed4CQtLqU4e64d0KqHvvrEH2OiDfA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:38:90:3f:5b:4e:4b:29:93:e5:34:35:01:80:62:af:ae:74:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4448E004036F523126413C919162478D2C301762
        Validity
            Not Before: Oct 29 10:00:59 2025 GMT
            Not After : Oct 30 12:37:59 2025 GMT
        Subject: CN=B7735D81CA77520F2B575189CEA05735EC329A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:14:33:47:56:7d:a1:1a:af:6f:10:f4:e6:
                    77:82:65:c8:5c:50:6e:69:87:c3:72:d6:49:42:f0:
                    20:26:be:39:9f:bb:13:2b:c8:5a:4b:28:dd:c3:64:
                    3e:90:1d:d8:84:70:d6:99:8d:15:8b:65:27:35:54:
                    ea:c8:8d:ff:c0:7d:77:74:ce:1c:00:f3:ef:f9:86:
                    74:5f:3f:3c:51:54:5b:c3:5c:20:63:52:fa:0e:cb:
                    c0:39:4d:4f:7a:a4:31:46:19:ba:dd:a7:3f:db:fe:
                    60:7b:a3:c1:3d:2b:b9:7e:57:3f:f0:49:d7:53:c6:
                    39:de:de:64:01:bc:e3:13:38:03:b4:b8:ca:dc:7b:
                    05:2c:80:56:b1:32:ec:83:52:4a:56:17:cb:6d:9d:
                    ff:2f:23:b7:f2:22:56:df:08:1d:cb:5d:5c:34:0f:
                    12:92:59:50:7a:60:66:d9:9b:12:58:70:dc:4d:e4:
                    e3:ea:a4:ed:db:b9:8f:4f:4a:6c:3e:65:de:d9:cf:
                    39:2a:e7:10:3b:b5:56:46:36:8b:15:ea:49:f3:78:
                    b0:b1:b6:fd:3b:29:33:3c:71:bf:cf:92:37:31:8e:
                    f4:34:17:88:34:91:67:ec:4e:f4:e4:20:c4:41:43:
                    d7:e1:88:87:2f:ab:d5:a4:e1:2c:fc:c7:1d:15:d0:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:5D:81:CA:77:52:0F:2B:57:51:89:CE:A0:57:35:EC:32:9A:70
            X509v3 Authority Key Identifier:
                keyid:44:48:E0:04:03:6F:52:31:26:41:3C:91:91:62:47:8D:2C:30:17:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4448E004036F523126413C919162478D2C301762.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d7:1f:a3:ee:f8:66:58:f2:10:12:f7:1b:db:3f:31:3d:d3:
         c5:fb:5f:50:56:30:0c:49:92:54:a6:57:9f:d1:13:0b:29:c2:
         36:ba:b6:fa:0e:69:53:dc:f8:ab:22:b7:b6:9f:31:5d:40:98:
         03:da:a1:53:cb:d7:42:60:08:98:a3:19:18:e0:7c:9b:2e:27:
         1f:84:9b:e4:cd:76:f9:5c:7f:ed:18:59:f3:07:6a:7f:99:8e:
         52:c7:6e:9d:33:0d:42:f0:d0:7d:36:9b:a1:72:fc:0e:ee:e5:
         41:3d:b5:e7:2d:ce:6e:66:04:78:21:81:3d:48:20:e0:fb:38:
         dc:ce:ca:50:39:84:80:ea:06:f0:38:c0:9f:64:0c:45:75:3c:
         a4:6d:b7:7e:f3:51:ab:05:66:42:6a:e7:62:2c:c5:19:ba:72:
         e6:4f:16:10:f7:af:67:31:98:cd:30:44:8e:93:01:ac:d0:fe:
         84:5b:65:d7:a9:8c:ea:0b:27:80:cc:f5:95:d2:ca:ae:7e:32:
         ae:e9:1a:8c:38:88:65:e7:27:24:63:26:51:43:b6:75:da:bf:
         ce:ac:3c:29:0c:3c:54:60:c8:90:69:3a:08:35:89:fe:58:f9:
         5a:2b:64:c0:11:a6:30:7f:28:3a:e9:d5:30:4d:e5:e9:91:96:
         21:1e:79:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWLg4kD9bTkspk+U0NQGAYq+udHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0OEUwMDQwMzZGNTIzMTI2NDEzQzkxOTE2MjQ3OEQy
QzMwMTc2MjAeFw0yNTEwMjkxMDAwNTlaFw0yNTEwMzAxMjM3NTlaMDMxMTAvBgNV
BAMTKEI3NzM1RDgxQ0E3NzUyMEYyQjU3NTE4OUNFQTA1NzM1RUMzMjlBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkghQzR1Z9oRqvbxD05neCZchc
UG5ph8Ny1klC8CAmvjmfuxMryFpLKN3DZD6QHdiEcNaZjRWLZSc1VOrIjf/AfXd0
zhwA8+/5hnRfPzxRVFvDXCBjUvoOy8A5TU96pDFGGbrdpz/b/mB7o8E9K7l+Vz/w
SddTxjne3mQBvOMTOAO0uMrcewUsgFaxMuyDUkpWF8ttnf8vI7fyIlbfCB3LXVw0
DxKSWVB6YGbZmxJYcNxN5OPqpO3buY9PSmw+Zd7Zzzkq5xA7tVZGNosV6knzeLCx
tv07KTM8cb/PkjcxjvQ0F4g0kWfsTvTkIMRBQ9fhiIcvq9Wk4Sz8xx0V0FdnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUt3Ndgcp3Ug8rV1GJzqBXNewymnAwHwYDVR0j
BBgwFoAUREjgBANvUjEmQTyRkWJHjSwwF2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRw
SEIvMC80NDQ4RTAwNDAzNkY1MjMxMjY0MTNDOTE5MTYyNDc4RDJDMzAxNzYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NDhFMDA0MDM2RjUyMzEy
NjQxM0M5MTkxNjI0NzhEMkMzMDE3NjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRwSEIvMC80
NDQ4RTAwNDAzNkY1MjMxMjY0MTNDOTE5MTYyNDc4RDJDMzAxNzYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi9cfo+74ZljyEBL3G9s/MT3TxftfUFYwDEmSVKZXn9ETCynCNrq2+g5pU9z4
qyK3tp8xXUCYA9qhU8vXQmAImKMZGOB8my4nH4Sb5M12+Vx/7RhZ8wdqf5mOUsdu
nTMNQvDQfTaboXL8Du7lQT215y3ObmYEeCGBPUgg4Ps43M7KUDmEgOoG8DjAn2QM
RXU8pG23fvNRqwVmQmrnYizFGbpy5k8WEPevZzGYzTBEjpMBrND+hFtl16mM6gsn
gMz1ldLKrn4yrukajDiIZecnJGMmUUO2ddq/zqw8KQw8VGDIkGk6CDWJ/lj5Witk
wBGmMH8oOunVME3l6ZGWIR557g==
-----END CERTIFICATE-----