This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
File:                     85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json)
Hash identifier:          TrbEQdmAsjkHY1rhg/NxoznpDmsKsGitVIxeMdTLzpc=
Subject key identifier:   1D:95:7E:72:01:3C:F0:0B:64:E5:2E:E9:83:25:D1:16:33:FA:86:E4
Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95
Certificate issuer:       /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
Certificate serial:       668F7479B935C33BF4CDA65ECDD2178F6E89FD72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
Manifest number:          0329
Signing time:             Thu 11 Dec 2025 06:28:21 +0000
Manifest this update:     Thu 11 Dec 2025 06:23:21 +0000
Manifest next update:     Fri 12 Dec 2025 09:24:21 +0000
Files and hashes:         1: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=)
                          2: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=)
                          3: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: qGN6HpJ5OFRgmZjQwxR5o3k1hhb1s+94YdGiJ7ZuUZo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:74:79:b9:35:c3:3b:f4:cd:a6:5e:cd:d2:17:8f:6e:89:fd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
        Validity
            Not Before: Dec 11 06:23:21 2025 GMT
            Not After : Dec 12 09:24:21 2025 GMT
        Subject: CN=1D957E72013CF00B64E52EE98325D11633FA86E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:78:c6:62:d7:34:69:4a:75:75:ab:2a:e9:
                    07:b3:b2:35:45:99:6a:1a:7e:8a:e4:23:37:36:34:
                    ef:f8:6a:3d:53:1a:35:2e:12:b5:e4:a9:31:4a:a9:
                    a6:10:c5:b2:de:8f:9e:ea:bb:d3:fe:9f:9c:62:42:
                    44:3d:7a:e2:c5:ce:10:b1:b7:98:e8:71:d6:94:42:
                    34:13:1a:b5:f4:0c:62:aa:8b:56:ea:b1:3b:87:c8:
                    66:8c:1e:8b:f6:ea:49:51:b2:6e:69:36:9b:7f:3d:
                    e1:f6:00:eb:57:c7:f2:0c:28:4a:58:9f:e4:c3:fc:
                    77:37:c8:0a:5f:04:d3:09:13:5e:c1:c4:c9:cf:d9:
                    e1:a0:49:b7:37:29:3a:f5:03:71:b7:4c:77:38:98:
                    99:83:24:28:53:04:3b:89:b1:cb:15:9f:03:75:a7:
                    71:28:d7:d0:d1:ca:c4:d4:50:75:6e:5a:9f:f5:fc:
                    6f:c9:76:f0:5e:2d:6b:68:5a:45:44:ff:49:fa:ec:
                    43:66:14:6a:eb:fe:ff:ad:9a:12:3e:fc:cf:13:af:
                    df:20:04:26:6e:96:15:a6:3c:aa:cb:6c:b8:50:8b:
                    74:be:d5:bd:30:35:da:20:45:62:16:46:31:a8:b3:
                    9c:be:ce:31:b1:f1:70:28:4d:a1:a6:c8:ca:98:93:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:95:7E:72:01:3C:F0:0B:64:E5:2E:E9:83:25:D1:16:33:FA:86:E4
            X509v3 Authority Key Identifier:
                keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:81:0e:1d:d1:a5:6a:ee:08:54:4d:16:08:70:2a:7f:37:30:
         6f:d1:65:8a:0d:db:8e:2b:dd:28:46:04:94:76:fe:e1:5e:21:
         89:ac:d0:da:d2:66:a7:42:93:d7:08:e6:24:e0:0a:03:50:e8:
         26:c4:19:8f:c3:27:72:cb:e0:57:7c:cb:16:1b:f5:b0:5f:75:
         4a:1d:79:60:dc:c7:c5:45:f0:7a:bb:4f:6a:4f:d1:07:f1:30:
         c0:25:9e:dd:f1:d8:f8:60:9b:42:a7:06:60:cd:74:1c:5f:73:
         9b:63:ca:9d:3d:68:2f:52:2e:90:1d:a1:5b:c0:9c:08:b7:0c:
         f7:b6:92:29:43:74:b4:a3:21:53:64:c3:c5:d8:d6:70:31:05:
         28:b4:09:a1:60:73:35:81:f6:a3:b6:9c:e1:a7:98:d6:c4:a0:
         4e:90:c6:fe:a1:7f:f2:d5:d8:41:8d:4e:96:8b:a6:4a:24:80:
         97:f9:a7:9b:99:45:fc:7e:14:65:44:2d:09:e3:4a:cb:6c:3e:
         dc:ab:98:8f:e6:89:7c:bb:e5:73:a2:d4:cf:12:ae:c8:f6:aa:
         4f:bb:92:8c:13:c4:41:23:60:bf:ea:25:fd:02:54:27:b4:b7:
         60:6f:ea:39:5d:e3:30:56:31:21:0a:7e:cd:be:b4:d0:ce:d4:
         ac:a6:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----