This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft
File:                     5ECF0B69B6A75645B9568189FE8781FF6203232B.mft (raw, json)
Hash identifier:          Xwm9W2+0rQ+XIUfBsapb1Yz58KdoAubJrf7vKFAvjDA=
Subject key identifier:   D3:D8:98:FA:EE:49:C9:D2:08:8C:16:48:5A:CB:82:E0:BF:80:E4:A0
Authority key identifier: 5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B
Certificate issuer:       /CN=5ECF0B69B6A75645B9568189FE8781FF6203232B
Certificate serial:       70A74A0964962793A8DDC5EAF9C31942B8C966EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft
Manifest number:          012C
Signing time:             Thu 13 Nov 2025 13:12:00 +0000
Manifest this update:     Thu 13 Nov 2025 13:07:00 +0000
Manifest next update:     Fri 14 Nov 2025 16:06:00 +0000
Files and hashes:         1: 34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa (hash: ECip5hnOrlrlsvfHxIhY5+c4yESxbkFgSIZ9/UEY3uc=)
                          2: 5ECF0B69B6A75645B9568189FE8781FF6203232B.crl (hash: MZr+MpOD2D6QZxDGqxeWU7rwLR0mQx6MpGa3vE4+AsA=)
                          3: 323830343a353966383a3a2f33322d313238203d3e20323638373337.roa (hash: 36iucRR7kKtUxAKa39/CQHui+jhvMZ1ZsLlzYBYfc6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:4a:09:64:96:27:93:a8:dd:c5:ea:f9:c3:19:42:b8:c9:66:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECF0B69B6A75645B9568189FE8781FF6203232B
        Validity
            Not Before: Nov 13 13:07:00 2025 GMT
            Not After : Nov 14 16:06:00 2025 GMT
        Subject: CN=D3D898FAEE49C9D2088C16485ACB82E0BF80E4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:9d:cc:bb:09:d5:73:46:e5:db:06:dc:05:
                    9a:b9:5a:85:82:cb:e3:d1:43:50:ae:1e:23:24:ba:
                    12:36:91:18:9f:4d:b1:f4:15:2b:d3:69:93:08:47:
                    74:3d:8e:da:6e:3a:50:e2:45:b2:1a:cb:19:aa:a1:
                    fb:79:24:c4:a4:56:62:23:14:95:6e:2d:77:00:a7:
                    be:e5:05:8f:92:5a:e0:99:69:6e:d9:90:62:7e:1f:
                    1f:2e:07:ea:9e:36:ca:11:03:97:e0:0b:d4:98:c7:
                    11:25:0f:ab:f2:6f:8a:71:d9:5b:d9:f9:a7:e4:34:
                    92:22:dd:e0:2f:21:de:6a:76:32:f5:b2:86:19:3e:
                    03:6e:fc:d9:58:67:3d:fc:25:a7:c2:a8:53:29:7e:
                    23:b5:2b:79:75:a4:9c:2a:21:1f:3d:08:1a:6e:3f:
                    5b:3e:e2:b7:4b:46:50:c0:cb:e1:73:52:08:13:f9:
                    5e:63:cf:be:e0:f4:f2:d8:ef:6b:b9:20:0d:fb:cb:
                    0f:70:2e:66:fb:c4:98:92:ab:3d:38:16:13:35:82:
                    83:ef:e1:93:8f:72:a5:3f:bb:d8:d9:22:77:df:a8:
                    37:39:cb:a8:f0:0d:19:2e:7b:a6:ad:6a:60:a3:4b:
                    bb:98:79:4d:42:da:fe:1a:e8:1b:fa:7b:cf:dc:72:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D8:98:FA:EE:49:C9:D2:08:8C:16:48:5A:CB:82:E0:BF:80:E4:A0
            X509v3 Authority Key Identifier:
                keyid:5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:35:f6:18:d8:56:99:61:28:0a:7f:ce:b6:1c:47:0a:c8:
         d3:53:3f:02:31:73:9d:87:6d:10:b4:d4:96:a7:24:ea:18:d0:
         79:fc:dc:aa:88:eb:aa:70:3b:39:c7:cc:f1:bf:7f:76:6a:f2:
         96:44:1d:0e:da:2c:b6:9d:1a:14:f5:3d:4d:29:1b:eb:23:46:
         a2:2a:ff:34:54:9d:be:5b:3d:95:ab:85:5c:bf:97:50:f3:ae:
         c3:e8:19:21:36:2a:74:0c:4d:ea:b0:28:ce:1f:d4:82:43:96:
         d1:87:c2:ea:0c:07:9e:86:f8:94:cb:a1:77:c0:20:94:62:3c:
         b8:9f:fd:eb:3a:b3:77:54:d7:e3:83:2b:92:3d:45:e6:23:d9:
         81:03:40:41:bf:f0:3e:ad:66:3b:3a:6d:ac:02:30:ae:df:ab:
         a4:f3:9a:12:96:0e:f6:ea:93:66:02:8b:67:3a:2c:3e:7a:59:
         4d:3a:e4:99:be:14:fe:c1:ea:9e:dc:0d:86:ef:e4:e8:bb:bd:
         01:8b:6e:32:82:48:fb:cc:6d:99:86:e5:d6:c0:0a:76:6c:bb:
         23:e5:4f:6e:01:a4:e1:da:61:86:0a:ac:b8:98:cd:38:a7:54:
         9b:aa:30:0b:ff:42:af:21:d8:af:cb:ed:c6:36:05:ac:a5:27:
         ca:11:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----