This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
File:                     829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft (raw, json)
Hash identifier:          sFXBVwWy8WUSZL+8DS8Hs1xN6q3w8NJXC/oYhyo6E0I=
Subject key identifier:   6A:02:05:FF:B5:18:C4:EF:12:E6:E9:A8:00:F7:93:D1:F7:1C:D1:B6
Authority key identifier: 82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A
Certificate issuer:       /CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
Certificate serial:       D30B105E02C00390BC8A3D7805137D0B044494
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
Manifest number:          3D
Signing time:             Sun 14 Dec 2025 17:27:02 +0000
Manifest this update:     Sun 14 Dec 2025 17:22:02 +0000
Manifest next update:     Mon 15 Dec 2025 17:48:02 +0000
Files and hashes:         1: 829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl (hash: hf+UXkY6+1e1shxxTDXYIFcQQRfEBYbzv0UnQdvSFtY=)
                          2: 323830343a393166343a3a2f33322d3438203d3e20323734363738.roa (hash: ghEUttYr177zxqlIFjApVok9ngnyD5oBX76OmMMBEqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:0b:10:5e:02:c0:03:90:bc:8a:3d:78:05:13:7d:0b:04:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
        Validity
            Not Before: Dec 14 17:22:02 2025 GMT
            Not After : Dec 15 17:48:02 2025 GMT
        Subject: CN=6A0205FFB518C4EF12E6E9A800F793D1F71CD1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:23:3d:0d:77:c8:7d:c3:a9:e0:77:75:05:
                    6c:9c:e6:ad:50:72:f7:96:d1:0e:ae:90:b4:cd:ad:
                    2c:04:f6:c2:1b:89:f4:46:fe:38:16:3f:26:25:2f:
                    a9:b9:83:b3:22:61:c4:64:d3:d8:ad:8d:31:9c:c4:
                    cf:72:c8:78:97:6a:f6:0b:62:ae:f2:3c:ed:67:d6:
                    12:bf:ce:d8:e0:d7:57:f7:6a:11:e3:09:9b:2d:72:
                    83:ac:bb:5d:b1:dc:d2:58:8d:ce:c9:ee:5e:6e:55:
                    46:48:26:75:6b:2d:3c:1e:55:6b:76:74:8c:c1:fd:
                    a2:94:1b:d4:49:27:15:dc:65:e2:ca:b8:0a:d4:f4:
                    94:c4:fb:05:99:4d:80:21:ce:fb:54:7a:81:0c:24:
                    59:ed:d5:71:a3:f1:25:bf:b6:11:6c:f4:0f:69:73:
                    8f:ef:b7:96:cb:4b:e1:84:c6:fe:bc:df:65:c8:75:
                    46:2f:58:87:a4:42:70:57:92:02:6e:c5:b0:78:e8:
                    22:76:0c:54:c8:3a:db:75:2c:70:f3:92:0c:c9:69:
                    2f:23:4e:f8:2f:f1:cd:1a:7c:be:fa:83:e1:14:86:
                    54:3c:36:62:ba:62:67:50:2c:32:c3:29:a3:96:81:
                    56:2b:71:c6:10:c5:d3:42:07:60:2d:46:41:bb:be:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:05:FF:B5:18:C4:EF:12:E6:E9:A8:00:F7:93:D1:F7:1C:D1:B6
            X509v3 Authority Key Identifier:
                keyid:82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:74:80:f1:60:09:82:35:45:11:8f:5f:a3:85:f9:7a:f3:
         5c:cd:90:05:e2:6c:59:e0:95:d3:41:9f:85:b5:22:83:44:dc:
         35:66:9d:53:43:f6:6c:82:5a:98:41:30:9f:2b:67:83:ea:79:
         b0:11:95:10:91:55:55:6e:55:e9:f9:35:58:e3:2a:09:24:4f:
         04:17:65:4d:a3:47:3a:00:be:f4:94:1a:1f:a2:10:d4:ca:f4:
         dd:49:95:e1:39:9f:a2:f2:b5:56:13:8c:62:a1:82:a4:26:19:
         98:8c:c6:36:af:52:bb:90:03:a9:e4:4e:70:1d:21:dc:d2:f6:
         4b:97:27:e2:97:9d:c7:d8:5f:56:28:da:fb:06:62:4b:17:a6:
         e1:72:77:b5:a6:7a:02:e8:26:9e:d2:98:57:d2:8b:57:3b:ed:
         8c:9d:73:ef:a6:f6:53:62:9f:92:d9:a0:79:52:87:ae:f5:52:
         8a:a1:21:9c:04:70:49:42:cc:1d:4d:57:cc:15:20:61:5b:a3:
         e6:35:24:cb:93:9c:b5:32:ca:85:fb:6b:8e:b3:13:9a:ec:de:
         7b:ba:74:1f:c6:8b:64:49:51:a0:39:56:73:02:8c:66:14:bc:
         65:ee:25:07:ca:f5:5e:48:ca:11:18:0f:ad:7f:f6:9d:9f:5f:
         18:38:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:51:32 2025 by rpki-client