This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
File:                     970A597B9FBB9D768A57AC58C4580E0C21651B91.mft (raw, json)
Hash identifier:          Nk79t6L6WXRiXNDfxrWqww7XRlAW8dtkBz58wcrsWno=
Subject key identifier:   98:E0:D1:61:45:CB:58:2F:59:43:CD:46:0A:38:02:ED:0D:65:D6:B0
Authority key identifier: 97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91
Certificate issuer:       /CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
Certificate serial:       1ADCEAFAD70A7E9C142D1665D0A519AD98DF9C2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
Manifest number:          37
Signing time:             Mon 01 Sep 2025 12:03:37 +0000
Manifest this update:     Mon 01 Sep 2025 11:58:37 +0000
Manifest next update:     Tue 02 Sep 2025 13:21:37 +0000
Files and hashes:         1: 34352e3136352e302e302f32322d3332203d3e20323638363635.roa (hash: dYY3MlgnhnOml7GIjRRHei2QhjXTZquLadyZnPbyIyg=)
                          2: 970A597B9FBB9D768A57AC58C4580E0C21651B91.crl (hash: wT/cWWkSXuIj6yuwdubEZxkGPxUGYq/5hGW5gqfi+wo=)
                          3: 323830343a353462303a3a2f33322d313238203d3e20323638363635.roa (hash: 613mbXkb9wniobS2aXA4uFw6FMTpLa8dAExRI3B3X48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:ea:fa:d7:0a:7e:9c:14:2d:16:65:d0:a5:19:ad:98:df:9c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
        Validity
            Not Before: Sep  1 11:58:37 2025 GMT
            Not After : Sep  2 13:21:37 2025 GMT
        Subject: CN=98E0D16145CB582F5943CD460A3802ED0D65D6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:e9:dc:2d:ed:ba:fc:fe:3c:da:47:74:b5:
                    fd:84:9e:ec:74:19:44:d5:c5:c1:1e:db:c1:23:f4:
                    d5:85:73:33:bf:62:d4:0d:a8:2f:ee:a5:cd:73:6b:
                    2c:01:f9:2f:70:d1:c6:6c:54:97:f5:0d:49:86:f0:
                    cf:53:00:42:e9:8b:c5:58:1a:16:9f:8a:bc:ef:e4:
                    ff:42:f2:c1:d1:ed:8e:f7:dc:aa:4e:03:f2:5a:6e:
                    08:15:6b:03:05:a3:04:cd:3e:60:e0:4b:32:3e:c7:
                    c6:75:54:a6:6b:09:ae:d6:08:60:e2:72:83:3e:96:
                    92:fa:44:ed:ba:b7:0c:c8:01:6c:5b:08:9b:48:1b:
                    20:e6:42:91:f4:29:56:b1:fc:0c:b4:6a:7a:37:08:
                    ef:e8:75:e8:08:9c:15:13:06:c8:6f:33:90:b3:6a:
                    e5:0e:ed:7b:96:f9:3c:42:c2:61:5d:c3:65:d7:65:
                    6d:2c:de:d2:29:e3:cd:86:54:32:e8:2d:28:79:3a:
                    28:b0:68:29:76:06:d7:fd:91:f0:f3:52:c7:b3:42:
                    ae:27:a1:3a:75:a4:4f:a9:7d:a3:b7:f6:2a:10:d3:
                    9a:76:0f:1d:13:aa:19:fa:68:43:38:a3:13:3f:f2:
                    59:2b:cc:0d:4a:02:aa:f9:f0:6b:b3:93:bc:0c:6e:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:D1:61:45:CB:58:2F:59:43:CD:46:0A:38:02:ED:0D:65:D6:B0
            X509v3 Authority Key Identifier:
                keyid:97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:78:a6:24:d1:40:75:a4:91:6d:2a:64:69:cd:d1:99:06:
         4c:b9:8e:a2:11:b4:6a:97:e5:e6:a2:b9:ec:bc:4e:92:2c:00:
         a5:da:50:0d:96:1a:21:6c:e2:0e:13:75:b4:a1:d3:85:54:e7:
         91:bd:7a:87:b4:2c:0f:70:60:71:83:7d:af:ff:0b:15:dd:07:
         24:f2:26:d5:68:83:f7:06:d5:b1:17:e7:28:9c:8c:cf:87:9e:
         35:a9:fb:0a:5d:cf:c0:8c:f4:a6:24:45:ad:1e:cb:ff:d0:d3:
         8c:af:15:da:22:4e:ec:b7:40:4b:ff:b0:38:9f:67:4e:28:cc:
         e7:2f:cc:2f:1e:eb:85:51:a5:e6:b6:ae:ac:98:50:4a:f1:90:
         fc:50:dd:73:d8:42:a2:03:40:b0:20:79:1e:9d:75:75:4f:58:
         af:b4:11:06:79:df:e8:8a:b5:77:3c:d8:84:36:92:86:d8:97:
         bb:d9:8c:5e:7e:49:88:e7:4a:da:54:5e:60:cb:9f:9e:ef:c1:
         1e:33:4e:79:2a:cf:9c:f8:bd:40:77:84:47:0f:3e:e3:ed:57:
         42:f2:2f:84:1f:db:55:82:eb:4b:90:26:70:3c:f1:51:a1:55:
         78:12:23:cb:bc:45:04:b3:da:1e:ff:d7:d8:e6:52:f2:16:8e:
         43:9f:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----