This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
File:                     3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft (raw, json)
Hash identifier:          dgMHlcbQ1pBtEwK8+r7E/WqLc0V6YNFzpm3pFQXTock=
Subject key identifier:   8A:FA:92:16:3A:F6:00:86:DA:45:14:B2:D0:E4:4F:FA:B0:98:85:B9
Authority key identifier: 3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7
Certificate issuer:       /CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
Certificate serial:       4E9A2F76FA4B92B07D35264530541F1B32BAE51E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
Manifest number:          021F
Signing time:             Wed 10 Dec 2025 09:08:53 +0000
Manifest this update:     Wed 10 Dec 2025 09:03:53 +0000
Manifest next update:     Thu 11 Dec 2025 10:22:53 +0000
Files and hashes:         1: 323830343a6231303a3a2f33322d3332203d3e203532393336.roa (hash: FtX/R1WvCDzClhSBSduutGS4pbzU5dfHJ5HrQtixCEQ=)
                          2: 3137372e3138352e3132382e302f32302d3234203d3e203532393336.roa (hash: ugbcElFyKStqfDQPGXBwYiu8DwF/2cyGvSUKH3Q/2sQ=)
                          3: 3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl (hash: xCrpGBQSw6IYv/sdhit5+fDfeq1qCmAg9p1TFaf8Z+I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9a:2f:76:fa:4b:92:b0:7d:35:26:45:30:54:1f:1b:32:ba:e5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
        Validity
            Not Before: Dec 10 09:03:53 2025 GMT
            Not After : Dec 11 10:22:53 2025 GMT
        Subject: CN=8AFA92163AF60086DA4514B2D0E44FFAB09885B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:0a:dd:4d:7b:9c:01:69:82:a3:3c:3f:d7:
                    01:73:b5:95:23:43:58:c7:cc:9b:32:15:63:22:04:
                    ea:28:05:19:ba:4e:04:06:c7:5d:3c:85:c6:e5:e0:
                    be:2c:17:e4:2c:2f:08:02:9a:a9:fb:7c:c3:0d:6c:
                    0f:ab:9d:6e:73:b7:52:5b:54:df:5b:b9:3f:be:6d:
                    ae:24:8b:d9:77:1c:28:82:7b:aa:1e:7b:97:72:b4:
                    cd:94:78:05:ee:07:16:06:c3:dc:da:89:a9:89:ec:
                    da:4f:8d:c1:bf:c0:e1:a4:2d:9f:4e:03:62:a5:8e:
                    3f:64:39:12:7e:b8:b5:7a:dc:57:a4:13:a4:27:96:
                    3a:56:e0:3c:2a:f7:35:66:0f:74:f8:a9:e3:bc:cd:
                    c0:ee:03:50:77:d5:c9:c4:df:a4:58:0b:ad:1d:17:
                    5d:06:b7:a0:5d:1b:08:d4:86:5d:b3:3a:b6:d0:07:
                    e9:8a:aa:ff:5f:fc:94:de:27:dc:73:01:d2:28:61:
                    2a:dc:24:44:0b:c8:65:3b:2d:6d:fa:ad:57:d5:4d:
                    e9:f0:86:77:25:7b:33:33:70:b0:d8:58:cf:0d:a4:
                    a8:9b:07:1c:c9:61:91:61:39:69:2a:c3:38:35:48:
                    15:06:78:48:bb:1f:79:e4:9d:12:52:13:4a:ff:d6:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:92:16:3A:F6:00:86:DA:45:14:B2:D0:E4:4F:FA:B0:98:85:B9
            X509v3 Authority Key Identifier:
                keyid:3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ec:8b:08:00:a8:f0:99:21:0d:b3:ab:9c:e1:da:4c:63:57:
         37:84:2f:87:5c:61:aa:45:07:69:95:d9:8b:40:e0:e2:4b:be:
         9b:b0:0a:0f:55:08:b9:31:24:49:a9:82:54:e8:35:e4:e7:5f:
         e1:ff:83:6b:25:54:55:0b:ff:e2:85:61:5e:45:33:4c:d0:0b:
         9a:9f:93:3f:99:e8:51:15:d7:52:97:2d:7d:9a:86:76:31:cd:
         da:24:7c:ca:d1:f1:20:2e:83:1e:08:09:2b:51:68:0f:e4:13:
         2b:ea:ac:2e:40:48:8d:d0:1f:f0:3f:15:9c:54:fb:81:5f:41:
         fa:ef:43:78:2e:0d:91:32:a0:55:51:f1:07:34:36:78:83:ae:
         2d:e7:9f:6d:2b:48:be:04:0f:7b:ce:b5:83:58:09:11:1f:b1:
         89:d9:b0:e3:c3:72:af:21:1b:04:6d:94:23:81:a7:49:97:f6:
         31:6e:06:01:7b:df:e7:35:ab:6c:f8:a0:cb:64:e6:9d:96:f6:
         a8:1c:6a:ba:d4:57:ee:c8:3a:e0:3b:35:66:4e:62:c7:fd:4c:
         02:c3:33:40:c9:54:67:62:f9:ac:fd:78:c9:77:da:e3:6c:d4:
         79:f0:a6:df:a8:10:38:f5:c5:10:97:8a:e3:cb:d9:c2:76:e7:
         9e:b9:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----