This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
File:                     3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft (raw, json)
Hash identifier:          qucnW32Nxx94WEUh+glkYFio9a5PK7yParkC6wZ5vks=
Subject key identifier:   68:0E:F4:28:EA:CE:D8:30:9F:B8:5C:28:9E:F2:1B:DE:BE:AD:72:82
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       2BAC491FF405AC8923E2E1C636578B1C37BD29F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
Manifest number:          031A
Signing time:             Wed 19 Nov 2025 13:06:39 +0000
Manifest this update:     Wed 19 Nov 2025 13:01:39 +0000
Manifest next update:     Thu 20 Nov 2025 14:39:39 +0000
Files and hashes:         1: 3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl (hash: lQ7SLOHKcpoY+46wlfPApAZV7EPHQ3024nTxOStphnw=)
                          2: 323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (hash: /FOAutYWZzsnbWC4Nqdxqv/tDu+98Wh+rhe0TZEfFrI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ac:49:1f:f4:05:ac:89:23:e2:e1:c6:36:57:8b:1c:37:bd:29:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Nov 19 13:01:39 2025 GMT
            Not After : Nov 20 14:39:39 2025 GMT
        Subject: CN=680EF428EACED8309FB85C289EF21BDEBEAD7282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:36:bd:1d:87:d7:a9:7b:24:de:51:ef:b7:
                    b4:dd:25:d5:c4:c1:df:01:e2:f8:aa:f1:44:b6:07:
                    a0:78:e2:b3:ec:3a:50:fb:26:9c:fb:de:97:eb:8f:
                    5b:20:45:ed:6e:a9:86:13:96:b5:6f:46:df:95:26:
                    76:d8:38:82:2c:a8:6f:c7:71:ba:ac:76:38:25:3d:
                    67:d9:ad:11:f7:6c:45:0a:30:8d:1a:d0:0b:26:da:
                    82:92:73:34:f1:02:8e:64:e0:71:0e:42:87:f5:6b:
                    27:5b:0a:c4:be:95:77:7e:fa:a6:9a:7a:96:22:f0:
                    b2:3a:c4:59:9d:a3:dd:22:f3:0f:dc:6d:35:34:c1:
                    c0:28:b3:2a:38:17:7d:ca:81:54:d8:f6:14:80:61:
                    f0:0b:2c:22:85:99:17:63:24:8f:2b:af:e6:c8:ed:
                    aa:b1:5f:c9:a7:e8:dc:ec:c6:a6:3f:d2:f7:a5:33:
                    5a:ec:11:9a:86:a3:a2:43:5e:22:3e:d9:64:65:25:
                    08:af:3a:1f:8c:f3:9c:0d:96:91:d8:04:89:87:54:
                    d5:e4:48:d2:2d:30:69:25:c2:b4:f9:d4:63:5d:47:
                    74:1d:12:d4:a0:ab:11:63:29:2e:b6:cf:36:2c:32:
                    a6:14:57:99:ae:d6:b6:bd:5a:54:1b:ce:90:d2:26:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:F4:28:EA:CE:D8:30:9F:B8:5C:28:9E:F2:1B:DE:BE:AD:72:82
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:3f:28:95:47:b5:65:eb:38:84:a0:51:a3:9b:7f:41:45:
         33:56:80:56:cc:0f:20:61:51:2b:8c:b9:43:24:03:9e:39:97:
         e6:9d:04:c4:6c:a6:fd:f5:d3:6e:51:a5:9a:b2:ee:e8:99:43:
         1f:6c:e9:9c:f4:e2:4c:79:dc:5c:9e:4b:20:95:5b:87:87:9b:
         dd:5c:fa:29:52:f9:c8:8f:9b:91:c4:0c:6d:9a:48:5a:b7:84:
         58:16:a3:33:61:ec:1d:f1:6a:29:6b:20:bd:6e:46:30:23:5b:
         b3:ab:8e:be:69:a5:88:03:74:74:63:8a:cb:e4:e0:bb:6b:1f:
         68:e0:57:27:39:e4:5d:7f:f4:b7:21:40:ee:2c:da:ad:44:4f:
         7a:ca:8e:54:e5:64:55:d8:18:e2:4e:81:83:82:94:fe:d8:49:
         8e:db:3f:4d:22:89:74:77:e7:cb:4a:05:96:48:b3:21:36:b5:
         25:fe:0e:86:2d:f4:26:b6:2c:b9:51:ff:a2:72:1a:cb:e9:72:
         49:7a:a9:e7:2e:97:e2:0b:27:51:3c:9a:5d:b0:a3:03:88:59:
         27:68:6c:41:03:09:83:ed:fc:6b:61:9f:72:d8:24:91:bf:50:
         39:25:c8:53:20:80:17:4b:7f:89:72:4b:57:23:ae:74:fd:58:
         6f:92:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:25:30 2025 by rpki-client