This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
File:                     DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json)
Hash identifier:          1gtXWMPVMnD7+W+6T4oUlzZZuii+GL8iDfAwBPzpVNk=
Subject key identifier:   97:57:43:C2:79:93:81:05:5E:C9:F0:C3:8B:CD:5F:33:4E:6B:E5:35
Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF
Certificate issuer:       /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
Certificate serial:       7B72AE585C5A9BBEE30F79B23E42EF6C21A1BFB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
Manifest number:          0225
Signing time:             Mon 08 Dec 2025 09:00:15 +0000
Manifest this update:     Mon 08 Dec 2025 08:55:15 +0000
Manifest next update:     Tue 09 Dec 2025 10:15:15 +0000
Files and hashes:         1: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: tuN+EyMbBuM+4QcgMreh6GUCrLuRnxQ1/cjBpJyn3Bc=)
                          2: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: DW5oS1R955VazVvFo2R1EAEemFMcMD7OxbUjMQkgwCM=)
                          3: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: eE4MLbLj9F/PVcA6VS4f8+Q3NNioevesHMwayjC4INE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:ae:58:5c:5a:9b:be:e3:0f:79:b2:3e:42:ef:6c:21:a1:bf:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
        Validity
            Not Before: Dec  8 08:55:15 2025 GMT
            Not After : Dec  9 10:15:15 2025 GMT
        Subject: CN=975743C2799381055EC9F0C38BCD5F334E6BE535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:c0:75:31:8c:e9:a3:37:92:49:f3:12:60:
                    9a:44:9f:d8:e6:a0:f3:20:25:96:38:4e:a7:52:86:
                    a7:19:55:87:07:b2:92:08:80:64:68:8a:9d:57:7f:
                    75:2a:fc:54:14:8d:ed:3c:40:e4:25:d3:7d:ce:3b:
                    60:85:63:35:6d:06:ed:06:7e:23:cf:33:bd:24:db:
                    25:80:a8:82:4f:db:18:13:02:c9:26:31:49:5f:3d:
                    04:92:70:01:74:ba:e9:67:de:fa:af:3f:41:b8:79:
                    ac:2b:77:7f:c4:d3:2a:42:77:a9:8b:36:15:d8:8e:
                    ce:cb:e2:e5:69:3a:7a:b6:48:7e:38:df:be:20:76:
                    d6:96:20:b8:fc:f2:f4:2f:28:24:19:ef:60:0b:69:
                    cf:40:ba:49:f0:9a:eb:f0:6c:1f:9b:fd:7d:ba:aa:
                    0a:65:41:4d:89:5e:fa:0f:4b:36:03:7c:22:61:60:
                    cd:13:9e:c7:d3:11:f1:e9:5e:c8:6a:ca:2d:ca:b6:
                    75:66:17:e9:f8:c5:d2:d1:8d:38:fb:dd:14:b4:67:
                    eb:1b:8a:ec:1a:3b:42:06:80:43:eb:9b:6a:9d:1f:
                    52:96:62:9f:1e:05:09:28:52:34:27:e5:f8:e6:93:
                    1c:54:b0:03:97:a2:f6:81:02:2b:fe:97:fe:14:2c:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:57:43:C2:79:93:81:05:5E:C9:F0:C3:8B:CD:5F:33:4E:6B:E5:35
            X509v3 Authority Key Identifier:
                keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:90:b0:ca:77:2b:7c:26:6c:3a:43:f9:ea:fb:6d:78:2d:94:
         b7:d1:9d:1d:c5:31:ee:c3:71:61:ee:1b:11:23:e4:c9:68:2f:
         a4:04:c3:c7:43:bc:23:fd:de:fd:0e:01:30:49:d5:1f:6f:9b:
         29:c6:ac:36:0d:ce:7f:2f:74:a0:49:e4:40:12:7d:6f:23:86:
         2b:d9:c9:6b:d1:1e:c7:23:4f:c2:44:fa:7d:18:13:a4:7d:e7:
         cc:1b:e0:67:b9:13:b9:9c:53:ea:ed:6b:1e:d1:40:9f:cb:4e:
         cf:72:27:23:02:8b:65:5f:1f:5e:f2:4f:63:0d:b0:ad:63:bc:
         50:f5:e0:50:14:0a:42:3e:42:54:5c:48:b0:e7:54:cf:81:b4:
         f2:a3:71:57:35:e7:ed:20:72:10:c7:0a:ad:a6:15:d7:4b:b8:
         7f:ce:d4:31:3a:13:39:fc:62:b2:91:e7:b3:12:f8:22:4e:93:
         36:5a:1d:31:ec:09:63:32:c4:ab:ec:76:55:57:6f:11:9a:f3:
         b5:fe:3e:52:2d:4d:9c:e5:88:a8:f0:22:da:6f:0e:87:d8:07:
         a2:58:91:db:e0:5d:93:27:ea:2b:9f:08:6a:72:9d:d9:51:22:
         6a:5f:2b:53:33:ca:c1:a9:2c:b4:09:9c:10:f5:bc:ab:a5:c3:
         37:ac:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 21:04:58 2025 by rpki-client