This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft
File:                     4D66245FAFFC221002868F98943E16DAB7A8B51F.mft (raw, json)
Hash identifier:          NkeTBkYuZ44faEtXkkzffcAr35ts5fYcv+BhQxpUOdA=
Subject key identifier:   E7:77:C4:07:89:49:83:4A:E6:27:96:96:9F:6C:0A:0C:5F:DD:39:DB
Authority key identifier: 4D:66:24:5F:AF:FC:22:10:02:86:8F:98:94:3E:16:DA:B7:A8:B5:1F
Certificate issuer:       /CN=4D66245FAFFC221002868F98943E16DAB7A8B51F
Certificate serial:       3E94E9A5BAC8BB88281BC99AC4D785C5A366A043
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D66245FAFFC221002868F98943E16DAB7A8B51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft
Manifest number:          015F
Signing time:             Sun 14 Sep 2025 19:39:25 +0000
Manifest this update:     Sun 14 Sep 2025 19:34:25 +0000
Manifest next update:     Mon 15 Sep 2025 22:10:25 +0000
Files and hashes:         1: 323830343a383232633a3a2f33322d313238203d3e20323732353033.roa (hash: scCSLrmIDclGO+i688mfmQznCVPLaUCLdY4DhwEkvKk=)
                          2: 4D66245FAFFC221002868F98943E16DAB7A8B51F.crl (hash: RORjd7u+gPUnds0jGhiJnHIw9plbqv9+zt/5x3c5wxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:e9:a5:ba:c8:bb:88:28:1b:c9:9a:c4:d7:85:c5:a3:66:a0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D66245FAFFC221002868F98943E16DAB7A8B51F
        Validity
            Not Before: Sep 14 19:34:25 2025 GMT
            Not After : Sep 15 22:10:25 2025 GMT
        Subject: CN=E777C4078949834AE62796969F6C0A0C5FDD39DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:34:d9:aa:f1:05:d4:5b:99:29:1a:8c:b3:
                    dd:ca:10:79:04:e9:8e:ad:a6:be:64:0a:99:df:af:
                    5a:2d:42:85:e3:bb:ac:b9:d0:77:c0:1e:bc:90:a1:
                    bd:b5:20:cc:0c:c4:77:e3:f1:e0:85:7b:ec:a4:3b:
                    a3:93:60:f2:74:6e:72:d3:b9:54:62:3d:6c:8c:e7:
                    e9:c4:64:c6:36:84:47:00:8f:ee:11:56:34:c4:b4:
                    b8:5f:80:ac:d3:0a:d5:94:95:40:54:b2:62:86:f9:
                    87:5c:42:14:da:51:15:b2:5a:08:4a:af:13:ed:aa:
                    ab:57:9f:42:22:a7:71:3f:32:9d:ec:0f:6e:da:12:
                    43:f6:20:97:8b:e6:83:3b:19:cf:6d:28:fa:e4:0e:
                    64:a5:65:66:6a:f1:e4:e1:9e:87:86:51:5e:77:8f:
                    e9:b8:e1:5e:17:f2:03:c3:32:c1:fd:f3:90:a1:b9:
                    f1:7c:d3:22:e5:8a:98:a5:e0:9c:23:c6:d0:54:46:
                    c7:1c:db:9b:69:5a:15:30:ff:da:d7:bf:7b:df:da:
                    67:b6:72:ba:42:c0:70:19:df:05:91:ef:8a:8e:90:
                    97:ac:32:72:d8:dd:d0:3b:89:90:2b:fe:2b:17:fc:
                    64:1c:09:09:07:b5:cb:1e:48:e4:41:80:4f:6a:2e:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:C4:07:89:49:83:4A:E6:27:96:96:9F:6C:0A:0C:5F:DD:39:DB
            X509v3 Authority Key Identifier:
                keyid:4D:66:24:5F:AF:FC:22:10:02:86:8F:98:94:3E:16:DA:B7:A8:B5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D66245FAFFC221002868F98943E16DAB7A8B51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:c4:1d:aa:47:3c:bf:f7:1d:85:d2:d3:8f:db:06:8e:3d:
         de:5a:ff:6d:8d:b6:14:f7:c4:3e:23:0b:85:21:92:1f:d3:24:
         c9:9b:67:d5:29:dd:c4:c1:b1:26:93:fe:0d:38:fb:fc:37:ae:
         2e:48:13:14:63:14:18:eb:46:91:76:2a:b8:a5:7c:c9:bd:9b:
         c1:4b:b1:0c:e9:0d:5f:9d:ba:cf:d1:d8:e0:f1:af:cf:6e:e4:
         0f:94:0f:61:98:cd:0a:57:cf:b4:a0:1f:44:b0:92:9f:f4:20:
         a0:4b:7d:b5:74:8b:6f:cb:65:24:31:09:ee:5d:5a:98:9b:01:
         49:54:05:16:71:fd:43:8b:43:b3:5e:be:86:98:87:a9:7e:6c:
         bb:6d:03:88:12:85:49:3b:9f:05:03:88:b2:47:72:3c:40:df:
         97:1c:cd:44:ae:81:09:6f:55:33:de:b9:43:17:ce:2b:58:8d:
         09:c9:c7:64:95:f9:34:6c:6b:05:d8:ae:f3:78:39:fd:3e:aa:
         66:43:75:c8:b5:4e:b6:1e:73:a2:42:85:d0:79:20:cb:57:fb:
         9e:87:d2:fc:bf:66:05:6e:10:1f:30:4e:1a:88:f2:47:43:2a:
         7e:17:54:2c:a0:0f:09:a7:4a:7d:ba:10:1d:92:e8:64:b8:f3:
         84:87:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:12:37 2025 by rpki-client