This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
File:                     DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json)
Hash identifier:          2143oZZzLhjWFXyz6pn2jvvRbQJMie5HNifrMK/qEJw=
Subject key identifier:   32:70:D1:EF:E4:B2:A1:44:5A:50:9F:6B:44:C9:DC:5A:0C:03:FF:B9
Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
Certificate issuer:       /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Certificate serial:       6D22E93F515C2F8492C79165C7F782D83B690E4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
Manifest number:          01ED
Signing time:             Mon 22 Dec 2025 07:24:54 +0000
Manifest this update:     Mon 22 Dec 2025 07:19:54 +0000
Manifest next update:     Tue 23 Dec 2025 11:01:54 +0000
Files and hashes:         1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=)
                          2: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: 9np9XfoTmnn/FI5DRo4pa0Z/Ld3222dObUWLKA+t+h0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:22:e9:3f:51:5c:2f:84:92:c7:91:65:c7:f7:82:d8:3b:69:0e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
        Validity
            Not Before: Dec 22 07:19:54 2025 GMT
            Not After : Dec 23 11:01:54 2025 GMT
        Subject: CN=3270D1EFE4B2A1445A509F6B44C9DC5A0C03FFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:ad:da:fd:92:7e:8b:cd:4d:11:b6:42:07:
                    ea:48:0a:cb:0d:10:56:f4:e0:8f:06:0c:ba:6e:1f:
                    13:73:85:bf:fb:87:05:70:b5:00:ec:7c:87:ed:cd:
                    9c:bd:f6:72:8f:93:d1:98:b1:8b:fd:c0:29:a7:3c:
                    79:1d:95:a4:76:97:89:51:a4:3f:63:51:5a:ad:3b:
                    9a:08:a6:4d:74:63:e0:93:5b:52:71:f6:59:23:52:
                    ca:e2:87:ae:8e:63:5e:94:48:d2:38:06:a7:73:69:
                    d1:4f:7d:8b:9e:76:46:c1:47:68:71:31:ec:74:ba:
                    58:db:2e:d8:d4:81:a8:35:37:bb:86:bb:43:5a:ed:
                    18:ff:32:f3:48:9c:85:d1:eb:e9:04:17:29:88:fb:
                    78:96:c9:0b:86:87:d5:88:34:cb:80:4b:81:fc:35:
                    0e:23:15:71:21:1f:9f:ac:f8:b7:c1:3e:81:ae:da:
                    f3:14:17:8e:94:ab:bf:8e:7a:45:45:1f:15:db:46:
                    52:e2:5b:74:23:5c:4a:08:24:96:71:a0:67:c2:2c:
                    f2:9c:c3:9e:d3:3e:e5:c9:52:71:09:6e:55:d5:f1:
                    ca:b0:f0:c1:70:cb:34:a2:74:0b:10:6b:b5:bb:19:
                    c9:0a:dd:23:b0:f5:21:ba:3c:4c:c5:df:e5:3c:1e:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:70:D1:EF:E4:B2:A1:44:5A:50:9F:6B:44:C9:DC:5A:0C:03:FF:B9
            X509v3 Authority Key Identifier:
                keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:4d:82:ec:8f:d5:59:e1:18:5b:51:95:99:58:42:5f:97:
         0d:7f:cb:19:9d:fe:d9:db:72:ff:53:cd:71:7d:de:38:2f:a3:
         c5:ff:2e:ab:04:9d:a7:04:56:d8:0e:9b:b9:d2:b7:c6:b4:78:
         3d:f2:71:db:95:ff:7f:c4:6d:2d:c0:68:e1:12:a2:4c:3d:da:
         81:fe:58:fb:69:ff:36:3f:2e:54:27:34:38:fc:72:77:6b:0c:
         86:59:27:1d:2f:60:33:0e:3d:80:10:94:c3:fa:e1:1f:d5:2a:
         84:e8:ee:d1:59:ae:ee:12:2b:36:8c:47:0e:6d:24:9e:97:0f:
         56:5e:4c:16:88:d9:03:15:6e:da:b1:48:f3:81:6b:d7:5c:b2:
         8f:aa:93:bb:f0:53:64:40:41:da:00:93:44:fa:6e:da:dc:1c:
         15:cc:04:da:f7:4d:4c:6e:ba:8a:e2:7a:99:de:fd:39:53:49:
         eb:d8:cd:80:80:e8:08:d7:bd:d1:69:a3:36:2c:a7:7a:1b:48:
         a3:32:c9:ac:48:55:94:67:c8:88:47:57:86:1a:26:93:eb:43:
         ef:8c:64:6f:c8:22:0b:d5:d2:48:a7:12:4d:15:fd:dc:6a:cf:
         d7:cc:6e:d4:c9:12:05:89:34:52:8f:4c:b0:0c:05:33:28:ef:
         3d:6f:a0:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbSLpP1FcL4SSx5Flx/eC2DtpDk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzNEVEOERFNTRCRDJGQUJFMDNBMjdBRThGRjc2NTk2
MDZCNjU0MjAeFw0yNTEyMjIwNzE5NTRaFw0yNTEyMjMxMTAxNTRaMDMxMTAvBgNV
BAMTKDMyNzBEMUVGRTRCMkExNDQ1QTUwOUY2QjQ0QzlEQzVBMEMwM0ZGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Na3a/ZJ+i81NEbZCB+pICssN
EFb04I8GDLpuHxNzhb/7hwVwtQDsfIftzZy99nKPk9GYsYv9wCmnPHkdlaR2l4lR
pD9jUVqtO5oIpk10Y+CTW1Jx9lkjUsrih66OY16USNI4BqdzadFPfYuedkbBR2hx
Mex0uljbLtjUgag1N7uGu0Na7Rj/MvNInIXR6+kEFymI+3iWyQuGh9WINMuAS4H8
NQ4jFXEhH5+s+LfBPoGu2vMUF46Uq7+OekVFHxXbRlLiW3QjXEoIJJZxoGfCLPKc
w57TPuXJUnEJblXV8cqw8MFwyzSidAsQa7W7GckK3SOw9SG6PEzF3+U8HrkjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMnDR7+SyoURaUJ9rRMncWgwD/7kwHwYDVR0j
BBgwFoAU3DTtjeVL0vq+A6J66P92WWBrZUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMS9EQzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzRFRDhERTU0QkQyRkFC
RTAzQTI3QUU4RkY3NjU5NjA2QjY1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E
QzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOrNNguyP1VnhGFtRlZlYQl+XDX/LGZ3+2dty/1PNcX3eOC+jxf8uqwSdpwRW
2A6budK3xrR4PfJx25X/f8RtLcBo4RKiTD3agf5Y+2n/Nj8uVCc0OPxyd2sMhlkn
HS9gMw49gBCUw/rhH9UqhOju0Vmu7hIrNoxHDm0knpcPVl5MFojZAxVu2rFI84Fr
11yyj6qTu/BTZEBB2gCTRPpu2twcFcwE2vdNTG66iuJ6md79OVNJ69jNgIDoCNe9
0WmjNiynehtIozLJrEhVlGfIiEdXhhomk+tD74xkb8giC9XSSKcSTRX93GrP18xu
1MkSBYk0Uo9MsAwFMyjvPW+gYw==
-----END CERTIFICATE-----