This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
File:                     F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft (raw, json)
Hash identifier:          +LC+5FgWmME+qGK9N9lUCer4lWAtFjFXozO5PlBDhyQ=
Subject key identifier:   D8:CF:E0:F4:EF:89:51:A7:94:DA:BA:B9:B7:5F:1A:1E:91:9C:A9:DF
Authority key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
Certificate issuer:       /CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
Certificate serial:       3E8C2ED7C772959A290E76EA34EC75557E89BBCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
Manifest number:          032F
Signing time:             Wed 10 Dec 2025 20:31:22 +0000
Manifest this update:     Wed 10 Dec 2025 20:26:22 +0000
Manifest next update:     Thu 11 Dec 2025 22:48:22 +0000
Files and hashes:         1: F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl (hash: cAgdSibvnWuVWX9TPG11aw2cGbD16qbhWR/2v0KQg7g=)
                          2: 3137372e36362e37362e302f32322d3234203d3e20323634313137.roa (hash: t2jnc/avTPkT2VxxURAGHpx0izm7DafxNwpl65Dyxgk=)
                          3: 3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (hash: tFEZXNMjYK6lj3PYWIg8d8lqP45bR66ObxQP47CCwBQ=)
                          4: 323830343a323262343a3a2f33322d3438203d3e20323634313137.roa (hash: rdQOjvLMlW0bXs5xAVHntgONWyy3SsEvxNzB7/m/bM8=)
                          5: 3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (hash: ml7IvTAudrfDZoR0pFnWcI9qaeHIA7AO/+Xp8RIq1CM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8c:2e:d7:c7:72:95:9a:29:0e:76:ea:34:ec:75:55:7e:89:bb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
        Validity
            Not Before: Dec 10 20:26:22 2025 GMT
            Not After : Dec 11 22:48:22 2025 GMT
        Subject: CN=D8CFE0F4EF8951A794DABAB9B75F1A1E919CA9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:3a:a2:f3:46:ee:13:fa:47:6e:cf:cc:d9:
                    4d:8b:fe:12:2f:d0:79:19:dc:9f:a9:12:a9:44:46:
                    ec:c6:00:88:78:9a:0f:85:ef:07:b8:0a:f0:6b:c9:
                    38:18:21:45:0e:5d:45:f9:3e:17:2e:d1:0b:2f:40:
                    13:5b:36:d9:9d:44:3a:86:ad:15:68:10:33:09:45:
                    09:54:9e:ae:4a:72:ab:08:42:5d:91:c1:d4:27:b8:
                    64:e1:f9:46:b1:b7:47:c7:d6:c9:2f:32:a2:32:d9:
                    28:99:00:42:f5:1e:13:c2:1e:24:1d:6f:f2:00:9a:
                    33:c2:46:95:77:0c:b1:b3:ed:51:77:15:fa:45:43:
                    fd:9c:ed:c7:68:5f:65:37:f2:f1:c6:8a:e4:26:b2:
                    9a:43:d6:89:b2:78:80:b7:86:ce:52:6f:49:5f:9a:
                    1e:51:99:40:f6:1a:08:bc:55:a5:02:f3:ae:9f:ab:
                    f2:ca:4c:f2:b6:2c:04:22:ff:2a:e9:27:8e:15:f6:
                    90:2c:a5:42:0b:98:1f:34:cb:23:b5:75:3e:10:35:
                    cc:d0:be:7c:58:db:99:85:53:e3:de:0a:2f:60:a1:
                    18:bb:a0:92:a3:19:dd:ee:b4:f5:90:42:63:93:52:
                    e6:15:52:df:e8:24:c0:91:2b:fd:75:93:94:38:8b:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CF:E0:F4:EF:89:51:A7:94:DA:BA:B9:B7:5F:1A:1E:91:9C:A9:DF
            X509v3 Authority Key Identifier:
                keyid:F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:0f:3e:cf:73:5d:37:24:04:0c:ea:72:ea:b8:dc:36:60:
         d6:73:2e:1d:10:e7:62:b1:15:42:8e:02:ea:a2:61:28:ee:0b:
         c6:66:00:49:8e:10:ad:f2:3e:5c:67:e9:66:92:4f:cb:80:3b:
         ec:4d:34:9e:d2:e5:56:57:6c:e9:07:bf:85:86:4e:3d:47:01:
         a8:98:da:5e:c3:33:9e:13:ab:2c:76:72:fb:0c:a3:7a:5d:b7:
         0e:63:af:4a:22:e5:21:68:80:d6:c3:58:d7:27:a9:a6:68:0e:
         27:f4:95:9f:17:dc:bd:fd:fc:b4:5a:9e:8e:bf:b8:2e:c5:8f:
         0e:90:c9:26:29:d9:f6:40:f0:94:b9:0d:1d:ae:fa:b2:87:c4:
         3c:14:08:59:a6:90:96:f9:72:47:6d:46:ce:18:8d:73:b8:08:
         0a:64:b9:37:c8:e2:a5:a7:95:bc:3f:06:8c:36:42:50:45:19:
         20:4f:b1:01:5f:67:d7:33:7a:76:43:2b:03:fd:eb:0e:a2:0a:
         d7:b4:7b:c2:16:29:bd:0c:40:aa:9b:95:01:c5:7d:9d:d9:a7:
         70:9b:b3:8d:cb:2e:73:7c:bf:02:a6:60:dc:a2:57:96:3f:4b:
         34:c3:4c:86:1f:e7:f4:fd:e7:92:70:1b:45:dd:d3:46:53:08:
         b1:6f:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----