This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
File:                     A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft (raw, json)
Hash identifier:          9bTab5KBlxBoE+t7Y1ds6q0jp/25RJVnWltvSLtsBGk=
Subject key identifier:   67:A0:89:E5:EF:9F:62:43:4C:71:AC:D0:69:0C:B3:17:A8:0B:C5:BE
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Certificate issuer:       /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial:       3A0FFF92DCC7AFCBC9CB01E8A83BB0C1D2C07741
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
Manifest number:          01E8
Signing time:             Wed 24 Sep 2025 21:47:30 +0000
Manifest this update:     Wed 24 Sep 2025 21:42:30 +0000
Manifest next update:     Fri 26 Sep 2025 00:30:30 +0000
Files and hashes:         1: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: qP53uLcUi8/lpPda1LFzdKBLMIoAo8Sn+EO7nc2hXIE=)
                          2: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: GjGIxQODll55fM7GGEt2OKOT8KlqYOsgqROs+76lfrw=)
                          3: A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl (hash: xT4ictv0pU97LA5JfAK5EnTIgcAhclBbMETMQZQJrlo=)
                          4: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: O2PvaX8MStIPfCaUBD+VMkNIQYW2aayK5GId4ojGLwc=)
                          5: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: WHHYl4WkCr9Dy7/p8D5SuvrsA2+YubqT77pimz+z1PQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0f:ff:92:dc:c7:af:cb:c9:cb:01:e8:a8:3b:b0:c1:d2:c0:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
        Validity
            Not Before: Sep 24 21:42:30 2025 GMT
            Not After : Sep 26 00:30:30 2025 GMT
        Subject: CN=67A089E5EF9F62434C71ACD0690CB317A80BC5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:11:89:ab:9b:a8:04:25:63:b6:cb:20:cd:
                    a1:b8:6b:c8:df:a0:1d:35:1d:f8:90:f2:a5:b2:e4:
                    02:27:5a:34:e2:fb:fe:ff:90:6c:02:ca:b2:11:7e:
                    2b:50:09:30:09:48:2c:ca:1f:78:d4:9a:f6:c9:1b:
                    6b:50:ee:f5:74:2d:a9:71:6d:24:f4:ef:d0:8f:27:
                    9f:a7:6c:eb:a5:c9:f2:3d:27:af:8c:4c:67:fb:65:
                    4d:c6:25:ff:79:3e:a9:82:74:c7:1b:f6:8b:42:83:
                    13:83:7c:10:22:4b:ec:ae:4e:f6:b9:f6:fc:59:1a:
                    97:5c:b3:b8:37:87:a7:05:87:d5:e2:05:11:82:5f:
                    da:02:3f:69:18:52:25:fa:26:ce:bd:ef:a6:a0:75:
                    a2:03:bc:ee:f0:c0:25:44:53:56:50:e8:12:06:dc:
                    04:08:fe:7c:cb:37:93:af:ca:ba:cb:3f:e3:66:13:
                    34:4c:89:63:c1:d8:08:95:6b:f0:c9:06:67:35:61:
                    37:ad:95:5a:74:43:6b:59:f9:94:98:78:35:e6:03:
                    a3:67:b2:a2:a1:0f:55:78:78:0a:4c:4c:38:c1:21:
                    50:26:f5:26:70:c2:37:0b:65:69:eb:af:74:8e:bf:
                    09:4b:a7:bd:b6:fd:06:9b:72:1d:37:b8:55:9a:92:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A0:89:E5:EF:9F:62:43:4C:71:AC:D0:69:0C:B3:17:A8:0B:C5:BE
            X509v3 Authority Key Identifier:
                keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:12:45:a3:fc:1c:0b:59:f1:8f:63:9d:11:57:30:e8:9e:
         d9:f0:3d:fd:d4:1b:b1:03:54:4e:1c:93:bb:37:e5:89:49:03:
         06:4b:d4:ad:c6:56:11:2b:7d:51:9e:c6:d3:05:b3:ab:81:eb:
         4f:ab:31:60:2a:a9:c4:15:85:ce:2d:ff:b1:da:98:cf:5a:8a:
         bd:98:0c:19:48:78:11:61:7b:46:b1:33:d1:71:22:69:84:cd:
         ea:19:ab:f2:34:12:27:0a:61:57:b5:b6:59:32:39:e7:69:2b:
         57:19:8d:0a:1b:78:22:1f:44:45:7c:60:79:e0:6f:4e:74:11:
         3b:c8:bc:da:8b:0c:9e:37:a8:1c:13:a0:da:11:93:c8:8f:54:
         d5:6d:9b:fb:fe:ec:5c:0d:c5:ea:0e:c4:5f:9e:a3:cb:b9:d5:
         b4:c2:fb:d2:27:80:a1:2c:91:d0:e8:5a:43:1c:6e:fc:e2:48:
         22:42:b1:a3:8f:be:23:a7:7c:ab:6c:1f:2f:ef:86:ec:66:72:
         5e:af:42:6d:2d:65:a6:81:c2:50:b0:e9:90:77:42:35:8f:c9:
         63:a9:d6:24:ab:5a:d0:c9:cc:c6:c9:2b:c7:e5:42:0d:81:bb:
         71:a3:e2:c2:8e:fc:4c:cf:8b:70:82:50:93:13:3d:02:bf:85:
         6e:0a:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:54:50 2025 by rpki-client