This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.mft
File:                     648D03AF76A81708C4D992B5A5E474B4351E4F19.mft (raw, json)
Hash identifier:          GoXyrVT1Ekxq6ObUZmvL+EtOWkjz/d2XUFOMWDZQa1U=
Subject key identifier:   D7:36:74:2E:B0:30:05:72:29:FB:1F:F3:E6:68:0B:DD:E3:F9:6D:65
Authority key identifier: 64:8D:03:AF:76:A8:17:08:C4:D9:92:B5:A5:E4:74:B4:35:1E:4F:19
Certificate issuer:       /CN=648D03AF76A81708C4D992B5A5E474B4351E4F19
Certificate serial:       4913914351F91418BAA5AE2D14E4CC9E5D6BAAA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648D03AF76A81708C4D992B5A5E474B4351E4F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.mft
Manifest number:          AD
Signing time:             Tue 21 Oct 2025 11:58:54 +0000
Manifest this update:     Tue 21 Oct 2025 11:53:54 +0000
Manifest next update:     Wed 22 Oct 2025 12:16:54 +0000
Files and hashes:         1: 648D03AF76A81708C4D992B5A5E474B4351E4F19.crl (hash: vsV5pEQ1/Ivfqhok0nUX7zyI07XGXq7T6zicG5VXJpo=)
                          2: 323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (hash: zJt7kegG1Wrj0/jIALQQGyCXojCE26qzhqDSUL78wZw=)
                          3: 3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (hash: y6eMYDqhiE2omxJAkvBOAFL2sdy1r8xUWh/9VNfS51Q=)
                          4: 3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (hash: hdiV9+65P5VUCDCHe+dR7PoU/t9fxspyrhAdL0ph8bA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:91:43:51:f9:14:18:ba:a5:ae:2d:14:e4:cc:9e:5d:6b:aa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648D03AF76A81708C4D992B5A5E474B4351E4F19
        Validity
            Not Before: Oct 21 11:53:54 2025 GMT
            Not After : Oct 22 12:16:54 2025 GMT
        Subject: CN=D736742EB030057229FB1FF3E6680BDDE3F96D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:7d:75:7e:46:11:af:97:38:bb:ad:bb:b9:
                    3d:32:3c:bd:b9:41:92:82:c2:3e:3b:b8:72:b2:14:
                    b5:9a:4a:95:ce:00:b6:25:93:96:fb:f5:b4:b4:26:
                    a6:54:e3:15:65:a6:4c:f5:85:80:f7:ee:c2:a1:c7:
                    1a:8c:29:6f:a6:94:b7:07:a2:ba:68:39:05:23:41:
                    ad:fa:62:86:4f:13:a0:aa:5a:73:18:6b:f9:53:1e:
                    b9:9c:6f:6d:e8:fb:f4:76:8c:07:c8:6a:3c:bb:9c:
                    a1:53:0c:16:6d:e3:c4:18:36:c8:bc:d8:2d:50:31:
                    78:3e:02:a5:e0:e3:1e:08:79:c8:0d:0c:76:95:bf:
                    39:6b:bd:07:3c:3f:e4:a1:a8:c0:ad:22:16:0d:f1:
                    a0:a7:1b:7b:23:b7:22:1e:f2:a8:36:93:5d:99:4c:
                    8c:c3:5c:f9:4c:16:f5:73:37:69:0c:0b:23:aa:12:
                    c3:eb:7a:d2:c4:48:ea:a2:9f:1a:f7:08:7c:29:a5:
                    30:55:4f:04:1c:b5:fd:cb:c9:c4:58:2e:60:90:b0:
                    fc:6e:eb:08:a0:6f:11:df:86:c6:f5:7b:95:4b:c7:
                    bb:d8:69:6e:a9:ed:0a:fe:1c:ff:ea:57:b6:f2:e7:
                    fa:02:3d:7b:ea:85:76:f5:f8:7d:8e:0e:5a:7d:19:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:74:2E:B0:30:05:72:29:FB:1F:F3:E6:68:0B:DD:E3:F9:6D:65
            X509v3 Authority Key Identifier:
                keyid:64:8D:03:AF:76:A8:17:08:C4:D9:92:B5:A5:E4:74:B4:35:1E:4F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648D03AF76A81708C4D992B5A5E474B4351E4F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:12:64:1d:b8:c5:20:7a:a9:82:1a:2d:47:2c:2a:c5:38:2b:
         e4:0e:89:89:9a:62:e8:5f:6c:0a:29:c0:6a:c7:31:e8:54:63:
         a0:3e:03:f6:c5:57:c3:3f:50:ac:9e:f3:42:e3:8a:48:4d:ed:
         73:9f:f1:84:b1:7a:eb:3c:74:f4:92:62:98:23:f9:9b:d7:27:
         7e:d1:ae:d2:9d:47:d0:3b:f6:ee:7b:a5:88:f8:84:e6:77:81:
         57:b3:a8:4f:34:09:17:ad:51:14:61:ec:ec:dc:45:e4:bb:8d:
         e7:8c:8b:8d:1f:0f:e3:1e:04:47:79:dc:11:57:13:1d:f1:5f:
         a0:22:1b:67:1a:cb:0d:e1:c9:2a:8e:8a:10:38:db:bc:22:2a:
         a6:70:83:a5:91:8e:c6:36:e7:46:82:cc:b3:ce:bc:79:5f:ae:
         41:06:d9:ba:91:b4:ea:ad:11:26:83:7e:84:4b:5e:e3:c9:e2:
         50:71:6e:55:0a:e8:8e:e4:d9:c8:cb:ea:d7:b5:ce:d1:1f:46:
         2d:5f:2a:15:8e:5a:ca:4e:f3:56:77:ee:5c:7b:89:cb:38:2c:
         04:89:96:cf:3e:df:27:aa:e3:de:7b:76:cf:b6:00:af:b3:c8:
         65:78:8f:ea:17:2a:65:35:10:80:93:e8:90:cf:3b:ad:8c:51:
         ef:a2:b3:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSRORQ1H5FBi6pa4tFOTMnl1rqqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ4RDAzQUY3NkE4MTcwOEM0RDk5MkI1QTVFNDc0QjQz
NTFFNEYxOTAeFw0yNTEwMjExMTUzNTRaFw0yNTEwMjIxMjE2NTRaMDMxMTAvBgNV
BAMTKEQ3MzY3NDJFQjAzMDA1NzIyOUZCMUZGM0U2NjgwQkRERTNGOTZENjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAn11fkYRr5c4u627uT0yPL25
QZKCwj47uHKyFLWaSpXOALYlk5b79bS0JqZU4xVlpkz1hYD37sKhxxqMKW+mlLcH
orpoOQUjQa36YoZPE6CqWnMYa/lTHrmcb23o+/R2jAfIajy7nKFTDBZt48QYNsi8
2C1QMXg+AqXg4x4IecgNDHaVvzlrvQc8P+ShqMCtIhYN8aCnG3sjtyIe8qg2k12Z
TIzDXPlMFvVzN2kMCyOqEsPretLESOqinxr3CHwppTBVTwQctf3LycRYLmCQsPxu
6wigbxHfhsb1e5VLx7vYaW6p7Qr+HP/qV7by5/oCPXvqhXb1+H2ODlp9Gb7lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1zZ0LrAwBXIp+x/z5mgL3eP5bWUwHwYDVR0j
BBgwFoAUZI0Dr3aoFwjE2ZK1peR0tDUeTxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC82NDhEMDNBRjc2QTgxNzA4QzREOTkyQjVBNUU0NzRCNDM1MUU0RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0OEQwM0FGNzZBODE3MDhD
NEQ5OTJCNUE1RTQ3NEI0MzUxRTRGMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC82
NDhEMDNBRjc2QTgxNzA4QzREOTkyQjVBNUU0NzRCNDM1MUU0RjE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANxJkHbjFIHqpghotRywqxTgr5A6JiZpi6F9sCinAascx6FRjoD4D9sVXwz9Q
rJ7zQuOKSE3tc5/xhLF66zx09JJimCP5m9cnftGu0p1H0Dv27nuliPiE5neBV7Oo
TzQJF61RFGHs7NxF5LuN54yLjR8P4x4ER3ncEVcTHfFfoCIbZxrLDeHJKo6KEDjb
vCIqpnCDpZGOxjbnRoLMs868eV+uQQbZupG06q0RJoN+hEte48niUHFuVQrojuTZ
yMvq17XO0R9GLV8qFY5ayk7zVnfuXHuJyzgsBImWzz7fJ6rj3nt2z7YAr7PIZXiP
6hcqZTUQgJPokM87rYxR76KzRA==
-----END CERTIFICATE-----