This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
File:                     6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft (raw, json)
Hash identifier:          TGEHxMaSiGakOnidudpcTojnSABhQrtmrkFjlVPqR8I=
Subject key identifier:   EC:59:BE:FA:08:ED:7F:8C:11:B2:48:0A:FD:C2:C2:41:48:38:98:DE
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       323E3D795692825F0931C7B4BD57A8F593464B0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
Manifest number:          0323
Signing time:             Mon 24 Nov 2025 10:33:48 +0000
Manifest this update:     Mon 24 Nov 2025 10:28:48 +0000
Manifest next update:     Tue 25 Nov 2025 10:42:48 +0000
Files and hashes:         1: 323830343a323032303a3a2f33322d3438203d3e20323634343730.roa (hash: OMMS11OeUiHpd1pIS6OUby2WvxhXAqQgv78+NqvvvsQ=)
                          2: 3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (hash: yWVpzzfxPmeNo2QzaRp9WQbxJTr8twBOkMO/pK/U4VA=)
                          3: 6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl (hash: j8skq0+mYx4GfNUfOZS+LhajsvhjKlTXNpTadpX4qO8=)
                          4: 323830343a323032303a3a2f3332203d3e20323634343730.roa (hash: xjd1OuuN58pfUiRFC0GiT3xPfBqcGZPLvEFa4AnBvTg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3e:3d:79:56:92:82:5f:09:31:c7:b4:bd:57:a8:f5:93:46:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Nov 24 10:28:48 2025 GMT
            Not After : Nov 25 10:42:48 2025 GMT
        Subject: CN=EC59BEFA08ED7F8C11B2480AFDC2C241483898DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:2e:ff:e0:57:73:75:23:0d:f8:42:c6:e5:
                    b7:bc:06:d5:0a:bf:9f:36:4e:7c:90:1d:d1:7b:b8:
                    84:5f:53:bd:52:3f:40:d7:6c:43:37:d1:2e:a9:c0:
                    15:5b:d9:fb:0d:1d:29:5c:cb:b6:dc:68:3d:fe:8e:
                    20:05:03:f3:2c:b8:2f:f2:4c:76:b6:ba:8d:7c:6c:
                    a0:89:b6:1b:33:d7:14:8a:a0:c4:41:70:e3:b3:4c:
                    d6:2a:38:d5:92:85:3b:d3:5e:0f:72:2c:5a:9f:53:
                    e6:02:0e:a4:bb:00:9d:51:ec:b7:07:f4:25:bc:09:
                    b7:8c:f3:ea:b6:e1:72:05:7f:b2:c0:eb:4a:67:41:
                    e3:62:16:8b:11:56:da:5b:de:04:32:bd:7f:cc:4c:
                    37:8b:1e:2c:42:ac:24:1f:9f:97:1d:de:d6:69:ab:
                    9b:bd:49:24:03:fb:a2:d1:18:a3:2d:8b:d8:45:a0:
                    69:51:d7:10:83:c9:27:6d:18:ba:7e:74:fa:96:9f:
                    8b:a4:48:e5:27:d7:da:ea:a1:c2:3d:d9:db:bb:de:
                    f3:a1:bf:54:51:a2:9f:62:ec:5f:45:e5:bd:bf:c9:
                    a4:67:2c:82:bd:b0:76:f7:36:6b:7f:a7:66:2d:39:
                    3f:25:4b:0e:ee:3d:1e:6a:3a:1a:91:fd:3e:8a:4a:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:59:BE:FA:08:ED:7F:8C:11:B2:48:0A:FD:C2:C2:41:48:38:98:DE
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ba:60:eb:f3:bf:ba:6b:3e:64:bb:35:f7:0d:9e:81:2c:35:
         9d:f2:02:16:94:50:89:4c:d2:66:e6:66:93:e2:62:78:12:76:
         13:f0:79:d9:4f:e4:e3:09:dc:85:2b:9d:99:d4:26:22:4a:85:
         47:e0:1b:8e:1f:83:e0:1e:6c:54:9d:6f:cb:85:62:0a:19:fb:
         3a:ee:74:83:53:e8:e8:56:90:c4:ae:aa:ba:52:21:e8:b0:d4:
         0c:1f:72:b5:2d:86:1c:a2:10:dd:db:12:1b:4b:65:79:bc:1c:
         ae:f4:48:af:cb:94:8f:1e:f8:75:21:e7:cb:d0:c0:48:a2:7e:
         80:d7:5b:c3:69:46:e0:0c:5f:d3:b0:b0:e4:15:da:4c:0f:8d:
         03:52:e0:b3:0c:03:bb:80:b1:64:00:40:10:2a:2e:9b:46:f1:
         72:f6:2f:a5:77:83:c0:8e:fd:7b:9c:ab:2e:dd:51:26:3c:0b:
         25:07:1e:45:9f:01:68:0b:c7:a3:56:0e:3b:a1:2a:9d:2e:02:
         5b:3c:5e:bc:84:c6:a5:02:fb:1a:e5:88:1d:30:e7:f7:4a:e9:
         41:fa:a9:57:da:9f:e3:d2:8e:34:c1:1c:1f:f3:01:19:1a:29:
         1e:67:d6:b4:45:5c:67:7c:05:0a:e1:01:f7:e8:75:91:8f:76:
         9a:2b:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:45:42 2025 by rpki-client