This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft
File:                     A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft (raw, json)
Hash identifier:          +J8aSpHSuuO9xk+wOIwqa8jov4UMNDxZ1S5chF0phI0=
Subject key identifier:   FF:F8:B0:E8:38:E1:9F:E0:F5:17:36:04:6F:E7:5E:83:E6:16:9D:77
Authority key identifier: A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96
Certificate issuer:       /CN=A7C1D0E63DC6C4F379E128374A71D2EED2B8F996
Certificate serial:       1B8DF78F00A9807157F167EF93195A91AAA674F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft
Manifest number:          D2
Signing time:             Wed 10 Dec 2025 18:55:42 +0000
Manifest this update:     Wed 10 Dec 2025 18:50:42 +0000
Manifest next update:     Thu 11 Dec 2025 22:50:42 +0000
Files and hashes:         1: A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.crl (hash: oQwvJC5e1wTb2yhUczq4vSLEi7s+Cxvaa7WICdqW70I=)
                          2: 3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (hash: 7QtSMmLH4zITRP4xMle1GlDb6uflxhWCGItR9QtPE2A=)
                          3: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (hash: MA01Is5KcKpcma/b3TlNZOdMrHbuqFTuaW5elUBgZRg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8d:f7:8f:00:a9:80:71:57:f1:67:ef:93:19:5a:91:aa:a6:74:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C1D0E63DC6C4F379E128374A71D2EED2B8F996
        Validity
            Not Before: Dec 10 18:50:42 2025 GMT
            Not After : Dec 11 22:50:42 2025 GMT
        Subject: CN=FFF8B0E838E19FE0F51736046FE75E83E6169D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:ae:03:95:c4:7d:a4:67:98:cb:f3:cc:fc:
                    ba:00:44:f6:eb:4f:30:d8:0c:74:70:d8:33:51:ea:
                    be:ed:e1:de:e4:9a:ab:36:0f:0f:87:13:b1:5b:77:
                    98:b8:06:f0:d8:58:a9:06:f9:00:30:52:7d:48:11:
                    20:e9:e3:3a:f7:ee:f7:11:9e:f2:c3:d4:5f:b8:d3:
                    70:bf:4b:85:fa:72:f7:f0:b9:cd:b6:5e:1b:13:88:
                    6b:a7:45:6b:df:e1:b1:05:d2:31:02:24:a0:bf:bc:
                    3c:e8:b9:8b:69:12:48:57:b0:74:3c:89:77:68:a7:
                    f3:fb:86:8d:1b:9c:af:18:db:a9:1e:bb:31:56:e9:
                    7e:26:64:58:c7:ce:4b:40:17:8f:94:ea:51:5e:19:
                    e0:f1:92:a0:c6:d1:27:ee:57:ff:aa:cb:fd:39:0a:
                    ff:7e:94:a5:cb:89:29:da:41:d2:fc:31:1a:23:0e:
                    48:00:27:fd:ac:52:f8:38:d4:83:c7:2a:a2:9d:01:
                    75:8b:92:82:12:1a:c9:89:dc:59:46:3c:ef:0e:89:
                    60:f2:7b:0e:93:9b:77:26:a0:57:ec:6c:9d:5d:9f:
                    c4:80:d0:f1:db:c4:fb:6f:50:45:f5:af:59:97:91:
                    94:40:0c:da:01:a3:93:10:b0:30:36:cb:c0:76:70:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:B0:E8:38:E1:9F:E0:F5:17:36:04:6F:E7:5E:83:E6:16:9D:77
            X509v3 Authority Key Identifier:
                keyid:A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:f5:7e:e4:80:88:92:ef:75:ea:59:52:5d:ac:9e:cf:d9:
         bf:03:49:9f:d2:8c:5e:ed:64:85:f2:99:59:16:eb:37:1b:dd:
         74:a5:52:71:10:5b:65:2e:ab:3d:1d:8d:1f:6f:ad:88:72:01:
         10:b4:8c:df:3c:b7:e0:63:72:4b:ba:4f:7c:fb:10:d8:6b:35:
         a2:1a:af:d1:51:5d:cb:84:6e:2f:c0:5e:a4:6a:04:8e:9e:68:
         09:20:68:0b:31:1d:af:54:62:18:4b:76:f6:7b:4b:0b:ef:92:
         7a:64:6c:d5:f3:f8:ef:d6:b4:73:6d:8a:01:18:44:26:41:71:
         7e:d6:1a:f2:62:4a:34:84:eb:9f:ab:a9:e5:22:d5:d4:cb:33:
         3f:4e:22:d0:c4:7e:19:5a:95:d2:14:d3:61:00:ae:d6:a4:76:
         d2:d2:59:c1:d7:b1:3f:a1:65:94:32:51:8d:d0:ea:f8:7c:75:
         ae:e0:3e:82:04:e0:6a:19:ad:e9:14:4b:cc:59:88:6f:02:a0:
         ce:57:7a:89:b0:e3:26:43:07:a4:2b:ba:e5:65:e1:a5:f2:83:
         23:56:91:de:b3:f4:74:90:fd:63:09:2f:63:c2:29:2c:6c:53:
         01:ba:d9:79:5d:4e:7f:8f:51:27:d5:2b:16:99:3a:ea:24:00:
         b1:8d:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----