This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft
File:                     BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft (raw, json)
Hash identifier:          wVj1WJ3mQXZkOb3wRGZLYEQ3FsBdnE+mLqFFqB3ezp0=
Subject key identifier:   71:9A:4F:6B:40:3E:33:1D:BA:F5:1F:21:C3:34:0C:5B:28:E4:95:8E
Authority key identifier: BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81
Certificate issuer:       /CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81
Certificate serial:       61140FB293CD2161074BA9982088A5DD5E563CB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft
Manifest number:          0158
Signing time:             Sun 14 Dec 2025 13:13:38 +0000
Manifest this update:     Sun 14 Dec 2025 13:08:38 +0000
Manifest next update:     Mon 15 Dec 2025 16:31:38 +0000
Files and hashes:         1: BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl (hash: 6YRBOQnNHotWqgm5gDyZgBCHFUD2gFFmhfMPcWspNBg=)
                          2: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (hash: 9sALlRBEpt1eU9WNPd839gLZYMjKuc14j7wICJkr0c8=)
                          3: 3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (hash: uBQGqePca+EVj4eBEBt0Bpreb1WKfnZf7J592qr/+jc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:14:0f:b2:93:cd:21:61:07:4b:a9:98:20:88:a5:dd:5e:56:3c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81
        Validity
            Not Before: Dec 14 13:08:38 2025 GMT
            Not After : Dec 15 16:31:38 2025 GMT
        Subject: CN=719A4F6B403E331DBAF51F21C3340C5B28E4958E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:b8:8a:df:b4:bc:69:87:4a:ed:dd:bf:54:
                    9a:71:a5:53:78:31:48:ae:20:67:ff:b7:b2:ff:90:
                    d6:0f:97:75:21:4e:c3:71:09:e6:0f:fa:05:af:76:
                    4f:fc:58:7c:07:49:63:34:5c:a1:08:11:67:00:3d:
                    9d:8a:64:71:43:7f:48:9e:5e:40:c6:a7:8c:f8:35:
                    5f:f6:83:92:f0:0d:02:71:b6:07:7c:35:c3:a6:85:
                    16:7a:f2:be:d2:06:bc:d3:3a:78:d7:28:c7:96:e8:
                    25:9e:41:66:e8:e7:da:b0:16:da:c8:4f:b6:2c:73:
                    02:ae:c7:2a:b6:e0:a6:93:66:31:2a:73:ee:2b:d6:
                    c5:29:c3:28:e3:dc:27:95:22:da:03:4f:45:74:a4:
                    99:aa:37:87:bb:fa:11:33:98:94:c4:d5:1f:2d:95:
                    19:c1:ed:7a:ba:e9:45:ee:05:f4:67:dc:97:d1:ca:
                    ab:e6:40:83:75:9e:35:e6:42:f6:92:54:6e:8a:22:
                    de:a4:29:67:b2:93:0d:5c:9e:b5:7f:16:3e:de:c6:
                    98:72:ef:da:fe:44:0e:3f:99:ee:80:8a:fe:50:da:
                    39:69:5e:49:ea:1d:0f:1c:a6:70:8e:2f:bb:38:1c:
                    e2:11:4c:b8:da:4f:3f:39:8d:b7:d9:e9:f3:99:0a:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9A:4F:6B:40:3E:33:1D:BA:F5:1F:21:C3:34:0C:5B:28:E4:95:8E
            X509v3 Authority Key Identifier:
                keyid:BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:a3:4a:bc:32:cf:e8:d4:95:81:03:d5:23:13:3a:40:53:
         a5:61:0b:0d:cd:75:51:75:84:06:a8:45:fd:aa:99:d2:88:f7:
         2d:0b:d1:f3:f0:16:d7:0b:09:49:c7:60:e6:fa:0c:9b:40:8e:
         69:78:81:8f:d2:dd:9e:23:1c:12:d2:ce:e1:16:c6:ee:a2:e7:
         00:fc:78:7d:fa:dc:72:1c:d4:a4:83:3e:ec:25:9b:5e:42:51:
         fd:27:b7:d9:83:f9:66:1b:63:84:6e:22:ee:e6:2c:15:8a:3c:
         8a:e5:e5:06:0a:2c:93:b3:85:5e:19:98:f4:02:ba:b8:92:3e:
         6e:07:10:69:ce:6c:cf:4e:a7:85:fa:f2:79:d0:69:b0:62:1c:
         ad:47:fa:56:e2:57:5d:48:60:0e:76:c5:39:58:f8:7f:c5:3f:
         56:38:96:4a:3f:3e:35:c1:54:a0:fd:a9:6c:4a:a5:1b:1e:5d:
         18:14:27:55:46:4e:93:42:ec:cc:1b:f5:9a:a2:2b:ba:86:52:
         f3:75:71:0f:eb:77:b4:79:bd:b2:7c:2a:43:5c:da:72:15:2d:
         92:cb:e3:d8:43:41:3e:85:3f:81:58:71:b7:7f:35:fa:62:c0:
         cd:cb:c6:d2:0d:3c:3d:98:14:d5:9b:cc:d5:b1:b2:e5:53:59:
         f4:47:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----