This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
File:                     DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft (raw, json)
Hash identifier:          /DLHMBVxk43fqira2ewzGUpM3WD9rLPzU1tZSJOL1k8=
Subject key identifier:   42:B5:F5:35:7F:54:73:EE:C5:60:1F:92:40:39:A6:3F:A0:BF:6D:03
Authority key identifier: DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
Certificate issuer:       /CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
Certificate serial:       2267E9E697AC90166C6900A5FCCB0640B07EE001
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
Manifest number:          032C
Signing time:             Tue 16 Dec 2025 13:51:07 +0000
Manifest this update:     Tue 16 Dec 2025 13:46:06 +0000
Manifest next update:     Wed 17 Dec 2025 15:11:06 +0000
Files and hashes:         1: DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl (hash: dSeRFYgD3V5VgDEXTGUx3YG32ryEPZjntubjjW8QjbI=)
                          2: 323830343a336461383a3a2f33322d3333203d3e20323636353435.roa (hash: DtT7dNMOrrV8RsrX4VQiiMaReM0fD/X2s3U41M13SoA=)
                          3: 34352e362e3139322e302f32322d3234203d3e20323636353435.roa (hash: LAcAFhsi9sMCFXBDdvSUGBePjYXiFUWf0jWEd4ccmvE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:e9:e6:97:ac:90:16:6c:69:00:a5:fc:cb:06:40:b0:7e:e0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
        Validity
            Not Before: Dec 16 13:46:06 2025 GMT
            Not After : Dec 17 15:11:06 2025 GMT
        Subject: CN=42B5F5357F5473EEC5601F924039A63FA0BF6D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:0d:c7:2a:ec:d0:7f:66:3d:31:52:08:f1:
                    1d:58:44:45:bc:4f:c9:41:d5:71:5b:b3:33:2b:ba:
                    84:76:93:2b:e8:30:40:83:2f:90:50:d4:a7:dd:9e:
                    c1:98:62:ba:4e:92:40:d5:95:90:51:97:4a:43:99:
                    1b:c7:ee:20:ba:fa:5d:98:00:11:13:90:47:93:a1:
                    34:1e:da:c5:6f:3f:dc:0b:b8:b1:2d:0e:62:25:f9:
                    5a:55:20:87:17:75:0c:6b:aa:a5:cf:72:3e:4e:0e:
                    ec:45:66:2e:85:8f:c7:88:01:13:02:97:4f:01:c0:
                    6a:7b:1b:ac:f6:5a:2a:2e:58:fe:3c:12:b1:06:ef:
                    69:b6:9f:79:92:d7:92:32:72:52:8b:97:8a:e5:21:
                    a2:7e:14:3d:6e:3b:a2:25:5a:0d:51:b9:bc:dd:72:
                    2c:3a:05:b5:be:43:fd:ef:1f:ee:78:b1:f8:e2:ae:
                    25:f6:a1:65:1b:ca:d2:3b:89:72:3e:be:36:f4:08:
                    35:b7:88:31:b1:a6:2a:b4:8a:b7:2d:f9:42:75:70:
                    35:84:00:bd:f6:47:24:7d:c8:8c:06:5a:64:88:97:
                    ee:3f:27:e3:e0:2d:19:e2:5f:db:85:d5:42:39:9b:
                    01:3c:b9:3f:17:0f:46:54:1c:7b:99:f8:a2:b0:2c:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B5:F5:35:7F:54:73:EE:C5:60:1F:92:40:39:A6:3F:A0:BF:6D:03
            X509v3 Authority Key Identifier:
                keyid:DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:c6:84:6d:42:06:42:07:f8:da:aa:2c:88:c8:2d:c2:93:
         56:49:c2:b2:fe:b2:39:bb:34:4b:7c:0f:92:d0:9b:b9:47:2a:
         60:7a:96:5b:b3:17:e4:af:90:86:77:8d:0b:80:f4:c5:1e:e2:
         df:2b:fb:5b:4f:08:93:95:d1:84:bf:68:1f:36:ed:24:7a:73:
         e8:6c:43:cd:9a:97:b4:24:c3:18:e6:70:a0:d4:28:89:d7:0c:
         5a:49:a7:89:59:ef:42:ab:2d:96:dc:c7:1e:fa:3d:7d:3d:41:
         62:4d:43:f1:13:f7:fa:03:67:75:ec:ed:46:62:3c:9e:fd:0f:
         62:22:98:2e:0a:02:9f:db:06:0c:3d:fd:62:58:fe:67:8d:00:
         d1:ba:35:dc:b3:57:31:b2:fe:31:f5:c1:ed:d5:ca:34:ec:46:
         20:c9:eb:b1:f0:13:0f:9e:84:e7:c9:54:14:57:71:4a:a8:3d:
         a9:cf:ea:90:e9:03:0c:00:27:d0:f1:1f:0c:1e:32:4d:1d:6f:
         7c:f9:87:7a:b9:0a:27:e5:bb:8f:7b:81:d2:01:52:2b:d0:d5:
         84:70:2e:38:cd:f1:27:cc:b1:a7:5c:5c:b2:ca:7e:5b:32:50:
         ed:fe:08:01:7e:e3:6a:63:38:6e:c8:53:8c:52:51:38:83:70:
         4c:73:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----