This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: duoMOsjd66MqTBkfy9gxtpkfH55rv1S1Hd4QMzNNR+4= Subject key identifier: 31:98:6B:25:84:20:17:9B:74:EE:AA:03:FC:B1:A4:AC:2A:66:90:B1 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 593B7F80273527CB354F001AEEDD30188E2497D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 02DB Signing time: Thu 08 Jan 2026 19:35:59 +0000 Manifest this update: Thu 08 Jan 2026 19:30:59 +0000 Manifest next update: Fri 09 Jan 2026 22:28:59 +0000 Files and hashes: 1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 2: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: G5qrVt4/0nBMo6ctKy3W2l2PG/CADzWskpDtVMjlM5c=) 3: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:7f:80:27:35:27:cb:35:4f:00:1a:ee:dd:30:18:8e:24:97:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Jan 8 19:30:59 2026 GMT Not After : Jan 9 22:28:59 2026 GMT Subject: CN=31986B258420179B74EEAA03FCB1A4AC2A6690B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:ed:95:3c:25:eb:06:bd:f4:f0:9e:06:7b: 8a:4e:30:b3:88:0f:82:1a:0e:6f:38:8a:c8:f8:68: 5e:09:64:6d:77:0b:d5:ab:79:70:da:55:6a:c5:7f: ba:d2:2b:de:bf:da:27:9d:47:3b:5b:1a:e0:62:f4: 20:1d:9c:c4:0d:fd:0e:99:82:14:7c:1d:26:5b:bb: 6d:6d:37:01:6b:f3:a3:0b:0c:00:c4:78:07:cc:5f: 87:d2:1d:e4:15:c0:03:71:b2:1d:71:bd:17:80:fa: 71:0c:1e:60:6f:bd:da:1b:ec:85:ce:b9:5c:74:b1: 96:09:9f:38:e8:d7:60:a2:f6:8a:99:4d:e5:d5:d4: ab:7b:8b:9b:be:c5:73:c9:1c:ac:94:f1:fa:f4:1d: 09:f0:ae:cb:58:5d:3a:43:de:f3:15:df:b3:8b:85: 64:c4:e4:f0:98:2f:59:6e:51:38:9f:0d:34:c9:2f: 3a:bb:60:97:a2:5b:7e:18:12:df:68:e1:87:f4:5e: 6b:e4:5e:c6:e7:f0:e3:93:b8:1a:78:a1:72:4e:aa: fe:a1:af:90:85:33:3f:cd:1c:a5:d3:a6:80:a2:9f: 02:6c:ec:b8:80:8b:8f:0b:e2:2c:1a:e1:f0:87:15: d5:9c:76:f8:77:b1:ff:a7:98:1c:d7:ff:d7:62:6e: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:6B:25:84:20:17:9B:74:EE:AA:03:FC:B1:A4:AC:2A:66:90:B1 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:92:33:94:d5:58:96:72:83:96:34:d7:75:0f:cd:b4:64:22: 2d:ba:da:11:63:9a:f4:55:e2:ab:9e:cf:1e:c2:97:a5:f4:e2: 19:58:17:46:10:e7:5d:cd:02:98:11:87:d8:a8:f5:fc:6d:97: 9b:67:3d:e8:73:a1:43:cb:9d:e1:42:18:7f:72:05:f0:85:17: 15:c3:86:2d:29:48:b9:5d:dc:ae:1e:e2:b3:d1:cd:c9:3b:84: d9:47:5e:a0:02:1b:44:c5:1c:3a:fd:f0:66:ba:1a:22:23:9d: 95:03:6d:6c:5e:f0:0d:f1:79:d1:36:08:96:ae:6b:0e:41:31: 97:d8:78:40:69:f7:1c:49:0d:c6:87:48:63:88:31:0a:40:04: 5c:d4:47:46:dd:0c:20:19:82:ad:ba:b6:64:cb:c5:c7:73:f5: 87:15:7d:b9:83:b7:af:c9:22:c2:72:0d:28:79:63:5a:cb:95: 22:43:e9:e0:b5:5c:e2:51:41:59:cf:aa:5c:e2:5f:46:93:65: 2b:a1:47:49:3a:d8:6e:b9:66:9b:3c:34:08:a6:dd:e3:1c:d9: dd:e1:9b:d1:75:44:18:61:4d:92:08:01:6c:65:86:1b:54:e5: d0:a6:57:45:b1:0e:c2:a9:ec:0f:5c:ec:7a:d9:08:30:7e:bd: 50:3f:bd:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWTt/gCc1J8s1TwAa7t0wGI4kl9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNjAxMDgxOTMwNTlaFw0yNjAxMDkyMjI4NTlaMDMxMTAvBgNV BAMTKDMxOTg2QjI1ODQyMDE3OUI3NEVFQUEwM0ZDQjFBNEFDMkE2NjkwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLr+2VPCXrBr308J4Ge4pOMLOI D4IaDm84isj4aF4JZG13C9WreXDaVWrFf7rSK96/2iedRztbGuBi9CAdnMQN/Q6Z ghR8HSZbu21tNwFr86MLDADEeAfMX4fSHeQVwANxsh1xvReA+nEMHmBvvdob7IXO uVx0sZYJnzjo12Ci9oqZTeXV1Kt7i5u+xXPJHKyU8fr0HQnwrstYXTpD3vMV37OL hWTE5PCYL1luUTifDTTJLzq7YJeiW34YEt9o4Yf0XmvkXsbn8OOTuBp4oXJOqv6h r5CFMz/NHKXTpoCinwJs7LiAi48L4iwa4fCHFdWcdvh3sf+nmBzX/9dibhbHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMZhrJYQgF5t07qoD/LGkrCpmkLEwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjJIzlNVYlnKDljTXdQ/NtGQiLbraEWOa9FXiq57PHsKXpfTiGVgXRhDnXc0C mBGH2Kj1/G2Xm2c96HOhQ8ud4UIYf3IF8IUXFcOGLSlIuV3crh7is9HNyTuE2Ude oAIbRMUcOv3wZroaIiOdlQNtbF7wDfF50TYIlq5rDkExl9h4QGn3HEkNxodIY4gx CkAEXNRHRt0MIBmCrbq2ZMvFx3P1hxV9uYO3r8kiwnINKHljWsuVIkPp4LVc4lFB Wc+qXOJfRpNlK6FHSTrYbrlmmzw0CKbd4xzZ3eGb0XVEGGFNkggBbGWGG1Tl0KZX RbEOwqnsD1zsetkIMH69UD+94g== -----END CERTIFICATE-----Generated at Sun Jan 11 20:02:12 2026 by rpki-client