This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
File:                     67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft (raw, json)
Hash identifier:          Vt9oAZc1Z2b/0ehbas0bMf/iULBiH9si9nrjHhfCGjc=
Subject key identifier:   8A:C6:C6:73:8D:85:EC:ED:5F:30:E3:16:4C:F4:85:85:3F:8E:77:1D
Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Certificate issuer:       /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Certificate serial:       2D4C1A87E827D3CD4F2430A036D6FAC4134EE8B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
Manifest number:          E1
Signing time:             Wed 17 Dec 2025 01:24:49 +0000
Manifest this update:     Wed 17 Dec 2025 01:19:45 +0000
Manifest next update:     Thu 18 Dec 2025 02:59:45 +0000
Files and hashes:         1: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl (hash: BGWm4deKx2rx6jcdF/pfXxDiQkrs54vEiz0v7J0WaRA=)
                          2: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=)
                          3: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:1a:87:e8:27:d3:cd:4f:24:30:a0:36:d6:fa:c4:13:4e:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
        Validity
            Not Before: Dec 17 01:19:45 2025 GMT
            Not After : Dec 18 02:59:45 2025 GMT
        Subject: CN=8AC6C6738D85ECED5F30E3164CF485853F8E771D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:20:09:6c:f6:56:4e:9f:51:c2:11:70:15:
                    6c:ce:9f:a8:2b:83:f8:d5:b9:f8:a1:1c:16:d5:d8:
                    8a:cc:db:d5:5d:b6:ba:48:93:3e:8a:d9:1e:95:f3:
                    7f:6a:4c:6c:8c:cd:f6:7f:6e:6f:a4:e2:a8:23:2a:
                    46:b2:7b:ef:cf:42:35:07:b8:20:b8:95:7b:e5:6a:
                    79:9e:e8:29:5a:f7:aa:6e:2d:c6:9e:64:28:0f:9f:
                    1b:a5:53:ff:38:71:d4:cc:d5:d3:06:46:d5:a7:45:
                    d2:85:88:50:ce:19:70:6e:ad:b6:8b:88:2e:34:f2:
                    65:e3:9d:0e:a2:b1:b6:41:5e:a9:29:45:8c:02:86:
                    7a:ed:b4:ea:8a:29:6c:33:e5:21:ae:e6:7e:f7:40:
                    1d:45:4f:15:94:65:ad:b9:54:74:8a:27:d3:4d:3d:
                    4f:57:03:d5:3f:ab:65:b5:2e:b3:58:f4:71:6d:df:
                    88:46:2c:87:65:e4:90:16:c6:e4:7d:61:32:cc:37:
                    df:d6:34:ce:a0:ce:5f:88:0b:39:dc:1b:17:e9:1f:
                    27:85:58:9b:20:4d:27:b5:aa:04:8f:92:0b:d7:76:
                    2f:b2:92:a7:dd:64:17:e2:d1:ac:a5:14:33:dd:a8:
                    5e:e7:b2:74:e5:f1:52:ae:79:af:bd:8d:c5:b9:f3:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C6:C6:73:8D:85:EC:ED:5F:30:E3:16:4C:F4:85:85:3F:8E:77:1D
            X509v3 Authority Key Identifier:
                keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:c1:90:01:b3:5e:c5:00:70:fd:ce:27:2d:67:e3:ff:04:
         ef:56:92:c1:22:60:8d:2a:bb:85:32:b3:3f:84:d3:38:5a:99:
         69:04:01:76:1f:08:cc:9f:20:4f:f3:c0:f1:1b:9c:85:5d:cb:
         b4:18:91:0f:cd:7a:c3:76:87:89:0d:a1:3d:88:5e:97:2d:ce:
         f6:07:34:19:be:81:14:f5:08:f0:16:85:39:fe:2f:23:fc:49:
         aa:06:59:ba:49:2e:11:7c:4e:9b:53:c2:0b:85:d8:dc:ed:f1:
         29:02:1f:9a:61:db:c8:bb:f0:56:42:19:00:c3:00:d6:f7:3a:
         d6:0d:d9:88:f4:e8:7e:72:d5:a9:1c:0b:8f:26:4b:32:6c:3a:
         9d:3a:5d:bd:2f:07:5f:fd:9b:6e:1d:c4:97:ec:16:c5:01:ca:
         94:c5:5b:57:b8:ed:62:f7:d3:ef:57:26:03:43:c7:c4:ee:17:
         9d:27:c7:a0:75:cd:41:5f:15:c0:93:f6:6b:41:51:9e:66:af:
         c4:cc:09:41:a5:80:55:3a:b0:b2:0c:89:69:7e:74:72:40:a1:
         76:60:89:74:32:bd:0b:f6:9a:8f:a2:5b:fb:0b:b2:0a:cf:5d:
         1b:3f:b4:32:2d:c2:95:3c:05:1f:26:d9:a8:fe:15:1d:91:00:
         55:a9:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:58:52 2025 by rpki-client