This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
File:                     3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft (raw, json)
Hash identifier:          pZNZ4oUs5upm2QedCMmePHmm+ifmSddCheT0gAvF5Ss=
Subject key identifier:   9A:70:09:0C:60:AB:F7:39:55:83:23:AC:49:59:E0:11:55:B2:17:1F
Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59
Certificate issuer:       /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
Certificate serial:       14E494E8DA539B26ABA6ECCFE880A4531F3B4372
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
Manifest number:          7F
Signing time:             Sun 14 Dec 2025 20:56:16 +0000
Manifest this update:     Sun 14 Dec 2025 20:51:16 +0000
Manifest next update:     Tue 16 Dec 2025 00:35:16 +0000
Files and hashes:         1: 34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (hash: FnqYyjRTYfkNNd38hYxVbI+10+vM4PYCwzmDz8TKA/4=)
                          2: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl (hash: tbLEIGRYdVJdTRyGAZwHHeW28s+dLSLK/VGWsFdJBzI=)
                          3: 34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (hash: /BDeZPrUv8+PcsdMOixik9++54jka+M6eyu4nPvnr5g=)
                          4: 323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (hash: KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e4:94:e8:da:53:9b:26:ab:a6:ec:cf:e8:80:a4:53:1f:3b:43:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
        Validity
            Not Before: Dec 14 20:51:16 2025 GMT
            Not After : Dec 16 00:35:16 2025 GMT
        Subject: CN=9A70090C60ABF739558323AC4959E01155B2171F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d1:ea:a0:75:51:08:74:c5:70:ed:7c:39:b2:
                    ec:6b:2c:97:c4:78:b1:f7:b6:24:03:83:7c:a3:7d:
                    9e:13:f4:72:3b:7c:dd:8d:11:6d:4a:3a:98:3d:90:
                    49:77:38:ae:02:bd:de:c2:4b:76:f7:98:ad:f7:79:
                    51:a5:bc:c2:df:46:22:fd:59:e6:63:be:88:33:fb:
                    24:50:f5:eb:e9:98:65:2d:e1:07:9b:9d:ec:93:b1:
                    5a:ea:df:9b:2c:73:c1:36:2e:56:9a:8c:8c:64:e5:
                    3e:ef:01:98:df:00:67:f5:80:8f:3e:b7:07:b7:30:
                    27:c0:9d:4c:0c:32:1f:65:f2:5d:3d:57:fe:72:d9:
                    51:b5:55:f9:72:d5:7b:12:69:e3:1a:07:9f:65:f1:
                    07:c8:b3:11:a0:14:3e:15:c0:64:a7:a6:e1:87:3e:
                    46:a8:50:15:70:d8:9a:ae:ca:fb:8b:b9:3c:ef:9e:
                    84:3b:05:b9:3f:9d:fb:5a:e8:cf:e7:e2:57:07:12:
                    da:59:cf:0e:e8:d7:37:fe:ef:1f:52:b6:13:11:81:
                    88:79:2a:60:0e:af:e0:ab:38:21:66:86:9c:e6:cd:
                    c8:f7:a1:2c:56:ec:69:56:50:55:2f:bd:8f:19:2e:
                    9e:b8:15:b1:a3:da:68:3b:0c:a1:c5:90:4e:0f:78:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:09:0C:60:AB:F7:39:55:83:23:AC:49:59:E0:11:55:B2:17:1F
            X509v3 Authority Key Identifier:
                keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:de:d7:ba:76:c7:3f:ae:86:61:fc:6a:c0:cf:f3:cc:14:
         50:c8:05:f3:a8:0d:56:e4:1e:e0:63:6f:41:2a:94:c5:fe:ca:
         79:21:46:11:3b:e6:b1:47:e6:55:66:94:7b:90:25:de:1d:11:
         7b:39:96:e3:60:f5:7f:d8:40:9f:e4:6f:72:6c:30:b8:3d:0e:
         0c:8d:50:50:b6:47:bc:32:ac:85:cd:cd:6c:a6:05:ad:7d:be:
         87:48:b3:4f:d7:90:6f:49:55:38:54:d5:ef:d5:04:0c:5d:f8:
         50:37:de:c5:83:65:47:bf:bd:bb:ca:12:d0:fe:a4:43:bc:48:
         06:ca:0d:74:1a:0c:75:b1:79:50:7e:03:86:b1:f7:67:a4:43:
         b5:1b:e3:95:44:d0:e2:a1:19:f1:40:f0:af:14:86:77:db:ac:
         0a:81:bd:3c:3b:8e:d8:db:58:7f:c5:81:b1:c1:7a:f0:3f:df:
         bd:0c:7c:75:f4:11:f2:6a:e0:f2:3b:d0:d6:4a:33:ac:12:f3:
         5d:1c:77:10:37:67:5c:7e:9d:f5:df:d9:36:85:ac:f6:06:f9:
         36:81:2b:b6:67:13:5b:6e:6f:1d:41:e5:64:9b:f1:7b:aa:13:
         49:59:4c:84:f2:4f:4a:62:e2:9b:60:b3:6b:19:65:b5:e3:be:
         62:93:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----