This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft
File:                     18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft (raw, json)
Hash identifier:          LMk6P1vTahZessxrgQ6lKA5+Lo8qoQmO91/ATOfZIZE=
Subject key identifier:   E6:86:D6:F9:A0:AE:83:E8:72:5C:1E:8D:35:6C:CD:92:B6:52:42:44
Authority key identifier: 18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C
Certificate issuer:       /CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
Certificate serial:       32133273F04D4C4FC6A6E61385DAF3001E357B1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft
Manifest number:          033C
Signing time:             Sat 20 Dec 2025 13:51:30 +0000
Manifest this update:     Sat 20 Dec 2025 13:46:30 +0000
Manifest next update:     Sun 21 Dec 2025 17:17:30 +0000
Files and hashes:         1: 34352e3233312e35362e302f32322d3332203d3e20323637323030.roa (hash: LYUcFqrBNWkk7E7zl1N6cacPYhiomxOnr6cjZGGNnr4=)
                          2: 323830343a343962633a3a2f33322d313238203d3e20323637323030.roa (hash: EvvdOMRO18qJIkP4vpkVMRYoH9wo69hfjDTOnk69vJQ=)
                          3: 18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl (hash: IdF4DsK+5md8bLPgeuXQCqaasyD0me+Bh4MSg4LbLyc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:32:73:f0:4d:4c:4f:c6:a6:e6:13:85:da:f3:00:1e:35:7b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
        Validity
            Not Before: Dec 20 13:46:30 2025 GMT
            Not After : Dec 21 17:17:30 2025 GMT
        Subject: CN=E686D6F9A0AE83E8725C1E8D356CCD92B6524244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:4d:6f:46:b2:04:2b:54:86:af:95:00:bc:
                    e6:af:d3:6b:07:8e:65:d4:c4:0a:75:6a:25:03:84:
                    a1:4b:6d:7d:1a:37:b3:53:21:81:5f:85:ad:b6:6c:
                    6a:42:97:90:65:f6:c0:d6:fd:9b:ac:ab:87:7e:41:
                    1d:c7:5c:61:b4:fc:19:95:bf:64:59:3a:2d:05:ff:
                    c0:5c:0b:fb:c5:fc:56:a8:bb:64:23:f1:c7:4a:6a:
                    63:c4:3c:de:ed:81:06:d1:01:4e:ee:b4:d1:82:79:
                    d7:53:a1:ef:75:eb:63:ee:ee:b7:9d:2d:cb:ae:99:
                    fc:b3:d0:29:6f:00:0c:39:76:07:55:f3:81:71:fd:
                    c7:51:b9:90:85:ba:b7:b2:20:22:3c:cf:08:74:bf:
                    85:69:c1:1e:06:44:92:e0:47:82:cf:dc:00:8c:c7:
                    1b:4a:dc:99:da:f2:4d:3a:d6:19:50:b8:f1:99:25:
                    c0:7d:68:d0:dd:a3:d7:0b:99:75:69:7f:b5:41:38:
                    47:2a:e0:35:db:d3:42:ec:71:98:2e:39:7e:56:cf:
                    fd:4f:3f:16:3d:8d:64:33:91:e1:81:60:27:c9:97:
                    2f:0a:ca:97:f8:d7:56:c5:5e:2d:b5:ff:a2:f5:10:
                    2b:5c:e5:72:90:2d:e3:67:e5:ff:6b:fb:56:cd:70:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:86:D6:F9:A0:AE:83:E8:72:5C:1E:8D:35:6C:CD:92:B6:52:42:44
            X509v3 Authority Key Identifier:
                keyid:18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:e2:59:d4:6e:f9:3e:d0:2f:eb:d9:cd:f7:2e:7e:80:1c:
         89:64:10:e8:4a:44:62:62:86:68:3c:7a:0a:a2:ae:31:42:cd:
         8e:43:a0:39:4d:91:d0:04:3c:a9:e2:16:7f:02:0a:e9:5f:df:
         39:6e:81:a8:86:a4:6b:6f:fe:7d:be:bb:3d:21:e6:04:1f:f6:
         25:d2:8a:dc:56:3b:e6:ba:95:ac:98:cb:e0:32:79:8d:a5:ff:
         83:be:68:5e:6f:95:ba:ad:98:04:15:36:d6:39:05:68:00:0d:
         6a:4b:c0:cc:a7:5f:b3:70:05:af:d9:e3:af:50:15:42:b9:cf:
         48:37:98:fd:d8:4f:c1:9b:b0:b8:59:75:aa:bc:b3:2e:63:d5:
         8c:80:f8:8c:8e:6e:3f:bb:16:5a:47:d0:7e:62:30:29:e3:e1:
         49:c8:c1:36:7c:75:01:16:e4:c2:72:0a:c0:e5:06:25:5e:ba:
         99:38:9a:8c:03:4e:86:98:9c:c0:b9:75:96:5e:e6:c6:23:53:
         2c:e8:67:aa:5a:3e:55:ee:40:16:4f:05:72:7b:1f:72:1a:f5:
         e3:9c:7d:8c:54:64:c5:65:4f:8e:70:5c:cf:6d:5a:79:6e:61:
         54:3b:9f:11:cd:4c:a7:69:c7:82:95:cb:44:e8:ac:41:26:45:
         f3:f8:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----