This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          JpGII+W+niXZ3RzeXBiEV+3wGksOF4AtRrJ0hzBbWn0=
Subject key identifier:   9C:87:8A:80:5B:EA:E0:9A:C3:49:EF:C4:90:60:20:BB:AF:EB:E8:9B
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       7C2C40CD6EC9F83684D78636D666C98A5AAA695F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          91
Signing time:             Sat 20 Dec 2025 06:19:38 +0000
Manifest this update:     Sat 20 Dec 2025 06:14:38 +0000
Manifest next update:     Sun 21 Dec 2025 09:28:38 +0000
Files and hashes:         1: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: 99STfHQe6MoWXRZBbqtvv8pciP8DL7OOdWtttrfz150=)
                          2: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
                          3: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          4: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
                          5: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
                          6: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          7: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2c:40:cd:6e:c9:f8:36:84:d7:86:36:d6:66:c9:8a:5a:aa:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Dec 20 06:14:38 2025 GMT
            Not After : Dec 21 09:28:38 2025 GMT
        Subject: CN=9C878A805BEAE09AC349EFC4906020BBAFEBE89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:5e:2f:7d:e7:d4:17:dc:58:4c:fe:af:04:
                    f3:76:2c:d9:f5:88:15:0f:96:90:75:b3:f8:97:24:
                    b0:2e:77:57:a8:9d:89:13:58:b6:51:01:ce:6c:57:
                    69:c1:f7:3a:eb:c8:23:a2:84:7e:a2:af:f5:62:2e:
                    b0:28:c4:0d:52:f4:02:d5:75:24:30:50:56:92:86:
                    d3:19:f7:43:ed:20:f9:ce:d5:e8:71:08:ed:9b:3c:
                    c8:8d:63:72:64:f9:6f:1d:c9:12:bf:41:ca:5f:09:
                    67:67:99:18:b3:9f:a4:04:a6:32:a1:ce:91:7a:82:
                    5a:ca:cb:0d:a5:fb:85:51:a5:1f:81:05:63:8a:a6:
                    9d:7e:08:6c:5f:a0:3c:72:b9:db:a2:92:02:b0:af:
                    89:96:64:5e:98:89:b2:e5:40:b5:ba:09:91:7f:44:
                    e2:c1:3c:91:e7:02:e1:69:16:57:6d:e4:f0:30:09:
                    03:ae:d9:c7:31:31:db:85:41:d1:b6:36:b5:51:35:
                    56:b6:c4:13:b1:26:9c:b3:c2:89:81:b4:d0:01:9d:
                    69:3d:d5:f1:d4:14:44:1c:ec:29:10:62:ba:b3:10:
                    7c:f9:d7:bc:ca:cc:6a:4d:87:9d:ff:f2:34:3e:ef:
                    b3:8a:a0:4e:7f:c5:d5:a4:d0:5e:a6:85:1e:42:a5:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:8A:80:5B:EA:E0:9A:C3:49:EF:C4:90:60:20:BB:AF:EB:E8:9B
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:5e:18:bf:d5:d7:9e:97:8d:f8:0c:6b:d8:c3:c2:25:47:
         ce:fe:c6:66:67:a9:e6:7c:e3:26:0d:9a:49:25:27:2a:82:3b:
         28:43:7c:c4:35:75:af:03:f6:ef:62:dd:1f:13:f0:39:fe:9f:
         8a:3e:ba:46:40:73:09:7c:e6:8f:0c:b8:be:2a:ed:ba:f5:1c:
         74:89:c8:b6:83:42:87:f2:03:ff:b2:7f:5c:d3:03:1b:66:93:
         b7:7f:4d:9d:90:44:66:a5:31:32:25:dc:a9:b6:78:a9:a4:b7:
         91:89:6e:f5:c0:47:d0:2e:c3:38:3d:ca:46:04:11:ef:02:c3:
         8a:67:33:3e:f6:70:73:69:5b:d6:11:70:88:77:08:62:d4:95:
         8c:41:5a:2c:ee:2c:de:11:d0:5b:66:ae:5c:6a:8c:d5:b6:92:
         27:4e:2c:34:45:f6:74:90:4f:bc:7e:6f:83:ac:db:ac:df:c3:
         8b:f3:74:d7:94:1f:20:71:87:e5:2b:1b:13:86:53:39:01:12:
         8c:f6:b2:04:d4:de:bb:bf:96:3c:ac:8a:b9:eb:75:ba:49:b8:
         bb:f3:c4:e5:86:13:e9:74:76:dd:e7:72:9d:22:b6:8f:59:74:
         8a:5a:d8:74:d1:16:65:11:43:d6:ec:ca:b7:40:fd:09:41:c4:
         51:2a:90:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfCxAzW7J+DaE14Y21mbJilqqaV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyMzU1MzUzOEUwMEU2MzY1N0JGRDhGMjdDQzM1MkVE
REY1MjJEOTAeFw0yNTEyMjAwNjE0MzhaFw0yNTEyMjEwOTI4MzhaMDMxMTAvBgNV
BAMTKDlDODc4QTgwNUJFQUUwOUFDMzQ5RUZDNDkwNjAyMEJCQUZFQkU4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzF4vfefUF9xYTP6vBPN2LNn1
iBUPlpB1s/iXJLAud1eonYkTWLZRAc5sV2nB9zrryCOihH6ir/ViLrAoxA1S9ALV
dSQwUFaShtMZ90PtIPnO1ehxCO2bPMiNY3Jk+W8dyRK/QcpfCWdnmRizn6QEpjKh
zpF6glrKyw2l+4VRpR+BBWOKpp1+CGxfoDxyuduikgKwr4mWZF6YibLlQLW6CZF/
ROLBPJHnAuFpFldt5PAwCQOu2ccxMduFQdG2NrVRNVa2xBOxJpyzwomBtNABnWk9
1fHUFEQc7CkQYrqzEHz517zKzGpNh53/8jQ+77OKoE5/xdWk0F6mhR5CpeRnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnIeKgFvq4JrDSe/EkGAgu6/r6JswHwYDVR0j
BBgwFoAU5iNVNTjgDmNle/2PJ8w1Lt31ItkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdU
NEcvMC9FNjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjM1NTM1MzhFMDBFNjM2
NTdCRkQ4RjI3Q0MzNTJFRERGNTIyRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdUNEcvMC9F
NjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXK1eGL/V156XjfgMa9jDwiVHzv7GZmep5nzjJg2aSSUnKoI7KEN8xDV1rwP2
72LdHxPwOf6fij66RkBzCXzmjwy4virtuvUcdInItoNCh/ID/7J/XNMDG2aTt39N
nZBEZqUxMiXcqbZ4qaS3kYlu9cBH0C7DOD3KRgQR7wLDimczPvZwc2lb1hFwiHcI
YtSVjEFaLO4s3hHQW2auXGqM1baSJ04sNEX2dJBPvH5vg6zbrN/Di/N015QfIHGH
5SsbE4ZTOQESjPayBNTeu7+WPKyKuet1ukm4u/PE5YYT6XR23edynSK2j1l0ilrY
dNEWZRFD1uzKt0D9CUHEUSqQsg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:45:23 2025 by rpki-client