This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
File:                     C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft (raw, json)
Hash identifier:          fIJRUdkgIMhqAr66xgvTYXbQtt6kwjnLP9qzUCcv7JE=
Subject key identifier:   A1:1D:68:1C:B3:D9:E4:3A:03:38:67:E1:AC:AB:74:9D:17:6D:14:6E
Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
Certificate issuer:       /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
Certificate serial:       41C7F5BC29A511629A77E685FA3E80B559FEC5B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
Manifest number:          010C
Signing time:             Tue 20 Jan 2026 07:49:01 +0000
Manifest this update:     Tue 20 Jan 2026 07:44:01 +0000
Manifest next update:     Wed 21 Jan 2026 09:18:01 +0000
Files and hashes:         1: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (hash: p/f9WMgk5TtK110gPA24AZ2OwCTIhCwLfAsFip2SxTc=)
                          2: C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl (hash: h7qHdossQp3D4+fji7CBgKY0Mp+OscX+eKR9tUIPI1M=)
                          3: 323830343a6139633a3a2f33322d3333203d3e203532383938.roa (hash: HpYSXVRiMUCEyphfyUnjYZ8d4vusVhaATgf/hl2rd0Q=)
                          4: 3137372e3138342e36342e302f32302d3234203d3e203532383938.roa (hash: u5VZboufd9q3izfHx5cNQeI0r2bBo05yX5Km59lO+FA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c7:f5:bc:29:a5:11:62:9a:77:e6:85:fa:3e:80:b5:59:fe:c5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
        Validity
            Not Before: Jan 20 07:44:01 2026 GMT
            Not After : Jan 21 09:18:01 2026 GMT
        Subject: CN=A11D681CB3D9E43A033867E1ACAB749D176D146E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:54:40:9d:47:35:9f:38:2f:49:60:56:a9:
                    7a:6a:64:d9:3b:46:fe:cd:a1:95:fe:ec:25:0a:9f:
                    a2:d1:11:00:81:5e:fc:15:c5:54:ca:88:6f:b0:2e:
                    b0:8f:43:35:ca:8f:7c:30:d5:e8:97:39:8b:88:e8:
                    cc:8f:fb:1f:70:fc:92:89:90:1d:bf:ec:51:2a:93:
                    2b:20:d1:d0:31:f9:0e:fd:42:01:99:c3:d9:cb:36:
                    c5:fb:a6:64:12:8a:ae:e1:01:bd:ed:5e:d8:a8:d9:
                    bf:c5:00:14:66:13:23:31:58:92:6d:bb:59:a8:f2:
                    73:d6:57:0c:f6:0c:14:16:70:84:9a:e9:5f:67:06:
                    b3:3a:4f:2a:b0:b1:07:11:95:a6:90:28:31:52:08:
                    be:e4:9f:89:39:47:3f:4b:c9:7f:62:43:90:fb:87:
                    5c:59:27:f7:87:07:fb:72:88:62:1e:7e:d2:9a:92:
                    dd:d7:36:02:80:e6:48:bd:b9:8f:e5:97:2d:54:ee:
                    2f:a9:a5:cd:d8:af:78:aa:d6:40:02:a6:79:65:74:
                    de:f1:56:2e:c3:ee:e8:64:da:e6:86:bd:5a:cf:bf:
                    62:09:32:b7:8f:a1:7d:b5:1d:07:a1:40:48:49:89:
                    d7:a0:07:12:88:11:a3:cd:a6:4e:6b:f6:86:19:bf:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:68:1C:B3:D9:E4:3A:03:38:67:E1:AC:AB:74:9D:17:6D:14:6E
            X509v3 Authority Key Identifier:
                keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:ef:f1:3a:28:e0:31:1c:5e:ab:38:a1:96:a7:8d:a4:f2:
         64:30:17:d6:a9:15:5d:c4:19:ef:8e:1d:dc:aa:da:ed:45:a5:
         b7:d3:78:18:b8:a3:93:77:c4:e9:65:cf:91:9e:2b:4e:61:fc:
         17:ec:74:15:23:60:32:9b:5e:3a:07:92:00:cf:ed:32:2e:ac:
         1f:64:9c:ef:c1:c2:13:6a:21:93:1f:28:89:d2:d5:ed:e1:1e:
         2f:7d:2b:ab:9e:c3:bc:35:66:1c:86:21:24:0a:f0:b0:27:04:
         5b:1b:21:01:5d:b9:7f:d8:bd:69:68:ae:12:df:3d:95:d7:23:
         70:d7:02:a6:51:62:91:18:c3:a7:16:0a:2f:3b:1a:3b:80:2f:
         42:e7:cf:6b:0a:18:f0:69:c7:59:cc:b2:34:fa:03:54:6b:3a:
         3c:12:26:c5:aa:b2:44:52:af:bd:db:7c:7b:8c:5c:23:47:dd:
         5b:e6:0e:4f:2c:62:bd:90:78:20:db:6c:6f:59:16:87:9c:b3:
         fe:e6:c3:91:99:03:ca:d3:03:2a:03:a2:39:00:6d:be:7d:ca:
         15:28:1e:56:60:3b:eb:56:86:9f:07:5a:16:33:43:ce:b4:7c:
         f6:19:ad:c4:ca:f0:25:c8:eb:a6:ac:67:4d:25:8e:6c:75:9c:
         08:8f:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----