This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
File:                     00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft (raw, json)
Hash identifier:          2UZhdOX35zKrGX5vteaJyFltbSkO0bsnjvMWR/SWPNk=
Subject key identifier:   BE:6E:CF:15:74:8F:8F:6C:18:2D:AB:48:9D:2E:83:43:52:73:35:7E
Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18
Certificate issuer:       /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
Certificate serial:       7E31D7FCB07D9F853F6E586487FD4F853308683C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
Manifest number:          71
Signing time:             Wed 03 Dec 2025 18:58:41 +0000
Manifest this update:     Wed 03 Dec 2025 18:53:41 +0000
Manifest next update:     Thu 04 Dec 2025 20:46:41 +0000
Files and hashes:         1: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: BMY+x9x6EPiDqvs4O5YjGOp4Ob0vxL21fEmA76rw7CE=)
                          2: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: R1Zal9MMCa3HpUf3nNLECiokSOkKFmvMggF0dTHKrfU=)
                          3: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: EcLvYJ5xXNXY5gIzb1pkz+/2vmLJCwdKtVpNSXjcukQ=)
                          4: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl (hash: hAtbM9aFi3ytfgNQCU63z1qt7iQ6QgHndtq4ukILEzQ=)
                          5: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=)
                          6: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: q2MM6gW+szcX2JkOtewWGLVXtIPye4Uedtw9vSocUTw=)
                          7: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:31:d7:fc:b0:7d:9f:85:3f:6e:58:64:87:fd:4f:85:33:08:68:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
        Validity
            Not Before: Dec  3 18:53:41 2025 GMT
            Not After : Dec  4 20:46:41 2025 GMT
        Subject: CN=BE6ECF15748F8F6C182DAB489D2E83435273357E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:28:75:8f:5b:c8:90:62:42:58:3a:f3:82:
                    9c:2f:e5:8b:a4:48:d5:6a:f0:79:53:ef:6b:65:7f:
                    49:d8:c1:33:53:c5:10:31:fd:64:e8:cb:53:aa:f9:
                    39:a4:27:92:af:b3:47:5f:1f:a8:48:50:1c:7f:89:
                    cf:6f:45:1c:c4:9a:28:c9:cd:7f:8d:9a:ce:6e:0a:
                    95:f2:3e:8f:33:28:25:c6:97:4a:aa:fa:b5:6d:94:
                    91:11:64:9c:b2:e3:47:03:ec:d2:ce:05:32:20:66:
                    4c:6c:f5:f5:96:a8:66:c4:0a:df:47:cc:19:e2:6f:
                    55:93:09:2e:c3:44:ae:6c:7a:6a:f1:6b:61:80:4d:
                    c1:ef:84:d8:aa:f7:a3:52:98:e3:95:f5:df:1c:b1:
                    97:f3:7d:48:94:08:87:d3:f8:90:cf:ce:00:7b:0b:
                    d9:99:34:c1:c2:23:ba:ed:48:a4:e1:ef:fa:6a:fd:
                    a8:fd:5a:e2:ac:d9:84:49:60:bc:cc:09:e0:78:0a:
                    65:4d:f1:48:eb:be:2d:37:3d:9d:70:52:be:65:03:
                    2f:83:78:e3:43:5a:a1:80:f8:02:ab:a3:da:21:ad:
                    65:63:28:4f:11:30:42:08:f4:ce:5d:e4:62:43:1d:
                    a5:18:6a:d1:be:b9:c3:fc:c0:8d:11:f7:7c:e5:25:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6E:CF:15:74:8F:8F:6C:18:2D:AB:48:9D:2E:83:43:52:73:35:7E
            X509v3 Authority Key Identifier:
                keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7e:59:90:a4:35:30:ac:46:0a:99:31:47:5a:cf:45:a4:30:
         8e:d6:85:dc:e1:ed:42:4f:3e:fa:ab:dd:db:d6:d9:b4:8c:bf:
         45:f3:56:f4:5d:a7:ac:59:0c:f4:98:2d:96:f2:fd:68:13:e9:
         9f:51:3c:fd:17:d1:b9:ed:9b:86:ec:4e:42:67:d3:cc:ff:0d:
         15:85:7b:40:d7:f3:d0:14:58:ce:fd:ec:8b:75:49:6a:8d:0b:
         7a:2a:d8:cd:86:82:d6:78:46:6d:97:e1:35:3d:8b:1d:7a:35:
         4b:86:e6:83:1e:53:5d:14:dc:c2:ae:18:10:6e:16:57:7d:25:
         16:81:d4:53:9f:68:7b:80:66:4a:2e:31:97:5a:28:4b:59:ff:
         5d:66:ec:02:d0:1d:e8:5e:a8:cf:94:62:88:e3:e5:e9:18:aa:
         28:9e:cb:f0:3a:3e:b3:02:38:a0:21:ff:d7:91:a3:f0:08:29:
         7b:61:f6:15:68:ff:83:03:df:df:0d:d1:7b:1b:39:59:35:87:
         12:81:28:32:bb:48:56:51:9f:bc:cd:03:92:b6:9c:4e:48:8c:
         42:a0:e8:6e:13:5d:91:6c:3d:17:d1:16:51:f4:f7:dc:40:d2:
         4f:2a:8a:40:c1:3a:4b:b2:23:86:f0:d7:66:59:f8:04:97:92:
         9b:aa:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:06 2025 by rpki-client