This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
File:                     2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft (raw, json)
Hash identifier:          GjmUTQL3a/sjN4NRRhIjIL6X2hRIpV28R8qUlYMTlWk=
Subject key identifier:   A1:DD:6C:F0:9B:EF:F1:F2:1B:28:55:8B:79:22:A6:81:15:EB:9B:08
Authority key identifier: 24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
Certificate issuer:       /CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
Certificate serial:       1D4295C67423C8514C4FBD63A5BB197B68522E8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
Manifest number:          2A
Signing time:             Thu 22 Jan 2026 04:27:44 +0000
Manifest this update:     Thu 22 Jan 2026 04:22:44 +0000
Manifest next update:     Fri 23 Jan 2026 07:46:44 +0000
Files and hashes:         1: 2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl (hash: GBPZILAvBN9fDbegAzxVbIPIWsqbEiMnF5hj8AeiVoQ=)
                          2: 323830343a336461383a3a2f33322d313238203d3e20323636353435.roa (hash: e7z4XHQVCQoa8UmP3uzUD4UQFr1cllUd493JvNrsIEU=)
                          3: 34352e362e3139322e302f32322d3332203d3e20323636353435.roa (hash: YH680lgfZ081Y1oei0RageEt7fimwLvkD/vUyrtn+l4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:95:c6:74:23:c8:51:4c:4f:bd:63:a5:bb:19:7b:68:52:2e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
        Validity
            Not Before: Jan 22 04:22:44 2026 GMT
            Not After : Jan 23 07:46:44 2026 GMT
        Subject: CN=A1DD6CF09BEFF1F21B28558B7922A68115EB9B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:52:1f:b6:d9:ed:4a:71:3d:02:90:8f:4a:
                    20:a6:e8:d0:f4:7d:37:f6:cf:ea:d8:3a:e2:e7:81:
                    24:60:b1:31:ce:bc:72:f2:44:5a:ce:62:11:77:cb:
                    11:67:5e:f8:ac:5e:ab:b3:d8:10:06:48:1d:d4:c7:
                    20:40:30:6c:79:13:6e:dc:9f:d6:c7:bb:c1:70:6e:
                    01:a5:75:fe:06:06:d2:9d:f9:47:a7:d4:b5:ec:14:
                    23:e6:c2:2b:52:6c:20:dc:50:42:ab:ac:b1:76:7d:
                    3f:ff:52:09:73:ba:da:f3:7f:ac:1a:4a:dd:ab:12:
                    d6:dc:4a:7b:94:43:d4:e0:0e:46:9b:fa:a2:26:a3:
                    4c:10:ed:e7:0b:f2:9f:4b:24:4a:d1:e4:2c:32:d7:
                    1a:81:58:64:c0:85:b4:b6:c0:dc:0b:cc:0e:21:12:
                    71:0a:ee:a5:21:63:10:d2:72:0f:93:58:3c:6c:8a:
                    38:92:e0:8d:21:e8:df:b6:be:41:9c:1d:75:4b:2f:
                    ff:dd:1d:ec:f0:54:b3:6b:d3:2e:af:95:7e:03:e8:
                    11:0d:e8:2b:b9:2b:28:69:49:37:3f:47:5f:ad:4e:
                    2d:ac:e1:ee:04:a4:92:8c:23:d8:32:45:31:4d:9d:
                    9b:7a:a4:69:29:5c:0c:c1:2d:06:91:4f:6a:19:64:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:6C:F0:9B:EF:F1:F2:1B:28:55:8B:79:22:A6:81:15:EB:9B:08
            X509v3 Authority Key Identifier:
                keyid:24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:d8:27:97:15:e5:fb:89:d1:bb:29:37:a8:cf:e3:3e:a0:
         e3:73:32:d0:17:4f:10:89:2e:4a:f5:f1:f9:9d:2a:2e:e1:64:
         6d:b7:df:07:28:54:7e:81:24:80:37:62:03:bb:49:40:ad:ad:
         a7:12:b6:dc:9b:46:15:92:ac:fb:7b:86:7f:b0:69:d5:b7:53:
         14:12:68:21:4a:fd:3d:19:73:b5:fb:71:01:c4:ef:1f:c7:b6:
         38:30:ba:bb:da:60:d6:31:da:ff:b1:bb:c6:a4:e2:cf:54:89:
         5c:80:5e:a6:c2:23:13:86:e6:8e:5b:c7:01:ff:24:b2:5d:49:
         8a:6f:a3:f7:ea:b1:75:28:02:40:8b:89:63:13:17:cc:88:a7:
         ff:b5:58:06:15:cd:dd:c1:82:d3:7b:de:ee:2b:d4:b1:d4:8a:
         2b:b5:25:57:31:5b:6c:86:0f:92:a2:01:8e:4a:cc:c2:5a:d1:
         bf:4b:14:a7:1d:a1:da:18:18:ff:4a:4d:49:d8:e5:47:73:08:
         e7:5a:6d:ed:22:6e:f6:e4:62:60:86:64:ba:a4:7b:63:72:1c:
         65:bf:f5:a0:bc:84:32:ea:ff:33:80:e6:06:45:c9:f9:d9:f5:
         9b:59:85:93:3e:47:a4:73:f5:30:81:91:0d:a1:b4:11:5d:ee:
         ed:d9:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----