This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft
File:                     54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft (raw, json)
Hash identifier:          0cYMz9ncp65ZhOcwczxBXyPvMIicINNGxcQ4yPdWxSQ=
Subject key identifier:   05:0C:1B:2B:40:8C:9C:3C:06:BC:C6:40:A7:A6:98:A3:18:D9:7E:D7
Authority key identifier: 54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB
Certificate issuer:       /CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
Certificate serial:       1CB9DDBF1C0FC87BA0CA9C03510015B07D7B2426
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft
Manifest number:          2F
Signing time:             Mon 01 Dec 2025 03:03:45 +0000
Manifest this update:     Mon 01 Dec 2025 02:58:45 +0000
Manifest next update:     Tue 02 Dec 2025 06:31:45 +0000
Files and hashes:         1: 3134332e302e32342e302f32322d3332203d3e20323634303735.roa (hash: MwVxqT7wLBEMmKk9T6NgWL6oN8SHDEgNPPWWc4o5v84=)
                          2: 3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa (hash: GmlV+hcXMzJKxsT9G5qXZphxhyTD0Z4sLkVenU0Ge0s=)
                          3: 3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa (hash: WD2chNcwbg2S0mjWpkaYDFB2ew5LZCsUkfIVEmMzl2k=)
                          4: 34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa (hash: siNpGu5eeacej9ikOGBFxG7eNJr0aFZ53go040zX6W8=)
                          5: 54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl (hash: eWGnMSdPAr2ZUhzkHBYEYkemOyWfZjdMA/D2Je4/P98=)
                          6: 323830343a326137633a3a2f33322d313238203d3e20323634303735.roa (hash: rYkZzYXGf9Tr5fqNBxmcs8bM8/fi0MS0RPYt0QlZ1jk=)
                          7: 3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa (hash: q4j4EcW0ylxaYDB8gH/E/GgnODR/VBLBO2hNghqV6dA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:dd:bf:1c:0f:c8:7b:a0:ca:9c:03:51:00:15:b0:7d:7b:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
        Validity
            Not Before: Dec  1 02:58:45 2025 GMT
            Not After : Dec  2 06:31:45 2025 GMT
        Subject: CN=050C1B2B408C9C3C06BCC640A7A698A318D97ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:68:8a:10:26:24:a1:e9:d9:9a:4e:5d:96:
                    55:14:e3:04:40:27:69:11:a9:79:4d:66:bb:31:91:
                    ac:fb:84:7a:5d:6d:cc:42:30:fd:9f:fa:28:08:87:
                    d3:c3:37:cf:b9:78:61:b9:91:76:56:b8:cb:26:41:
                    a7:ea:60:8c:e7:92:4e:5a:fa:60:7c:0a:fb:37:b1:
                    67:dd:f2:3b:89:a2:61:37:94:a2:17:80:a3:17:6c:
                    bb:8b:e5:60:bc:b8:b2:9f:20:a9:48:01:98:8d:d7:
                    a3:63:4a:90:ef:0f:29:df:42:c4:f1:9f:99:48:18:
                    53:4c:e3:b6:55:06:81:bb:7c:df:da:11:09:8c:fb:
                    2e:12:c3:03:9b:b8:dd:61:91:30:2a:0f:78:bc:c4:
                    ed:f4:37:88:82:f9:fa:45:6b:dc:bc:8c:db:b5:f9:
                    ad:0f:70:61:5e:3e:16:ad:7c:85:41:74:51:b7:93:
                    6e:22:54:c2:88:e1:df:eb:bc:a5:b1:9f:51:f2:f3:
                    4c:fb:ea:1e:94:db:c0:ad:62:25:cf:a2:d4:d4:86:
                    33:3b:e5:29:e3:e8:ab:b6:d2:81:73:a2:f1:b4:50:
                    9f:3d:d5:9e:11:d3:3a:6f:8a:91:2e:09:b2:d1:26:
                    80:08:bc:6b:79:18:a6:f2:3b:5a:8a:03:7b:f4:e1:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:1B:2B:40:8C:9C:3C:06:BC:C6:40:A7:A6:98:A3:18:D9:7E:D7
            X509v3 Authority Key Identifier:
                keyid:54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:97:1d:d6:3d:10:28:c1:d1:d9:26:40:ac:04:57:fd:30:
         7d:72:6d:98:03:9c:58:97:cd:24:55:6a:52:8a:c7:0d:be:d0:
         8e:d4:c3:a3:4b:a7:d9:02:93:fc:57:cf:46:9f:ea:50:1d:0a:
         e8:73:01:cc:4f:21:a1:b9:a1:32:f7:5a:84:ef:d9:fc:78:90:
         f0:5c:0d:c9:f1:bf:4b:48:0b:53:86:04:6f:3a:9d:c9:e8:8d:
         33:9f:a9:8e:80:96:c4:72:70:4b:54:7d:10:7c:c7:e4:71:0f:
         c9:18:e2:ee:fd:3d:82:4e:65:b2:fe:b9:26:55:7f:33:7b:eb:
         c8:72:e4:71:d7:3b:e7:ad:04:b4:cd:82:73:1e:69:63:64:69:
         f3:a2:42:09:5e:ea:d8:08:e5:0b:13:c4:58:ab:6f:95:aa:aa:
         47:98:24:81:ef:be:73:c5:41:53:b1:fd:7c:49:2c:ed:7c:6b:
         2d:6f:25:49:11:fd:5d:3e:cb:23:c3:ec:d6:84:b6:c8:42:b6:
         7c:7e:6a:aa:b0:d7:c9:77:87:78:dc:74:31:9d:fc:53:2b:ef:
         35:98:ff:1a:41:8c:c7:2a:26:90:87:a3:f5:14:6d:55:be:fa:
         33:26:37:91:ad:cd:00:54:eb:77:3d:d0:87:b9:b2:51:5e:7c:
         f7:56:72:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHLndvxwPyHugypwDUQAVsH17JCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFQzcwNTExRTRGOUM5MzdEREQ3N0U5QkRFQ0VBMTIx
RERCQjFFQjAeFw0yNTEyMDEwMjU4NDVaFw0yNTEyMDIwNjMxNDVaMDMxMTAvBgNV
BAMTKDA1MEMxQjJCNDA4QzlDM0MwNkJDQzY0MEE3QTY5OEEzMThEOTdFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMGiKECYkoenZmk5dllUU4wRA
J2kRqXlNZrsxkaz7hHpdbcxCMP2f+igIh9PDN8+5eGG5kXZWuMsmQafqYIznkk5a
+mB8Cvs3sWfd8juJomE3lKIXgKMXbLuL5WC8uLKfIKlIAZiN16NjSpDvDynfQsTx
n5lIGFNM47ZVBoG7fN/aEQmM+y4SwwObuN1hkTAqD3i8xO30N4iC+fpFa9y8jNu1
+a0PcGFePhatfIVBdFG3k24iVMKI4d/rvKWxn1Hy80z76h6U28CtYiXPotTUhjM7
5Snj6Ku20oFzovG0UJ891Z4R0zpvipEuCbLRJoAIvGt5GKbyO1qKA3v04QATAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBQwbK0CMnDwGvMZAp6aYoxjZftcwHwYDVR0j
BBgwFoAUVOxwUR5PnJN93XfpvezqEh3bseswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMC81NEVDNzA1MTFFNEY5QzkzN0RERDc3RTlCREVDRUExMjFEREJCMUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0RUM3MDUxMUU0RjlDOTM3
RERENzdFOUJERUNFQTEyMUREQkIxRUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMC81
NEVDNzA1MTFFNEY5QzkzN0RERDc3RTlCREVDRUExMjFEREJCMUVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASpyXHdY9ECjB0dkmQKwEV/0wfXJtmAOcWJfNJFVqUorHDb7QjtTDo0un2QKT
/FfPRp/qUB0K6HMBzE8hobmhMvdahO/Z/HiQ8FwNyfG/S0gLU4YEbzqdyeiNM5+p
joCWxHJwS1R9EHzH5HEPyRji7v09gk5lsv65JlV/M3vryHLkcdc7560EtM2Ccx5p
Y2Rp86JCCV7q2AjlCxPEWKtvlaqqR5gkge++c8VBU7H9fEks7XxrLW8lSRH9XT7L
I8Ps1oS2yEK2fH5qqrDXyXeHeNx0MZ38UyvvNZj/GkGMxyomkIej9RRtVb76MyY3
ka3NAFTrdz3Qh7myUV5891ZyXA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:44 2025 by rpki-client