This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft
File:                     1D27227F1560DF2B60341C7259E9A068591B18A3.mft (raw, json)
Hash identifier:          b7XQeqtGMDIdkE0S+vdMp6ES6PLMBNEtreg3EGBwxwI=
Subject key identifier:   86:41:09:D1:29:0A:72:57:02:5C:09:0C:91:83:42:A4:32:B2:3B:C7
Authority key identifier: 1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3
Certificate issuer:       /CN=1D27227F1560DF2B60341C7259E9A068591B18A3
Certificate serial:       5BD107FAD52CDD02541FAC2BA465E6C297529DCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft
Manifest number:          76
Signing time:             Tue 20 Jan 2026 03:19:51 +0000
Manifest this update:     Tue 20 Jan 2026 03:14:51 +0000
Manifest next update:     Wed 21 Jan 2026 06:39:51 +0000
Files and hashes:         1: 34352e3136352e3231302e302f32342d3234203d3e20323638363932.roa (hash: XT65n3nuAhTUEBGEGhBf2u2weByqQlumZXUUrO5rHuQ=)
                          2: 34352e3136352e3231312e302f32342d3234203d3e20323638363932.roa (hash: d/BqD+uIpKa1a2HzSCerl7ANp//zuRWjt4rE1Nb2dyg=)
                          3: 34352e3136352e3230392e302f32342d3234203d3e20323638363932.roa (hash: tLvyZbavyoIVPUpI9/ruqvPQPHz885hZEx9tnb4Kmmo=)
                          4: 1D27227F1560DF2B60341C7259E9A068591B18A3.crl (hash: bnYrqpk4V1WhpDI6iZ1i6b1FxyglJs+3xYtQpV/lT4Q=)
                          5: 34352e3136352e3231302e302f32332d3233203d3e20323638363932.roa (hash: CMTGH7lm5NvKtjmBE6Gf7fQWD9MT6jK7rjL1B/4aakw=)
                          6: 34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa (hash: uVycr8EPtC8JqIoc+VSpyINHhCbCs+I4lprkFZ1Eais=)
                          7: 34352e3136352e3230382e302f32322d3232203d3e20323638363932.roa (hash: 7wGf2kkFioZRg8cTgC/QzBCpm49qOUIc6Qv6/DD7Ytc=)
                          8: 34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa (hash: ifjf9+0t6Oka4PNd7YfBXjaAznSTR9U+4vUbrPUyN/M=)
                          9: 323830343a353532343a3a2f33322d3334203d3e20323638363932.roa (hash: wsuMfjZ3eH+wbmgIID5i1KYdBHlIzU2JwtZ+1x0E/po=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:07:fa:d5:2c:dd:02:54:1f:ac:2b:a4:65:e6:c2:97:52:9d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D27227F1560DF2B60341C7259E9A068591B18A3
        Validity
            Not Before: Jan 20 03:14:51 2026 GMT
            Not After : Jan 21 06:39:51 2026 GMT
        Subject: CN=864109D1290A7257025C090C918342A432B23BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:e3:9c:5c:38:84:d1:cb:b3:6a:dc:04:fa:
                    be:08:e2:11:9f:bd:f0:13:46:c7:3c:e0:e5:f1:fd:
                    fb:f1:23:c7:a1:82:2b:a4:c3:29:a1:7f:90:4e:15:
                    e4:31:39:c6:3b:3c:d9:e3:0a:8f:46:d2:4a:1e:2a:
                    22:c8:ee:2e:31:5d:91:4e:37:f1:20:b1:67:b6:c4:
                    78:2c:fe:26:4d:bd:ca:2b:a4:f6:23:76:c8:46:29:
                    03:b1:f2:9e:0e:9a:0c:b5:7e:94:ab:86:78:3a:a2:
                    9f:b6:45:42:a4:25:ce:be:1b:c9:4a:24:b0:fd:e6:
                    58:d8:a6:7c:72:e5:30:f2:fa:70:6b:e5:f8:7e:5a:
                    fa:53:f4:2b:52:9f:80:93:55:d1:f8:11:af:c6:0b:
                    3e:12:a8:8e:fc:a2:f0:ad:b7:a3:99:14:b6:2b:7c:
                    7d:8f:06:b6:ac:86:7e:15:14:93:3d:23:08:9a:98:
                    f1:55:23:42:40:d5:c5:e1:cb:22:8e:6a:d0:8a:70:
                    7a:e5:0f:96:ff:76:99:09:cd:1e:0f:c1:68:a7:02:
                    6f:a4:b9:a3:d9:19:83:8c:02:b2:dc:df:01:8a:e3:
                    d9:f4:4c:e5:d0:a6:d8:11:ec:0a:82:7b:20:80:0e:
                    45:3c:6a:a4:e5:94:9f:d1:b8:6a:c9:96:a7:c5:60:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:41:09:D1:29:0A:72:57:02:5C:09:0C:91:83:42:A4:32:B2:3B:C7
            X509v3 Authority Key Identifier:
                keyid:1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:b1:db:e7:ca:f0:e9:4c:c3:43:3c:6d:99:dd:bd:6e:39:
         c6:5c:17:39:13:a0:f7:6c:3e:c9:e7:01:b5:0a:bf:e6:e7:80:
         ce:87:34:60:b0:27:a9:e2:53:4c:d0:2a:5c:b8:dd:f6:eb:72:
         7a:c1:7c:52:7b:f1:af:d6:da:d3:23:8f:34:10:41:a5:62:c8:
         44:23:5f:de:0c:5e:d3:95:2f:11:aa:5a:5e:b3:e8:1f:a1:60:
         0b:ed:f5:93:61:ac:c9:a2:7f:92:ec:9f:cf:e0:f7:e2:40:2b:
         8a:df:59:e3:8b:d1:6a:f2:53:c6:c4:41:42:34:7e:ae:3c:75:
         aa:35:4b:01:fc:ed:85:41:79:4e:1f:6c:91:34:22:98:ec:e7:
         5c:6f:e8:7b:62:94:9a:e2:b9:51:73:81:bb:f6:db:d1:69:ca:
         f9:ad:45:46:f2:27:9d:2c:56:fb:95:0b:3e:f6:05:d0:17:43:
         b6:16:de:db:94:ae:32:40:c3:36:67:e3:5b:5f:60:61:ea:b2:
         83:53:87:ec:a6:93:e4:77:49:2c:da:70:8b:17:e4:98:96:ba:
         93:56:45:3a:e2:8a:17:c6:fb:f0:d0:01:a7:a7:21:fa:d2:92:
         9c:57:04:7b:0c:36:15:76:70:d8:e6:62:d0:48:16:c9:00:d7:
         96:cd:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:13:48 2026 by rpki-client