This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
File:                     AD2E0D7D520E8493681B563F6D06D97221F301B2.mft (raw, json)
Hash identifier:          LnEprNspGZGYIp05nurdhAP+Axarhdi5SAA7vtyBMSw=
Subject key identifier:   79:A2:57:E1:05:9D:9B:05:32:4B:3B:84:5E:6C:06:76:43:9A:CA:CB
Authority key identifier: AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2
Certificate issuer:       /CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
Certificate serial:       63C3DED93F801159568867CA7B5BDFD1570C0959
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
Manifest number:          010D
Signing time:             Fri 23 Jan 2026 02:45:39 +0000
Manifest this update:     Fri 23 Jan 2026 02:40:39 +0000
Manifest next update:     Sat 24 Jan 2026 03:43:39 +0000
Files and hashes:         1: 3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa (hash: WPQhACR9II7fFzwEctmqNMOWxb3w3dwSYjpMGsBdSaw=)
                          2: 323830343a326437383a3a2f33322d3438203d3e20323635323835.roa (hash: KTEhQcU5NggrfcvmT19X/DnNXtyLtRRybFwFXG0zB1U=)
                          3: AD2E0D7D520E8493681B563F6D06D97221F301B2.crl (hash: fNHPkni7a4XwbHe5ey0FUB7HBkJqmtw0z/VZY3Y7+T0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:de:d9:3f:80:11:59:56:88:67:ca:7b:5b:df:d1:57:0c:09:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
        Validity
            Not Before: Jan 23 02:40:39 2026 GMT
            Not After : Jan 24 03:43:39 2026 GMT
        Subject: CN=79A257E1059D9B05324B3B845E6C0676439ACACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:a4:90:ec:12:58:ef:13:cb:8b:79:d8:bf:
                    e0:ed:48:85:95:dd:d8:04:f5:1f:c6:c6:d8:05:1e:
                    2e:88:62:78:97:2d:72:65:55:f8:64:43:e4:49:5c:
                    a4:56:4f:c4:f4:fe:7a:03:93:67:30:33:43:18:1e:
                    41:89:e6:83:35:59:09:86:99:80:58:16:15:ca:6f:
                    da:08:8a:fe:61:56:1d:ff:49:f0:5b:20:27:5d:aa:
                    5d:11:12:9e:44:e5:80:16:77:72:60:8e:3d:7c:df:
                    41:09:da:36:c6:80:7b:1d:d3:98:1a:b1:38:35:30:
                    0b:c2:8e:5d:4e:9c:81:f7:3e:de:cd:51:4e:4a:c3:
                    4d:7d:bd:f0:65:2d:1b:70:9e:0c:d0:01:e0:54:fc:
                    f6:0a:f4:ac:7f:88:a9:11:c5:6a:05:4c:69:b9:e3:
                    b1:de:e4:7c:2a:a0:19:34:b1:7d:fa:1f:c3:9e:b6:
                    38:0e:e9:d3:8f:db:0d:98:d0:00:24:76:d5:10:e7:
                    34:83:64:11:64:d0:de:89:b6:94:97:51:10:16:21:
                    79:81:89:32:47:8d:b2:ad:9d:4d:f0:e7:64:60:0c:
                    16:14:b0:ca:87:7b:b7:1d:48:d8:1f:96:e2:f6:ae:
                    52:5a:ab:18:6c:6e:31:3f:54:73:86:95:31:93:47:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:57:E1:05:9D:9B:05:32:4B:3B:84:5E:6C:06:76:43:9A:CA:CB
            X509v3 Authority Key Identifier:
                keyid:AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:51:3f:c7:37:95:56:a2:96:f1:7a:9e:5f:53:12:7f:6a:
         27:1d:fd:07:9b:fb:2f:e7:24:8b:f7:5e:e9:65:27:ba:0f:ed:
         cb:aa:39:29:63:91:3a:33:f7:49:15:c1:00:23:67:fc:a1:6d:
         e1:54:6d:79:24:4a:ea:ff:d4:69:10:7c:83:9c:27:e8:1e:db:
         8a:a7:db:92:0a:ba:82:e3:b3:25:7d:75:83:46:32:73:e0:bb:
         05:20:f7:2c:20:41:a7:27:99:af:68:7b:68:49:8f:d2:07:20:
         8f:02:3a:53:c1:43:4f:98:d1:81:4f:d7:8a:a6:e8:82:bd:ee:
         86:fe:8d:5f:97:8c:89:83:8a:6c:f3:9c:09:15:8a:da:02:9f:
         f8:1e:36:66:26:06:51:04:1a:65:2d:91:3e:41:fa:27:49:55:
         50:a5:e3:28:de:e3:ba:61:d4:97:82:66:2a:48:10:08:c3:bf:
         f2:b2:ff:29:17:83:99:bc:86:66:c7:08:2f:56:7e:ab:9a:9d:
         d5:f4:a4:61:3f:fd:45:c5:10:6a:71:3a:11:0b:74:ec:0d:4b:
         db:b0:4c:f5:8b:4f:91:da:c5:3e:7d:e1:9d:f7:2f:fb:85:97:
         9a:24:85:5d:5f:84:cd:e3:cf:40:f7:13:c5:68:00:80:a8:3b:
         57:32:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:04:27 2026 by rpki-client