This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
File:                     66F999D364628A7CC2634117B086F1A07B01449C.mft (raw, json)
Hash identifier:          /KjCyX2I9v0E/NttdEV1ClpqCRFjBQZOtUHz3t2XsZg=
Subject key identifier:   AF:E6:58:CC:AE:38:03:E4:33:19:EE:0D:B4:A4:E6:42:45:36:8D:0F
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       4AA8B11A9DF9EEEE6BE059CC2F395B8F89BF2E67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
Manifest number:          017F
Signing time:             Thu 04 Dec 2025 04:21:07 +0000
Manifest this update:     Thu 04 Dec 2025 04:16:07 +0000
Manifest next update:     Fri 05 Dec 2025 07:08:07 +0000
Files and hashes:         1: 66F999D364628A7CC2634117B086F1A07B01449C.crl (hash: E3V66GlljZrhejMIrDVPjv/OiFQ+K9dbL/m6sZE55LY=)
                          2: 3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (hash: 3/vCP1xkuTw5BMGrf8ogQ2COZbgYr74Zv2VMlu/0A6E=)
                          3: 3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa (hash: wiQUuX7z10wbf5NZdqGmlSfoxzSuSOHbC9mxJxKJRds=)
                          4: 3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa (hash: GSqvt1e/X0nWj5mGfcI0mGHDvzcmKPnM08bWy6uTz5Q=)
                          5: 3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa (hash: sIS9RY1ecTdvD3cP11ae//pbbo4bG/pCUxJovNsXfxE=)
                          6: 3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa (hash: c7A7o/Gw8UO1NElQqJButgFjMm7EWHXY7OaE2mhX6qM=)
                          7: 3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa (hash: Zm28+mTGmRsiJ+nnrq+BHy6pf5akOA83SIj0F3/9EXk=)
                          8: 3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa (hash: dljiuCYXhhg6lLx6CT5BQpZIGReFYNyF6s4GTKceh30=)
                          9: 323830343a376266633a3a2f33322d3332203d3e20323731343638.roa (hash: UNSh3PLdpS0vX/ZzsNECa4NWSe1eJR2NAsea8g3rVU4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:b1:1a:9d:f9:ee:ee:6b:e0:59:cc:2f:39:5b:8f:89:bf:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Dec  4 04:16:07 2025 GMT
            Not After : Dec  5 07:08:07 2025 GMT
        Subject: CN=AFE658CCAE3803E43319EE0DB4A4E64245368D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:68:84:79:13:7b:9a:06:df:32:9f:ac:ce:
                    58:53:6f:1e:e4:d2:6f:52:e7:eb:62:b7:9a:ab:a2:
                    c7:b0:fd:e7:47:45:e2:f4:fa:3a:a6:b1:cf:08:a4:
                    0c:68:99:8a:02:c2:3f:83:af:18:c1:54:61:a9:cc:
                    fb:9b:bd:c0:8b:17:b7:4d:c6:8a:08:98:ef:45:8d:
                    56:ad:63:74:fd:04:9f:d3:d0:b3:42:29:9f:d1:37:
                    7f:58:04:5a:2d:a0:3f:40:7a:96:33:de:2e:f2:f3:
                    a3:96:6e:0e:7a:2e:81:2b:45:ad:42:59:6c:eb:b8:
                    e6:30:c8:d9:a0:96:4b:c0:3c:28:ec:6c:bd:01:b6:
                    f2:a3:4b:7e:23:76:a2:8d:e8:50:32:84:a8:c6:9a:
                    2d:ee:42:de:57:ae:86:c2:b1:ff:5e:6e:2d:81:6a:
                    d9:43:9a:8c:2a:08:5a:29:41:a7:de:39:43:cb:6e:
                    85:35:4d:6a:c7:53:86:5c:e7:ea:ca:d4:81:54:b9:
                    26:c4:d4:78:c1:b7:98:0d:79:15:1f:98:dd:15:ff:
                    4b:47:de:ba:e8:0f:61:19:81:d6:5d:d5:4b:6a:d9:
                    35:be:d6:0a:ab:79:e7:3d:26:fc:0e:c3:3f:55:6e:
                    5e:0f:df:f9:41:ac:15:88:a3:37:bd:1f:73:46:ec:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E6:58:CC:AE:38:03:E4:33:19:EE:0D:B4:A4:E6:42:45:36:8D:0F
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:9a:a6:bb:22:1d:f1:1f:23:26:fb:21:34:b8:82:91:82:
         cc:81:69:bd:29:12:5f:57:04:e9:2e:a8:4d:4a:bb:95:74:c7:
         b2:d6:79:ff:fa:b2:8d:f6:2e:39:ad:1f:af:3c:9b:b6:4e:2d:
         67:9b:5d:c1:6e:a1:83:fa:bf:be:21:20:35:75:e7:1c:12:ab:
         1f:87:ec:c0:03:41:8b:08:ab:29:a0:e9:00:a1:fb:f8:a2:ed:
         37:99:da:47:66:83:1f:e5:70:a5:9b:c0:93:da:0e:65:5b:0a:
         a2:00:21:d1:80:ad:18:39:50:c8:89:e3:88:28:7e:a8:bb:6e:
         50:30:3d:e3:83:eb:87:8a:1c:b8:11:99:f6:d9:6d:9e:41:f2:
         b5:ef:e9:fa:2b:34:2f:61:53:8e:9c:4b:59:33:b2:b5:ef:80:
         fb:a1:80:af:d2:cb:16:00:31:e6:63:92:40:04:05:a3:3c:76:
         ac:bb:6e:20:7c:fe:79:b3:f7:d5:4f:03:f0:34:63:7b:4e:a5:
         8f:e2:af:f3:01:16:b6:e8:d3:57:0d:f1:d8:06:9b:12:a9:f8:
         7a:23:f2:ce:77:d3:cf:00:64:fb:bf:c9:42:02:9e:45:04:94:
         f1:7e:9d:ae:f0:fd:6c:38:0f:cc:6b:22:8a:db:bb:ea:6b:18:
         5e:7d:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:36 2025 by rpki-client