This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
File:                     D55010182054388E254F328BAFF30FFD368EBB1A.mft (raw, json)
Hash identifier:          xHr04FRnuC/YVi/JOl0l5uwmwLL968fIiz30kBiw5TM=
Subject key identifier:   2A:60:50:7D:F3:57:89:A6:F5:E8:A6:1A:08:D6:51:7C:43:E2:07:77
Authority key identifier: D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A
Certificate issuer:       /CN=D55010182054388E254F328BAFF30FFD368EBB1A
Certificate serial:       64C0543B68C4A42571524D728C77FD9F1C46B8C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
Manifest number:          010A
Signing time:             Mon 01 Dec 2025 14:10:03 +0000
Manifest this update:     Mon 01 Dec 2025 14:05:03 +0000
Manifest next update:     Tue 02 Dec 2025 16:01:03 +0000
Files and hashes:         1: D55010182054388E254F328BAFF30FFD368EBB1A.crl (hash: qxZUpcFQ50uvOKHhYNUet8nf9qCZ9coqfTNRzDxjfl8=)
                          2: 3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (hash: fCcAikJU6rG8ZMGak3QUnnBE+DswiYP7lPoqAnEVOqQ=)
                          3: 3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (hash: wLlRE/bBDRjOTpIbcKh7/kdsEFb30glXdL0nhGrH1m4=)
                          4: 3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (hash: gkr3RmwHeCjlKAVaf2wQNNCFVMup6CzbpUTAOiiWRvs=)
                          5: 323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (hash: eUUAV/o89PUwXSfW88RtuJOloh0MdxVpC/960LuPnaE=)
                          6: 3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (hash: b9oXD4hcE42R6/YMwLvMoYaXYemQVR2uCQRjOrH/sSU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c0:54:3b:68:c4:a4:25:71:52:4d:72:8c:77:fd:9f:1c:46:b8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55010182054388E254F328BAFF30FFD368EBB1A
        Validity
            Not Before: Dec  1 14:05:03 2025 GMT
            Not After : Dec  2 16:01:03 2025 GMT
        Subject: CN=2A60507DF35789A6F5E8A61A08D6517C43E20777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:bb:1e:c1:53:2a:87:33:e3:61:66:88:fc:
                    a5:06:b5:b1:00:ee:5f:c3:ed:74:31:a4:01:68:34:
                    09:8c:37:62:8a:1a:47:0c:42:41:b0:fd:88:9b:bf:
                    bf:92:2d:18:e9:4d:13:a4:10:5a:97:ac:2d:19:6f:
                    5b:6f:d7:cd:91:49:a3:0e:cf:94:ed:7e:da:72:74:
                    a2:b2:dd:1f:22:6c:dc:e3:90:cf:a7:2d:5c:a2:d1:
                    d4:26:52:72:96:81:41:8b:6b:5d:35:b8:f2:f7:65:
                    aa:43:7f:ac:8c:d5:14:7e:9d:f3:cf:40:a1:1c:32:
                    7e:49:5d:1d:eb:18:21:b1:5b:ca:90:11:d7:15:7a:
                    a5:f0:9b:fa:70:f3:3f:02:ad:45:e9:9a:04:2d:91:
                    c2:86:53:95:6d:0e:a8:92:fe:85:57:8d:6c:e0:15:
                    2b:88:d7:29:26:29:02:90:bc:ae:63:43:11:06:46:
                    e8:c1:3f:f1:e2:18:27:d0:7a:a3:a5:f1:3d:24:17:
                    ae:7a:48:ed:75:87:1c:73:da:f4:34:9d:76:e8:29:
                    4b:34:0e:89:d6:e6:b0:4d:e0:6c:1a:54:66:27:a2:
                    0c:fd:6f:31:dc:c4:da:0d:ea:f4:20:34:92:26:f9:
                    18:f2:15:08:6b:92:73:49:9f:62:5d:fb:8b:71:85:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:50:7D:F3:57:89:A6:F5:E8:A6:1A:08:D6:51:7C:43:E2:07:77
            X509v3 Authority Key Identifier:
                keyid:D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:43:33:1c:21:7a:db:16:38:1d:27:51:27:4d:9a:ee:d5:e4:
         05:24:02:7b:cf:a7:b3:c4:d0:71:79:65:5c:41:65:e9:08:4a:
         a1:8b:55:13:e4:2c:03:05:98:6d:44:79:3d:3e:7f:87:11:8e:
         6d:b6:8a:88:8c:23:bf:28:b5:f7:f5:54:d0:8e:61:b2:46:46:
         09:2a:f4:08:a4:61:ad:9d:9c:85:47:65:f7:17:d7:6c:a6:8d:
         79:5d:c4:37:48:a7:b8:41:fc:61:ca:b6:18:86:9b:ad:90:93:
         99:70:0b:39:0e:b4:57:b3:06:81:9e:71:d0:2b:34:ea:28:4f:
         74:81:a9:69:0d:d6:d8:3e:77:a6:98:46:05:89:ab:18:84:07:
         62:01:46:6e:0d:a9:da:b5:6e:4b:b3:56:17:04:52:8a:6a:12:
         3c:f6:73:a5:bb:2e:7a:5d:7c:72:45:a1:5a:60:19:e2:99:b7:
         98:dc:c8:5d:2e:22:bf:53:f8:c4:f1:45:eb:04:c7:f8:b2:d9:
         21:c1:f3:14:42:f6:f6:d0:99:d2:86:3d:66:01:cc:6a:7a:9a:
         9c:14:c7:ea:4a:ed:92:0e:b0:9f:00:4e:26:27:59:6e:50:67:
         a0:ea:56:9d:db:3d:25:af:7e:05:20:0f:81:5f:5f:c5:09:44:
         6d:36:af:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZMBUO2jEpCVxUk1yjHf9nxxGuMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1MDEwMTgyMDU0Mzg4RTI1NEYzMjhCQUZGMzBGRkQz
NjhFQkIxQTAeFw0yNTEyMDExNDA1MDNaFw0yNTEyMDIxNjAxMDNaMDMxMTAvBgNV
BAMTKDJBNjA1MDdERjM1Nzg5QTZGNUU4QTYxQTA4RDY1MTdDNDNFMjA3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGrsewVMqhzPjYWaI/KUGtbEA
7l/D7XQxpAFoNAmMN2KKGkcMQkGw/Yibv7+SLRjpTROkEFqXrC0Zb1tv182RSaMO
z5TtftpydKKy3R8ibNzjkM+nLVyi0dQmUnKWgUGLa101uPL3ZapDf6yM1RR+nfPP
QKEcMn5JXR3rGCGxW8qQEdcVeqXwm/pw8z8CrUXpmgQtkcKGU5VtDqiS/oVXjWzg
FSuI1ykmKQKQvK5jQxEGRujBP/HiGCfQeqOl8T0kF656SO11hxxz2vQ0nXboKUs0
DonW5rBN4GwaVGYnogz9bzHcxNoN6vQgNJIm+RjyFQhrknNJn2Jd+4txhRXbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKmBQffNXiab16KYaCNZRfEPiB3cwHwYDVR0j
BBgwFoAU1VAQGCBUOI4lTzKLr/MP/TaOuxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZC
Rm0vMC9ENTUwMTAxODIwNTQzODhFMjU0RjMyOEJBRkYzMEZGRDM2OEVCQjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NTAxMDE4MjA1NDM4OEUy
NTRGMzI4QkFGRjMwRkZEMzY4RUJCMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZCRm0vMC9E
NTUwMTAxODIwNTQzODhFMjU0RjMyOEJBRkYzMEZGRDM2OEVCQjFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkEMzHCF62xY4HSdRJ02a7tXkBSQCe8+ns8TQcXllXEFl6QhKoYtVE+QsAwWY
bUR5PT5/hxGObbaKiIwjvyi19/VU0I5hskZGCSr0CKRhrZ2chUdl9xfXbKaNeV3E
N0inuEH8Ycq2GIabrZCTmXALOQ60V7MGgZ5x0Cs06ihPdIGpaQ3W2D53pphGBYmr
GIQHYgFGbg2p2rVuS7NWFwRSimoSPPZzpbsuel18ckWhWmAZ4pm3mNzIXS4iv1P4
xPFF6wTH+LLZIcHzFEL29tCZ0oY9ZgHManqanBTH6krtkg6wnwBOJidZblBnoOpW
nds9Ja9+BSAPgV9fxQlEbTavYQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:01:28 2025 by rpki-client