This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
File:                     2FF3BD981631E49037509A952007559286688690.mft (raw, json)
Hash identifier:          LCFBdoVN4eclbNoiNnQ/F5DPKB3slCw7/vdnsDrhfqo=
Subject key identifier:   B4:4D:1E:B3:4E:FF:DB:CC:3C:AA:59:74:D5:0B:8D:15:00:39:2E:3A
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Certificate issuer:       /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial:       344F19FB22ADD4E6C98C28C40E2588EEC70ED394
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
Manifest number:          FF
Signing time:             Fri 05 Dec 2025 03:00:04 +0000
Manifest this update:     Fri 05 Dec 2025 02:55:04 +0000
Manifest next update:     Sat 06 Dec 2025 06:50:04 +0000
Files and hashes:         1: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: Fe3slJe0kAz3P+lnt9VNZRIbJY9aNCulq95Hm/heJSI=)
                          2: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: FfHFO6q7SrPv5YkaZCJ5uZmzMi3udScNHZXDi2iReDA=)
                          3: 2FF3BD981631E49037509A952007559286688690.crl (hash: lsrGrqr9GutYnRjLqjs+gHZXITpx3XwA4BjeqYGyUV0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:19:fb:22:ad:d4:e6:c9:8c:28:c4:0e:25:88:ee:c7:0e:d3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF3BD981631E49037509A952007559286688690
        Validity
            Not Before: Dec  5 02:55:04 2025 GMT
            Not After : Dec  6 06:50:04 2025 GMT
        Subject: CN=B44D1EB34EFFDBCC3CAA5974D50B8D1500392E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:3e:2e:d2:0a:4e:55:e2:62:fa:14:6b:8f:
                    5f:ac:8f:d9:82:b7:d4:54:e9:56:bb:47:b1:8d:93:
                    09:5a:d3:1b:50:55:5a:e9:74:f6:db:22:21:de:fd:
                    38:60:ae:a1:4f:67:0a:47:02:ff:01:48:b2:12:23:
                    65:b3:26:99:9a:e0:d1:05:bc:f5:03:23:97:dd:83:
                    85:42:ce:87:4f:81:4f:dc:5f:c4:e5:e7:0a:1a:c2:
                    27:d9:0a:44:dc:ee:ff:e6:16:15:a0:48:3f:1a:6f:
                    45:92:f5:d8:39:e2:97:e9:7d:1c:d3:93:06:fb:36:
                    82:18:e5:26:df:cc:79:92:d1:5d:e9:5c:de:7d:89:
                    d3:7a:c9:9d:d2:84:97:d8:e7:c6:60:48:59:bd:40:
                    07:62:87:12:c8:15:9d:fd:68:6b:bb:75:30:95:1a:
                    c1:b6:57:70:25:d3:02:88:21:ad:1f:fc:25:f0:54:
                    6d:92:45:a8:b9:d4:51:80:98:a8:54:77:50:c0:01:
                    6f:26:1c:c3:49:09:b3:bd:f9:99:b0:66:95:dc:d3:
                    11:9e:4d:2a:0d:36:82:6a:5a:9e:03:cd:00:45:b7:
                    b0:a6:f5:9d:8d:96:fa:7f:0e:85:be:be:a7:46:ac:
                    78:76:c2:f5:3b:66:f1:c0:bc:24:4c:85:9c:1e:ef:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:1E:B3:4E:FF:DB:CC:3C:AA:59:74:D5:0B:8D:15:00:39:2E:3A
            X509v3 Authority Key Identifier:
                keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:a2:6a:12:46:3a:cf:19:0a:d3:9d:54:3e:2c:4f:67:a3:
         48:1c:4c:8e:cc:3d:8d:b6:9f:9f:52:4b:8c:47:52:c8:92:74:
         84:67:23:0a:5c:21:34:59:95:3f:7b:3e:44:36:4d:1f:16:9f:
         fe:70:e8:cb:34:07:a5:e0:49:94:94:dd:70:54:4b:78:4b:f7:
         a6:23:09:69:49:70:ff:2c:c6:a8:cf:42:e7:cf:9e:b9:b1:73:
         fe:44:94:cf:e7:ca:16:57:6e:b2:8f:2d:a8:17:09:b1:38:52:
         b4:f1:1a:d6:53:dd:0c:c9:59:3d:94:91:9b:7e:1b:f4:44:41:
         e1:58:68:6a:3d:18:23:d6:87:3e:6d:39:2a:ff:b2:65:a6:0c:
         24:3f:02:29:01:ab:35:1d:e5:b9:ae:f4:12:f8:92:3b:82:46:
         91:cc:df:11:53:3a:da:69:a9:67:bc:4f:fb:1a:82:55:53:db:
         39:ab:63:83:9d:70:78:09:af:1b:22:5f:07:0e:6a:fd:63:1e:
         a2:22:5c:2d:f7:74:84:c6:de:f6:63:9b:e5:8a:04:44:fa:aa:
         d9:fd:bc:c6:fd:94:84:44:9c:80:c1:e2:39:63:40:25:89:1f:
         ca:c1:cf:f3:ba:6c:1b:bc:e4:4b:08:c2:0e:1c:c0:85:bb:af:
         9a:72:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----