This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
File:                     ED21D10C23C2376429733090A859B9263A7A9ADC.mft (raw, json)
Hash identifier:          LN3aw6U+6kTUE2DpllARRdkKXsIDYo/KxiZT1RD3laI=
Subject key identifier:   C5:9F:99:74:47:CC:BD:74:56:A4:0A:77:93:B8:C2:BD:3E:B7:FA:D5
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       6E47D31E9A3BACC3125C1E4B6BA0256836E6D817
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
Manifest number:          0275
Signing time:             Fri 05 Dec 2025 06:20:48 +0000
Manifest this update:     Fri 05 Dec 2025 06:15:48 +0000
Manifest next update:     Sat 06 Dec 2025 07:51:48 +0000
Files and hashes:         1: ED21D10C23C2376429733090A859B9263A7A9ADC.crl (hash: iChZKZ20a8Kfzm1k8GqsqVD0BQOH5MagcHy8Fz7QRw0=)
                          2: 34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa (hash: qVrhSjcY3K4UfNwcC/dV12GQv2xMkkxByFEq3c9l3as=)
                          3: 323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (hash: 4GsVdnrX70b5P2ipb6ZsdX0i4/IV3OWiKJlfoqHPjdQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:d3:1e:9a:3b:ac:c3:12:5c:1e:4b:6b:a0:25:68:36:e6:d8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Dec  5 06:15:48 2025 GMT
            Not After : Dec  6 07:51:48 2025 GMT
        Subject: CN=C59F997447CCBD7456A40A7793B8C2BD3EB7FAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:a3:c8:e2:90:42:26:91:a1:47:a0:a5:7e:
                    61:45:1a:86:2b:0f:5c:a2:21:5a:f1:c0:8c:4c:bb:
                    ba:8e:27:56:62:0c:1b:3b:98:39:2e:04:b2:a8:3a:
                    e1:c2:39:c3:0e:fb:c9:31:ff:00:a3:48:83:0c:93:
                    dd:d3:06:c3:0e:ed:01:d2:d4:13:d7:c4:45:e6:b8:
                    a3:fb:bc:a3:9b:e0:85:ae:1b:6b:e5:92:16:b4:6b:
                    23:db:aa:ca:61:37:6c:a4:0b:8b:ac:48:11:0d:88:
                    cf:e0:db:83:54:6d:cf:ed:47:3d:91:e2:78:90:cd:
                    34:20:d4:80:d7:86:a1:4c:df:13:71:3c:45:fe:42:
                    df:ce:57:25:09:2c:6a:69:fa:ff:62:7f:a2:4a:fc:
                    01:b5:fa:09:69:96:d5:1c:7f:16:c5:12:fd:a3:d3:
                    3a:48:7e:37:76:a8:86:df:15:d7:f5:91:af:cd:06:
                    be:f4:27:10:b0:ec:e7:e8:b3:28:88:62:45:6b:ba:
                    32:40:58:5d:12:a7:99:c2:8c:a5:da:ac:83:dc:49:
                    36:67:2a:fd:ed:0a:c4:61:f2:09:7f:66:08:ed:89:
                    da:a6:f6:ee:98:ef:93:b4:b0:18:4e:ee:f9:ec:e3:
                    d7:c3:a6:94:ee:f1:ad:96:71:e7:71:47:b3:ee:fa:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:99:74:47:CC:BD:74:56:A4:0A:77:93:B8:C2:BD:3E:B7:FA:D5
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:75:a5:24:0f:07:1e:44:d2:21:2d:c4:61:8d:1b:fd:9c:73:
         74:4c:e6:e4:98:cb:bc:b0:7c:37:f9:15:61:83:a7:81:2d:c7:
         a3:e1:19:05:3e:9d:ec:a1:c4:d5:51:d1:1a:5e:34:4e:d1:f3:
         00:d7:5a:99:ae:74:f3:c3:91:9f:6a:59:48:96:5b:9e:be:0c:
         d3:68:95:54:7d:99:a7:f4:d2:76:87:0a:06:82:9a:e1:17:82:
         93:28:8f:08:75:8d:50:9e:37:46:2b:ba:9f:64:26:15:b8:5b:
         0d:55:6a:72:46:84:2f:04:43:78:42:6b:45:fc:4f:e6:0b:d3:
         e1:73:b6:23:43:06:09:61:59:86:60:fc:cc:ce:23:69:09:77:
         ab:84:d4:77:db:c3:94:92:fb:99:67:fd:1e:36:88:d0:ec:7a:
         53:ad:ec:a6:67:fa:48:9c:4e:f7:77:aa:7d:90:b0:38:35:c9:
         bc:ab:0f:96:f3:4f:70:6c:d1:12:9f:56:65:c3:26:53:1c:58:
         a1:51:d7:70:a7:e4:e9:59:db:0c:ce:91:33:ee:16:b5:18:ad:
         c6:8e:a5:9d:81:e9:4c:0f:50:27:b3:7e:15:ca:db:f7:0c:07:
         d1:9a:87:04:a1:97:7c:39:55:46:ca:cc:5a:7a:eb:71:1c:53:
         d5:44:79:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbkfTHpo7rMMSXB5La6AlaDbm2BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQyMUQxMEMyM0MyMzc2NDI5NzMzMDkwQTg1OUI5MjYz
QTdBOUFEQzAeFw0yNTEyMDUwNjE1NDhaFw0yNTEyMDYwNzUxNDhaMDMxMTAvBgNV
BAMTKEM1OUY5OTc0NDdDQ0JENzQ1NkE0MEE3NzkzQjhDMkJEM0VCN0ZBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzqPI4pBCJpGhR6ClfmFFGoYr
D1yiIVrxwIxMu7qOJ1ZiDBs7mDkuBLKoOuHCOcMO+8kx/wCjSIMMk93TBsMO7QHS
1BPXxEXmuKP7vKOb4IWuG2vlkha0ayPbqsphN2ykC4usSBENiM/g24NUbc/tRz2R
4niQzTQg1IDXhqFM3xNxPEX+Qt/OVyUJLGpp+v9if6JK/AG1+glpltUcfxbFEv2j
0zpIfjd2qIbfFdf1ka/NBr70JxCw7OfosyiIYkVrujJAWF0Sp5nCjKXarIPcSTZn
Kv3tCsRh8gl/Zgjtidqm9u6Y75O0sBhO7vns49fDppTu8a2WcedxR7Pu+nwtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxZ+ZdEfMvXRWpAp3k7jCvT63+tUwHwYDVR0j
BBgwFoAU7SHRDCPCN2QpczCQqFm5Jjp6mtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJpZnoyUHJ6UnVENEdmVW1Vekp3MW1vaFpvd1dMY3VLcGFvb2k4UXhr
VjIvMC9FRDIxRDEwQzIzQzIzNzY0Mjk3MzMwOTBBODU5QjkyNjNBN0E5QURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEMjFEMTBDMjNDMjM3NjQy
OTczMzA5MEE4NTlCOTI2M0E3QTlBREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEJpZnoyUHJ6UnVENEdmVW1Vekp3MW1vaFpvd1dMY3VLcGFvb2k4UXhrVjIvMC9F
RDIxRDEwQzIzQzIzNzY0Mjk3MzMwOTBBODU5QjkyNjNBN0E5QURDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcXWlJA8HHkTSIS3EYY0b/ZxzdEzm5JjLvLB8N/kVYYOngS3Ho+EZBT6d7KHE
1VHRGl40TtHzANdama5088ORn2pZSJZbnr4M02iVVH2Zp/TSdocKBoKa4ReCkyiP
CHWNUJ43Riu6n2QmFbhbDVVqckaELwRDeEJrRfxP5gvT4XO2I0MGCWFZhmD8zM4j
aQl3q4TUd9vDlJL7mWf9HjaI0Ox6U63spmf6SJxO93eqfZCwODXJvKsPlvNPcGzR
Ep9WZcMmUxxYoVHXcKfk6VnbDM6RM+4WtRitxo6lnYHpTA9QJ7N+Fcrb9wwH0ZqH
BKGXfDlVRsrMWnrrcRxT1UR5DA==
-----END CERTIFICATE-----