This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft File: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json) Hash identifier: Yg9koshWlH5hr8e30wRutO7+/Y2fdnI6dV9ZBUdAmQo= Subject key identifier: D2:29:DD:E5:E1:92:C8:04:3A:F9:14:BD:51:61:AF:C0:7E:7D:B0:D6 Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07 Certificate issuer: /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307 Certificate serial: 4AE1B0224D59C8AF6D12945DA63B0951199D91B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer Subject info access: rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft Manifest number: 032A Signing time: Fri 05 Dec 2025 22:25:52 +0000 Manifest this update: Fri 05 Dec 2025 22:20:52 +0000 Manifest next update: Sun 07 Dec 2025 01:16:52 +0000 Files and hashes: 1: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: q2vqiIMjq1wnH/CP3Dr+0H+LjsTPCNsiO+gCtC4Xm8c=) 2: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: dv3QhcfGmiv5Vc3c4EjQIIZYAyNY0UMg4oALIsJplwI=) 3: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: fG0ozi4qCSZyN0JLxl2aBY3yoFCYSNFNgjeW386VsZ8=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:b0:22:4d:59:c8:af:6d:12:94:5d:a6:3b:09:51:19:9d:91:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307 Validity Not Before: Dec 5 22:20:52 2025 GMT Not After : Dec 7 01:16:52 2025 GMT Subject: CN=D229DDE5E192C8043AF914BD5161AFC07E7DB0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:5c:fb:36:67:ad:bc:05:97:3f:c9:d7:f0: c1:43:85:f7:e6:84:83:e6:d4:40:64:66:07:2c:9b: 2a:96:6c:cf:91:8a:62:32:ae:d0:53:28:55:a6:bb: 30:02:51:68:84:84:a8:e6:cf:e2:6d:79:1a:9c:0d: 5b:28:26:00:c7:ea:3d:e7:72:4f:70:e4:ad:ec:4a: 47:b1:5f:9d:e9:ba:1f:33:a3:0f:fb:7c:16:8e:ee: 84:1d:40:61:1e:52:54:66:03:bb:bf:28:f3:4b:e5: 79:fe:7b:fa:d8:9c:1f:62:18:26:f2:43:d0:58:00: df:e8:e7:d6:9b:6b:0d:82:7f:ed:58:9e:92:8b:ad: 42:11:fe:11:4e:12:c1:26:77:d7:07:c2:06:49:24: 6c:04:8f:d1:44:da:2c:90:0e:36:c2:89:aa:e6:32: 42:e1:43:62:76:54:2e:e8:52:83:37:28:ec:24:31: b9:75:a5:44:cd:09:0d:97:6e:f7:93:8a:d0:85:09: 77:c8:a7:8e:43:c5:22:97:e5:f7:43:c6:a7:77:aa: a4:17:51:f2:1c:87:3a:ea:7e:7b:64:0b:74:8f:fb: 9e:7e:b2:c9:e4:06:72:a2:d0:53:95:a0:d4:cf:02: d3:38:2a:41:db:7b:de:4e:43:c4:e8:cc:b1:35:4d: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:DD:E5:E1:92:C8:04:3A:F9:14:BD:51:61:AF:C0:7E:7D:B0:D6 X509v3 Authority Key Identifier: keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:1e:e6:6a:f1:cd:7b:14:65:ca:bc:2f:ed:23:91:97:3d:44: 57:2a:6e:29:c3:fc:11:b1:cd:a7:e3:89:dd:7b:97:23:74:87: 16:96:dd:fb:2a:52:9c:b4:02:d1:57:0a:71:7f:6b:3a:2a:95: 66:07:68:be:42:52:fb:7a:8e:1a:23:72:b5:6f:9a:1d:84:b1: 3b:a9:e1:90:1d:4c:25:ef:cd:a0:99:74:d8:6c:e3:66:8b:8d: a1:1f:0a:b7:4c:52:2b:44:f0:b0:93:ed:e6:f6:3e:0d:36:32: e3:2c:6c:14:65:5b:ab:e3:ae:0a:53:12:c1:e0:43:0e:37:c7: 55:55:73:4f:13:d8:06:a6:05:be:f6:2d:e4:47:60:dd:84:f1: 1a:46:c1:94:19:a1:d8:ad:aa:fb:e3:9a:2d:88:ab:81:c0:a6: e4:7d:32:34:43:a0:c7:30:bd:04:b0:68:70:f1:1e:56:1c:9f: b5:1c:36:64:ad:c9:a2:94:fe:3f:18:0a:58:81:ff:d3:24:6a: f5:d5:02:23:5f:94:18:89:93:5e:49:4d:6b:85:69:9b:61:17: be:e3:f4:dd:62:64:df:04:72:14:f3:2d:40:e3:6a:27:5e:9e: 53:ff:66:78:d1:a3:f2:ad:f6:72:5c:c0:6e:e1:f2:7d:00:89: e3:d6:e9:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSuGwIk1ZyK9tEpRdpjsJURmdkbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMkNGN0M1NjM1Q0Q5MTJCQkQ3QThERUQxODRDQzM5 OENCRTMwNzAeFw0yNTEyMDUyMjIwNTJaFw0yNTEyMDcwMTE2NTJaMDMxMTAvBgNV BAMTKEQyMjlEREU1RTE5MkM4MDQzQUY5MTRCRDUxNjFBRkMwN0U3REIwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFVz7NmetvAWXP8nX8MFDhffm hIPm1EBkZgcsmyqWbM+RimIyrtBTKFWmuzACUWiEhKjmz+JteRqcDVsoJgDH6j3n ck9w5K3sSkexX53puh8zow/7fBaO7oQdQGEeUlRmA7u/KPNL5Xn+e/rYnB9iGCby Q9BYAN/o59abaw2Cf+1YnpKLrUIR/hFOEsEmd9cHwgZJJGwEj9FE2iyQDjbCiarm MkLhQ2J2VC7oUoM3KOwkMbl1pUTNCQ2XbveTitCFCXfIp45DxSKX5fdDxqd3qqQX UfIchzrqfntkC3SP+55+ssnkBnKi0FOVoNTPAtM4KkHbe95OQ8TozLE1TfMvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0ind5eGSyAQ6+RS9UWGvwH59sNYwHwYDVR0j BBgwFoAUlbLPfFY1zZErvXqN7RhMw5jL4wcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjhuRllqa3VpYUdoY3AzaDZZMUxGUXJmZVNndFFXdDhHc2RKWEV5Szc0 S3UvMS85NUIyQ0Y3QzU2MzVDRDkxMkJCRDdBOERFRDE4NENDMzk4Q0JFMzA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1QjJDRjdDNTYzNUNEOTEy QkJEN0E4REVEMTg0Q0MzOThDQkUzMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjhuRllqa3VpYUdoY3AzaDZZMUxGUXJmZVNndFFXdDhHc2RKWEV5Szc0S3UvMS85 NUIyQ0Y3QzU2MzVDRDkxMkJCRDdBOERFRDE4NENDMzk4Q0JFMzA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuh7mavHNexRlyrwv7SORlz1EVypuKcP8EbHNp+OJ3XuXI3SHFpbd+ypSnLQC 0VcKcX9rOiqVZgdovkJS+3qOGiNytW+aHYSxO6nhkB1MJe/NoJl02GzjZouNoR8K t0xSK0TwsJPt5vY+DTYy4yxsFGVbq+OuClMSweBDDjfHVVVzTxPYBqYFvvYt5Edg 3YTxGkbBlBmh2K2q++OaLYirgcCm5H0yNEOgxzC9BLBocPEeVhyftRw2ZK3JopT+ PxgKWIH/0yRq9dUCI1+UGImTXklNa4Vpm2EXvuP03WJk3wRyFPMtQONqJ16eU/9m eNGj8q32clzAbuHyfQCJ49bpoA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:33 2025 by rpki-client