This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
File:                     99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft (raw, json)
Hash identifier:          8Pvgnw8Zf8cnOlDzLXvh5B7FT/ZBrqOT5eqanm6kVhU=
Subject key identifier:   C2:DA:2F:48:15:BA:03:36:B1:2E:FA:0B:55:1D:7B:E2:72:3D:74:F4
Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
Certificate issuer:       /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Certificate serial:       66C7FE6820025B23FC3C6799790F91A29D59B4DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
Manifest number:          24
Signing time:             Sat 20 Dec 2025 20:35:41 +0000
Manifest this update:     Sat 20 Dec 2025 20:30:41 +0000
Manifest next update:     Sun 21 Dec 2025 23:40:41 +0000
Files and hashes:         1: 99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl (hash: uCCM5Ek92TMYtlL1e4xBCVrvu9XRn7a5vOAo671gbdE=)
                          2: 3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (hash: w5KF48LzSxj1SU9RmOZxJF6shrtOckACqZh0qTPx15s=)
                          3: 323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (hash: KJyfgod/ZleOhEaweWjlo8twk6C7fqY8aR2Fia737G0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c7:fe:68:20:02:5b:23:fc:3c:67:99:79:0f:91:a2:9d:59:b4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
        Validity
            Not Before: Dec 20 20:30:41 2025 GMT
            Not After : Dec 21 23:40:41 2025 GMT
        Subject: CN=C2DA2F4815BA0336B12EFA0B551D7BE2723D74F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:11:83:8c:a8:88:9c:2f:27:94:24:e5:35:
                    ab:83:ee:06:47:3e:23:7c:9d:4a:95:5a:c8:46:13:
                    b5:f3:4c:76:88:ed:a6:7d:46:4e:5c:47:ca:27:0b:
                    a0:74:57:0c:b6:6c:24:d2:6c:d3:71:32:3f:aa:28:
                    8a:f5:3f:ff:2f:16:4b:dd:63:e8:62:1e:11:e8:d4:
                    44:92:8e:6c:d8:7b:2f:d1:4b:da:de:0e:c6:f1:77:
                    bf:bf:3a:77:0f:72:ce:0a:9b:75:3a:58:a9:5c:7b:
                    98:42:03:fd:5e:09:2e:9f:f6:f7:06:46:5f:4d:6c:
                    fa:68:61:5e:6a:91:ee:0c:13:a6:79:98:23:f7:00:
                    18:8e:e6:f0:08:91:8b:48:96:8b:b5:4e:3d:2d:d8:
                    31:5d:10:71:d5:b0:38:35:68:d7:21:2e:6b:5e:75:
                    58:2d:25:5f:62:f4:51:26:38:99:7d:02:7b:3b:82:
                    8b:68:26:cb:1e:67:f2:0c:1e:d1:a7:c9:7d:f4:86:
                    4e:54:fa:3d:34:8e:66:c2:48:2c:b9:7f:f8:0b:f3:
                    de:10:79:92:8b:08:9e:a0:90:a3:6f:3f:98:49:0c:
                    7f:58:a2:a1:a3:48:45:13:ac:35:83:da:e9:5a:76:
                    39:6f:ad:f7:ba:b0:9e:f3:4f:75:fb:07:f5:2a:83:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:2F:48:15:BA:03:36:B1:2E:FA:0B:55:1D:7B:E2:72:3D:74:F4
            X509v3 Authority Key Identifier:
                keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:dd:57:a3:a0:06:00:df:1a:cc:c0:58:45:89:37:cc:50:
         b3:a3:5c:d7:d3:75:65:d7:68:53:03:9a:a3:b4:93:ca:81:85:
         56:39:99:ec:ed:7d:71:5d:77:e8:19:07:44:a1:6c:5e:09:a9:
         25:30:23:2d:37:7f:f8:63:2e:4f:38:ff:3a:4d:73:34:88:fc:
         6e:e0:e4:cc:c4:fa:e5:11:ea:c4:8d:97:6b:78:69:3a:c8:dd:
         74:d6:45:32:54:92:e0:e5:c0:d2:d8:80:70:07:4e:8d:ee:a9:
         bc:be:9b:d2:90:67:1d:fc:e9:2d:a2:02:8a:fd:31:31:e8:20:
         73:e7:9a:48:b0:3e:2d:68:c9:31:9b:d4:bd:a9:a5:1e:81:5c:
         4a:98:6a:84:ee:a1:9f:86:63:30:a5:cb:f5:b2:1a:40:6c:e0:
         87:e1:33:19:1d:76:43:00:6e:ab:af:c7:bd:25:80:e4:59:7f:
         6c:55:c0:71:9d:8d:cc:45:44:5b:b1:d1:49:a3:50:25:12:8b:
         9c:ee:b5:90:0d:ed:41:b0:44:49:77:bd:29:62:aa:42:52:81:
         20:02:eb:90:0c:c9:c1:57:78:df:4d:68:82:4f:e0:cf:74:86:
         2c:d1:66:32:88:b9:5e:7d:5b:86:78:04:d7:a0:1d:18:d5:bb:
         14:bf:dd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:09:58 2025 by rpki-client