This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft
File:                     5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft (raw, json)
Hash identifier:          3wtyTaYN9+b/lZO9iATZ1hPS1Q8v/bjAD5Ha+hRjKbc=
Subject key identifier:   7B:69:58:5A:60:BC:D7:86:26:A2:B1:16:53:65:15:35:4A:F8:96:8E
Authority key identifier: 5C:6F:6B:A2:D8:17:6C:89:D8:37:6B:51:DB:34:FF:B0:FF:08:DD:58
Certificate issuer:       /CN=5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58
Certificate serial:       6131FE7D14CD1724369F890BAF416DF52B7AB0D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft
Manifest number:          05
Signing time:             Sun 01 Feb 2026 00:30:09 +0000
Manifest this update:     Sun 01 Feb 2026 00:25:09 +0000
Manifest next update:     Mon 02 Feb 2026 01:33:09 +0000
Files and hashes:         1: AS274772.asa (hash: Qnri7lMMrLNqBSqzY1vnjWxAyQDBN65AnfXzE5Szz5A=)
                          2: 5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.crl (hash: Gm41Vf16kNdpojYrZgOpECRnTcfwyw1aK7QvjALn708=)
                          3: 323830343a393335633a3a2f33322d313238203d3e20323734373732.roa (hash: K24uUqtZPMChhSk5npgJRBepqL9auirZnsIHoNiUSGM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:fe:7d:14:cd:17:24:36:9f:89:0b:af:41:6d:f5:2b:7a:b0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58
        Validity
            Not Before: Feb  1 00:25:09 2026 GMT
            Not After : Feb  2 01:33:09 2026 GMT
        Subject: CN=7B69585A60BCD78626A2B116536515354AF8968E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:4f:0a:52:31:b8:65:0c:3b:7f:c4:2e:81:
                    db:a9:96:19:00:08:65:aa:44:60:a0:44:ad:c7:11:
                    e8:d8:2f:55:85:eb:1c:07:84:de:19:0c:71:25:b8:
                    79:95:65:78:eb:4f:e6:ca:3a:18:49:08:1a:11:66:
                    fc:ba:fb:47:16:98:3d:5b:a3:e2:0b:95:3f:40:a3:
                    34:25:36:b1:2f:72:c8:26:a6:57:97:4c:83:a1:05:
                    83:76:c4:8d:b0:6a:81:8d:ca:b6:ec:b2:d0:c9:cb:
                    dc:57:a3:c1:cf:ba:dc:d6:74:73:3c:bf:1d:1a:63:
                    0e:ad:d5:c0:d3:e9:eb:24:1c:6c:1f:4b:8b:11:9b:
                    a2:60:cc:33:89:25:9e:6d:5f:c8:cf:91:c5:23:56:
                    66:7c:58:00:75:db:13:68:69:a3:8e:59:1c:7c:c0:
                    cd:00:9f:14:38:22:e8:69:88:1a:72:90:5d:3b:a7:
                    03:b3:8b:b3:ac:d3:6b:0a:68:8e:86:16:d4:35:f6:
                    43:a9:5d:72:08:50:47:ca:ed:4f:55:62:1b:32:cc:
                    8f:07:09:22:3c:c3:f9:b6:55:15:36:29:5b:8d:cb:
                    75:c0:3e:d1:ad:37:cd:cf:03:bb:2c:13:ea:81:89:
                    0f:c4:92:89:2f:cd:a0:c5:4a:6d:fd:72:d1:d9:26:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:58:5A:60:BC:D7:86:26:A2:B1:16:53:65:15:35:4A:F8:96:8E
            X509v3 Authority Key Identifier:
                keyid:5C:6F:6B:A2:D8:17:6C:89:D8:37:6B:51:DB:34:FF:B0:FF:08:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/5C6F6BA2D8176C89D8376B51DB34FFB0FF08DD58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:5a:9a:6e:11:bd:e7:25:0f:4b:0e:c8:df:43:19:07:de:
         7f:d2:e4:9c:19:50:2c:bb:f0:ab:d6:79:94:7b:1f:d8:53:3e:
         17:63:98:98:b9:3b:07:93:de:e5:dd:20:a4:9e:19:eb:3e:0d:
         2e:2b:71:54:4a:1c:6a:c2:c9:ff:1e:c1:22:63:00:38:03:df:
         a6:35:fd:a2:b1:50:34:c8:94:68:9c:05:dd:24:59:71:4e:7e:
         cf:ac:15:3c:73:66:1c:08:20:b9:b6:8c:74:70:fd:ad:e3:4c:
         b1:a0:66:ee:64:db:f7:d0:36:dc:3d:67:2b:f6:5f:54:8e:57:
         56:e3:1e:03:4d:0b:ab:e8:fd:ba:ad:f4:27:e9:4f:b6:a4:64:
         29:6d:22:34:d6:5f:f3:90:e8:81:20:f8:23:a3:fc:c0:8d:5f:
         04:89:61:16:2b:79:0c:de:d2:12:83:5c:1f:c1:25:bb:08:8d:
         38:bc:22:32:d5:a4:0f:44:d6:a3:72:00:0a:5e:6d:ed:ea:6e:
         24:22:5c:07:9c:59:ff:a1:24:76:72:db:2a:69:84:65:4c:0a:
         51:21:6c:ee:95:6b:1d:6b:50:ab:37:62:54:d3:83:f0:9f:c8:
         6f:b1:68:ea:c0:69:c4:96:20:30:a2:64:c7:77:cf:c1:ab:16:
         e5:a4:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:41:15 2026 by rpki-client