This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File:                     1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier:          dl9M87c7oe3apJLdjEaVJtRNwzKWH+ieZcHWS3TjBeo=
Subject key identifier:   83:78:51:BF:54:78:20:EB:A3:22:0A:16:1C:A6:97:39:FC:7E:79:9E
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer:       /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial:       2D2D279F7D0CF23E63F426D0D497F072EEB6BF5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number:          A9
Signing time:             Fri 19 Dec 2025 23:49:57 +0000
Manifest this update:     Fri 19 Dec 2025 23:44:57 +0000
Manifest next update:     Sun 21 Dec 2025 01:29:57 +0000
Files and hashes:         1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: 19HSZPiEKLJrSOnIbmgwa/AjfI+Ek1lMJcGBsxP88wQ=)
                          2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2d:27:9f:7d:0c:f2:3e:63:f4:26:d0:d4:97:f0:72:ee:b6:bf:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
        Validity
            Not Before: Dec 19 23:44:57 2025 GMT
            Not After : Dec 21 01:29:57 2025 GMT
        Subject: CN=837851BF547820EBA3220A161CA69739FC7E799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:90:f5:6d:5b:15:b4:33:22:3e:b3:b6:7d:
                    e3:1b:b7:7e:2a:a8:8a:fd:f1:ad:a3:0d:cb:4b:e8:
                    af:54:40:08:3d:27:87:ac:41:4d:9e:64:0e:2f:d3:
                    df:ff:00:c8:85:cb:f4:d5:79:0b:9f:ba:e9:aa:a5:
                    a1:f9:85:f9:e7:a5:b2:a0:15:88:fa:b8:d5:69:6c:
                    63:d8:47:b4:3f:98:eb:58:b4:2d:7d:5c:e3:c2:21:
                    56:32:e4:ee:80:43:8a:ca:a7:ad:21:e2:61:6d:46:
                    dc:40:65:39:03:81:ef:3b:c6:54:64:5e:fa:b3:2a:
                    a6:83:61:dc:58:24:1e:29:92:b7:28:76:50:65:df:
                    3f:a9:94:c0:e3:d8:61:60:2c:0d:e6:a1:18:16:b0:
                    1f:51:66:4b:5f:30:e0:65:7b:41:59:33:ca:c6:8d:
                    eb:19:bb:98:89:95:93:51:59:57:63:bc:5a:4e:9c:
                    fd:c7:88:2d:c2:d2:b5:2a:d0:98:28:44:10:cb:31:
                    99:38:a1:5c:f6:c7:c3:ff:87:98:e7:c7:99:98:3c:
                    ef:9c:26:60:ce:97:8e:2b:02:25:88:fe:e3:d0:9b:
                    29:ad:78:91:18:3f:e7:1c:1f:ca:c6:14:09:8a:52:
                    6f:ca:4c:74:15:bd:dd:de:e7:1f:8c:25:35:eb:95:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:51:BF:54:78:20:EB:A3:22:0A:16:1C:A6:97:39:FC:7E:79:9E
            X509v3 Authority Key Identifier:
                keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c8:20:d3:82:d4:41:0d:cc:02:aa:a7:55:c6:9a:33:df:b0:
         ac:7c:ea:06:be:12:51:32:66:84:ba:c9:56:27:be:63:ce:b9:
         3a:a8:54:eb:b1:fb:16:db:6b:98:78:a5:55:4f:1e:df:0f:45:
         a9:8a:5b:ab:47:f9:65:16:71:42:f8:81:d7:54:10:ea:a1:d6:
         ef:ee:60:79:f3:61:0b:85:87:62:96:cb:77:ee:6f:f2:de:e6:
         59:e5:0a:c0:50:90:0b:d8:f8:7b:b7:ab:41:ad:41:de:e6:4b:
         9f:9b:bf:94:24:14:69:e4:2e:dc:97:21:86:e3:d4:e6:48:55:
         bd:ad:2e:64:ee:d0:fa:a6:ce:51:0d:08:e2:e2:18:3b:73:ee:
         5f:b9:81:b3:1d:f8:27:0b:aa:0e:4b:ad:b2:3a:7a:f1:46:11:
         03:a8:5f:2b:d3:4c:b6:b2:62:78:60:4b:73:e9:bb:a5:b8:d8:
         62:7d:3d:8f:ba:08:8e:05:32:af:c6:50:37:42:cf:6b:22:a5:
         6a:77:e9:65:35:6f:0b:22:7a:40:1e:85:77:60:e4:91:f0:d4:
         73:e3:54:33:1c:fa:90:04:8c:57:6c:3c:ef:37:8c:77:55:e9:
         d0:7c:3e:31:6f:63:4d:f2:ad:48:b4:bb:38:79:2e:5c:da:6f:
         75:bc:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----