This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
File:                     BC038A5595864CBCD2C347394864706970D0059D.mft (raw, json)
Hash identifier:          dxaK3B9959i8tWkk7IPkZTGCmiUkmNbLUUlHcvFo9c8=
Subject key identifier:   BE:1D:C3:09:7D:1F:00:66:54:4E:BB:C7:48:0C:9B:DE:CB:5F:4B:60
Authority key identifier: BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D
Certificate issuer:       /CN=BC038A5595864CBCD2C347394864706970D0059D
Certificate serial:       475819F4F0CC7B862253A5DE3C1DAB2C76F49464
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
Manifest number:          01C4
Signing time:             Sat 20 Dec 2025 01:49:34 +0000
Manifest this update:     Sat 20 Dec 2025 01:44:34 +0000
Manifest next update:     Sun 21 Dec 2025 05:23:34 +0000
Files and hashes:         1: BC038A5595864CBCD2C347394864706970D0059D.crl (hash: BmsaXFNc3cC3y0M/chPLA+fQG2yWjz9cdnQsJrqt3V0=)
                          2: 3133382e35392e3234302e302f32322d3234203d3e20323634323134.roa (hash: D7Scsji3eSDseRYmTygdt/pG8aMjcGcdIQt2liJZy4Y=)
                          3: 323830343a323435303a3a2f33322d3335203d3e20323634323134.roa (hash: 3AUGhipJwZzjVi8Kid1gPFP+TDPF8YWVH3O3aUPCNLc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:19:f4:f0:cc:7b:86:22:53:a5:de:3c:1d:ab:2c:76:f4:94:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC038A5595864CBCD2C347394864706970D0059D
        Validity
            Not Before: Dec 20 01:44:34 2025 GMT
            Not After : Dec 21 05:23:34 2025 GMT
        Subject: CN=BE1DC3097D1F0066544EBBC7480C9BDECB5F4B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:1f:d0:7a:e6:68:94:c5:fe:b4:c3:03:44:
                    86:1e:0e:af:ef:ab:70:ef:9e:0d:c1:97:82:20:13:
                    6b:bd:3b:fe:a9:d8:2f:3e:1e:7d:98:1a:85:3d:b3:
                    2a:95:a8:2c:76:77:5a:e6:bc:8d:71:37:a3:48:cf:
                    30:c3:d6:84:bc:24:15:37:9b:69:f0:36:1c:90:84:
                    f2:d3:6f:a5:86:23:60:85:b1:0c:40:1a:75:74:f9:
                    db:e7:2e:b5:5b:7a:a0:79:bc:01:ff:e7:ef:97:65:
                    ee:8b:01:c8:e6:dd:de:10:a3:6d:a7:5f:d7:cf:d2:
                    b1:3a:bf:25:5f:3d:2b:31:a4:7a:89:f6:d7:c5:02:
                    f5:f6:8c:3b:47:19:67:94:21:39:b4:54:4c:58:8d:
                    6c:db:73:69:5f:f6:ee:fa:60:9e:9e:70:ad:a0:1e:
                    36:ca:4d:11:0d:6f:96:58:a0:2c:e4:23:26:46:64:
                    bd:b4:87:e8:72:c8:a3:e2:1b:82:4f:8a:d9:bf:f4:
                    f9:dc:1e:55:e0:aa:86:fc:65:5c:d5:af:e8:e9:e4:
                    76:04:65:fa:05:aa:7b:29:25:37:f2:14:70:e6:54:
                    9a:24:01:75:0b:c5:00:24:d9:4d:5b:45:65:43:b5:
                    7b:a0:b1:47:77:16:f5:fc:bb:1a:6f:27:fc:48:ac:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:C3:09:7D:1F:00:66:54:4E:BB:C7:48:0C:9B:DE:CB:5F:4B:60
            X509v3 Authority Key Identifier:
                keyid:BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:f8:8a:b3:21:f0:0a:c0:99:06:df:fc:e3:b8:52:74:1d:
         35:4a:dd:2f:ce:a5:ae:31:73:6a:1a:07:80:df:20:03:f1:d5:
         d5:69:b3:3e:4d:7c:f8:f7:06:70:f7:60:8f:59:dc:2c:b5:19:
         df:c2:fd:c0:cd:45:3b:d6:a0:49:a0:bb:53:89:b5:b5:47:3a:
         4e:2b:76:49:86:bb:77:9b:27:31:64:0c:45:b2:85:ff:61:9e:
         44:24:95:fd:78:29:2c:d1:61:9c:43:50:0b:a1:76:37:4a:16:
         ad:b6:d2:61:c1:4c:a9:e7:43:39:57:49:dd:b5:08:b3:0b:de:
         8e:0d:09:25:f9:d2:76:57:57:6a:5c:ab:2c:23:0a:0a:a0:09:
         9b:7e:bd:0c:5c:75:4c:05:f9:33:ab:68:99:9c:96:55:1c:98:
         36:e2:d5:d2:a8:b8:b6:de:1d:34:64:ab:a1:81:77:ac:86:9b:
         21:3e:30:a3:00:50:d4:27:51:4c:2b:d0:e4:98:46:73:74:6c:
         76:16:4b:2e:9e:20:ba:50:58:3d:5b:4c:d3:e2:d0:d5:1d:2c:
         37:2e:72:e6:e3:ac:cc:56:4b:cf:03:78:c6:5d:c4:26:92:ba:
         74:c1:4c:38:cb:e7:d1:83:bb:6a:5d:20:2e:4a:dc:25:57:e0:
         22:80:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:22:11 2025 by rpki-client