This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
File:                     8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft (raw, json)
Hash identifier:          74vGsUHk+dqKeQS2VA82yuMiaEYXZ9EnzEKX9D3nIMU=
Subject key identifier:   E3:F0:85:A1:A7:DA:F6:04:D6:A0:5A:F8:39:16:E3:39:75:9B:E9:E6
Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
Certificate issuer:       /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
Certificate serial:       7E94A33A72E950FAD979A2D31447DBF51C2A7A63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
Manifest number:          0286
Signing time:             Sat 20 Dec 2025 14:25:01 +0000
Manifest this update:     Sat 20 Dec 2025 14:20:01 +0000
Manifest next update:     Sun 21 Dec 2025 18:07:01 +0000
Files and hashes:         1: 3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (hash: Za+tWBFZ8FpkNpw2xqU9jI81uYd92pCV0XblgjkOHpc=)
                          2: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl (hash: WqVGfUgJ0zoMTEzAlsUQ9JzcwcZyOX7H4CiJ7lZxCwY=)
                          3: 323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (hash: Ub5qyJ9P33x7eNSOBkNuMLbBSORDIs34xTWtXd2VkpA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:94:a3:3a:72:e9:50:fa:d9:79:a2:d3:14:47:db:f5:1c:2a:7a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
        Validity
            Not Before: Dec 20 14:20:01 2025 GMT
            Not After : Dec 21 18:07:01 2025 GMT
        Subject: CN=E3F085A1A7DAF604D6A05AF83916E339759BE9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:f7:d8:2c:da:5f:6c:88:a5:2f:a2:6b:33:
                    8f:f6:6a:96:21:7d:f8:5a:93:27:cb:39:bd:27:04:
                    76:88:6b:13:c0:51:b3:b7:8e:ab:8b:54:19:32:37:
                    7a:d1:e0:14:e2:84:3b:05:a3:a2:35:72:d4:3e:b5:
                    fe:a6:85:f8:cc:4c:02:02:23:10:31:c1:35:5d:57:
                    cb:1c:2d:45:da:f1:42:f3:7f:b0:98:e5:27:48:01:
                    af:d0:15:09:8b:ea:cf:9f:75:08:ab:52:37:e1:ce:
                    b2:97:ea:1e:be:3e:3f:31:4a:b0:05:0c:76:db:4f:
                    21:19:e3:32:97:f4:24:c0:82:8d:36:56:b5:2e:1a:
                    1f:3f:87:ce:25:61:ca:55:1f:39:5f:34:d4:aa:1f:
                    15:a3:d4:65:18:0d:b2:0a:fb:8c:f0:38:21:9d:cb:
                    a9:a7:f0:1a:49:49:ea:9b:b9:3c:cd:00:a7:6d:19:
                    18:c4:2e:a8:de:56:37:2d:eb:fc:3c:12:02:9f:55:
                    c4:aa:00:0c:93:8e:c6:ce:86:9a:0a:65:86:1d:2f:
                    86:50:66:82:3f:56:fb:5b:26:8b:26:22:d8:c2:58:
                    d7:c2:89:54:45:64:a3:7b:2f:91:69:0d:28:ea:52:
                    8d:81:6e:09:6e:b0:2f:13:77:c8:11:8b:bc:f6:86:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:85:A1:A7:DA:F6:04:D6:A0:5A:F8:39:16:E3:39:75:9B:E9:E6
            X509v3 Authority Key Identifier:
                keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e5:06:0f:93:a8:93:72:4f:d9:a5:44:84:35:e5:3e:32:10:
         aa:42:8b:12:ed:cb:57:26:f2:c1:62:1f:77:16:f6:ca:a8:8f:
         92:74:a0:62:04:35:07:4b:b5:96:f1:f2:83:dc:15:47:3a:f6:
         fa:15:42:0e:20:a9:0b:34:7c:7b:f2:7b:01:1c:1b:8e:88:e0:
         fe:7f:af:5e:52:df:e6:b5:df:f0:8b:64:a6:b7:2c:92:01:b5:
         a7:98:3f:95:10:cf:34:20:0d:ee:76:0f:92:46:6b:91:73:76:
         8e:95:99:00:40:2c:60:ab:0a:f1:c6:e4:16:51:da:91:8a:a4:
         64:24:88:cd:07:8b:93:5b:9c:2c:ba:ee:9b:eb:c5:50:c8:80:
         3f:ce:01:0c:ff:5a:61:c0:12:14:48:0e:b5:86:de:59:b6:2c:
         8a:a8:68:fb:be:a4:8d:dc:58:54:b8:e9:c2:ed:29:d4:0d:73:
         8e:3b:c1:e7:3f:5a:a4:fd:60:20:2e:cd:54:ba:ba:68:f9:51:
         10:0e:e7:49:a4:4d:7c:af:7e:36:91:19:4f:31:ac:ff:70:48:
         07:4b:4c:0e:4b:93:34:c0:b6:2a:ae:02:ba:5c:19:dc:cd:f8:
         a2:4b:a1:80:2c:a3:a8:0d:9b:a9:9d:6d:a1:e3:65:df:38:f8:
         66:56:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----