This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
File:                     166002DF14C56775A516493F63DE105DB90809F3.mft (raw, json)
Hash identifier:          QN4KvuXD5m9fIkWv6gSSez9vfSJOxUoolSiKyHzZJfw=
Subject key identifier:   3B:08:39:B0:DF:23:AC:FD:AD:65:23:18:97:0A:9D:8C:CD:57:01:D3
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Certificate issuer:       /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial:       4DC28418D9548329CDFFDF37A0E2D5714437F3AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
Manifest number:          0157
Signing time:             Mon 22 Dec 2025 10:35:20 +0000
Manifest this update:     Mon 22 Dec 2025 10:30:20 +0000
Manifest next update:     Tue 23 Dec 2025 13:02:20 +0000
Files and hashes:         1: 323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (hash: PHSDjfnBHkB9HmZhbGZ5q3XuKfWc/d8jLBkmMXoaauc=)
                          2: 166002DF14C56775A516493F63DE105DB90809F3.crl (hash: cG3IsgECWEhJ1fwpP3OtzTBJfWyLC2TeCTQuOidiX/Y=)
                          3: 3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (hash: iQm1N7IdGlMcbLJXDQpyRNEhSnB/X9hAFXnkCV0tsnw=)
                          4: 3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (hash: mUHah8NtMU4Mwl/oVJwau4tBwzo8P/nJRcYyoHkAOes=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
                          rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 12:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:84:18:d9:54:83:29:cd:ff:df:37:a0:e2:d5:71:44:37:f3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
        Validity
            Not Before: Dec 22 10:30:20 2025 GMT
            Not After : Dec 23 13:02:20 2025 GMT
        Subject: CN=3B0839B0DF23ACFDAD652318970A9D8CCD5701D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:66:29:fb:b4:9c:00:93:97:5f:62:79:3f:
                    03:7b:79:97:f4:64:30:00:2d:9a:70:ed:31:e2:13:
                    3e:33:35:48:91:30:00:a3:0c:53:77:75:56:1d:de:
                    27:91:b3:8d:00:c5:9a:73:ac:69:0b:27:66:6b:68:
                    2c:a4:4b:52:48:a7:8f:80:1d:b4:8e:60:62:c4:36:
                    b5:4e:c4:e5:a7:8d:fa:a9:5a:48:01:96:19:6c:ab:
                    48:5b:d6:23:e9:44:8c:51:e3:37:f5:aa:8c:75:0c:
                    95:44:a5:87:0f:bf:c1:07:20:ce:d1:17:bb:fa:6e:
                    44:16:79:0f:40:ee:78:6a:a7:fe:e5:e4:ca:0a:62:
                    04:66:f5:24:53:55:5f:f1:7d:97:62:85:fc:33:7c:
                    e2:9b:b7:77:61:b2:e0:45:51:ab:62:ac:a1:8a:b2:
                    f9:e8:b7:22:c9:82:62:69:c7:1a:a1:c4:5e:6e:92:
                    be:68:24:19:cb:60:0a:7f:85:04:a3:d7:dd:cd:32:
                    26:97:62:6c:c4:00:61:3b:b8:27:b3:3b:db:92:d6:
                    2d:78:03:bc:88:0a:a8:fe:20:6b:9b:aa:e6:c2:5f:
                    cd:ca:c2:aa:1b:20:65:34:0d:5e:3c:cd:17:ac:9b:
                    68:1a:fb:5c:4b:17:6b:98:92:8e:9b:7b:30:f9:61:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:39:B0:DF:23:AC:FD:AD:65:23:18:97:0A:9D:8C:CD:57:01:D3
            X509v3 Authority Key Identifier:
                keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:ff:4a:9c:ca:c9:cf:c9:01:39:59:27:4d:ba:8b:cc:6f:
         98:98:60:9d:7e:38:eb:ec:71:ff:dd:9a:ca:2f:76:c3:6b:c4:
         90:47:6b:ab:15:e8:ab:c0:ce:6c:ba:82:47:a6:e7:a6:f8:a7:
         63:9e:39:34:df:72:b1:3d:ef:95:4c:09:dc:93:6f:c2:86:f4:
         e6:f6:c7:fe:c8:3d:9d:72:34:5e:e7:64:c5:8e:e4:47:2b:0f:
         5d:3a:e0:b2:29:f9:be:a5:14:5c:e3:8e:04:72:01:98:f6:11:
         3b:52:73:1d:bb:08:ab:94:54:14:44:22:e2:92:95:c9:ed:a5:
         fb:1c:fb:ae:5d:6e:57:11:c0:bd:d7:5a:46:bf:f7:21:a1:5b:
         29:79:1f:a1:fb:ac:0e:e0:66:66:9b:be:62:02:bc:cb:25:93:
         d0:d1:d3:83:dd:d6:77:b1:59:4e:b6:e8:d7:97:35:51:44:55:
         f0:64:fb:c3:de:b5:7b:3c:98:7b:8e:cd:3a:86:4c:4d:91:96:
         d1:59:43:9a:f3:6e:d9:6d:6d:62:16:8b:45:66:f9:a7:47:02:
         d8:1a:e6:1d:87:13:a1:1d:e2:58:ce:3c:5b:2a:36:db:c0:e5:
         51:1d:76:28:00:6e:48:3d:a2:7a:e4:51:5d:f2:bf:18:1c:48:
         34:7b:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:19:38 2025 by rpki-client