This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
File:                     3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft (raw, json)
Hash identifier:          BMpwd3FibKXCivJh5B1ygje9MEdNQs6aXUFqNpcWoxE=
Subject key identifier:   59:7B:B6:AA:F8:0A:E3:88:36:4C:F3:51:38:04:7E:A5:69:A0:AE:B9
Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
Certificate issuer:       /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Certificate serial:       6C628B843FB035228420F42FAAA1A9CB996ACF97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
Manifest number:          014D
Signing time:             Fri 19 Dec 2025 00:08:33 +0000
Manifest this update:     Fri 19 Dec 2025 00:03:33 +0000
Manifest next update:     Wed 24 Dec 2025 23:38:33 +0000
Files and hashes:         1: 3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa (hash: uRplzeVEbcA56+VBgG3u78Z2AKleK+Jnh6jlmHIuDIY=)
                          2: 3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa (hash: f66sSKhCawYcYMVYV4neG56khlt10MyE+PirKEn9vm4=)
                          3: 3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa (hash: 4NLmZ+eeFxjWyxHy5k7rU0AqTc1BHVOFHMboq6BEEw0=)
                          4: 3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl (hash: lOM/BsiLu9kPsn3Y8WFdLXs8XpOeJLEAXlBmKfElgIs=)
                          5: 3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa (hash: rZfRbJlB/ojkN7811J6NBBB8ubQUv+qPn94tnNYVH1Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:62:8b:84:3f:b0:35:22:84:20:f4:2f:aa:a1:a9:cb:99:6a:cf:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
        Validity
            Not Before: Dec 19 00:03:33 2025 GMT
            Not After : Dec 24 23:38:33 2025 GMT
        Subject: CN=597BB6AAF80AE388364CF35138047EA569A0AEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:bf:c9:d3:3a:43:37:a6:8a:71:12:c5:b1:
                    a0:ac:31:9a:fe:ec:ef:18:39:fd:1a:01:bd:e5:41:
                    b2:a4:ae:9e:d2:35:ba:94:0b:f6:d6:fa:84:36:76:
                    7f:61:1a:d3:97:5d:a2:12:5e:a1:79:a7:60:78:a4:
                    c3:90:6e:6a:ac:99:ed:28:b0:b2:95:8c:04:6e:c1:
                    4c:a9:c5:55:92:e6:16:b5:51:2f:9b:78:a0:5f:65:
                    23:5d:eb:1a:96:61:db:b6:ed:8d:1a:d5:e0:f8:e7:
                    61:80:02:ac:0f:07:ff:d6:5c:0d:7a:24:ff:7d:35:
                    88:37:96:99:41:0f:eb:9c:09:2f:d6:a1:6e:5e:c4:
                    c4:e7:e9:d3:2d:1b:aa:62:1e:30:22:fe:fb:c0:c4:
                    96:3b:33:2a:31:0f:f1:fa:5e:ce:09:67:43:9d:28:
                    77:bb:56:77:b8:0a:c0:cb:86:17:9f:64:a0:23:71:
                    5c:1f:4b:bf:3d:61:25:64:88:8e:c9:22:f0:8b:18:
                    45:e9:5a:8d:eb:11:79:69:68:95:c5:b0:12:b4:47:
                    95:43:3c:31:36:ae:df:c4:87:f9:9c:aa:b0:63:82:
                    72:7d:28:85:9c:a8:27:8b:ff:14:f5:fe:d6:88:72:
                    75:89:74:d6:a6:cd:90:9c:ee:b6:89:06:81:f1:14:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7B:B6:AA:F8:0A:E3:88:36:4C:F3:51:38:04:7E:A5:69:A0:AE:B9
            X509v3 Authority Key Identifier:
                keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:e1:ae:ee:9d:60:e6:78:ae:21:41:11:c2:8a:fe:a9:10:
         86:8c:55:d4:87:88:f6:80:4a:a2:fd:19:46:6e:75:62:d6:10:
         da:84:dd:49:91:6d:64:28:df:f5:44:fd:89:1e:de:55:0e:cc:
         13:25:d5:8b:66:73:e2:4a:58:0c:cc:fa:87:11:9d:cb:2c:94:
         d7:76:71:43:63:5a:24:5c:3d:ca:95:33:bd:df:41:e0:04:86:
         e2:0b:48:d6:81:05:c3:12:71:d7:31:9a:e6:46:e5:c1:53:1e:
         2c:fe:fb:f9:58:2a:12:78:bf:53:df:25:80:91:48:70:8d:2a:
         44:6b:89:6e:09:78:70:8c:ce:f7:17:da:67:4d:b0:25:ba:f7:
         bb:1f:80:96:03:00:66:a8:68:4c:b7:44:40:54:92:03:24:42:
         a2:d8:84:2b:4e:4a:8a:c4:9a:d0:66:f6:2a:1d:61:04:e5:66:
         1e:d9:76:85:36:df:7b:c1:19:6a:64:28:27:1a:f6:d1:db:13:
         73:42:9c:64:b0:92:83:51:ee:46:b4:5b:5c:94:ba:84:51:9c:
         09:5b:ee:64:e2:37:59:84:7b:b0:47:bf:6b:c4:2f:4f:8d:62:
         9f:33:6f:75:c5:15:da:0f:7f:4d:82:4f:37:c1:bd:39:61:0e:
         57:11:44:63
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbGKLhD+wNSKEIPQvqqGpy5lqz5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0RTFERTg3NjE0MDc0MEYyNUU1QjU3RDhGNkJCNTM4
NjAyM0Y1RjAeFw0yNTEyMTkwMDAzMzNaFw0yNTEyMjQyMzM4MzNaMDMxMTAvBgNV
BAMTKDU5N0JCNkFBRjgwQUUzODgzNjRDRjM1MTM4MDQ3RUE1NjlBMEFFQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoL/J0zpDN6aKcRLFsaCsMZr+
7O8YOf0aAb3lQbKkrp7SNbqUC/bW+oQ2dn9hGtOXXaISXqF5p2B4pMOQbmqsme0o
sLKVjARuwUypxVWS5ha1US+beKBfZSNd6xqWYdu27Y0a1eD452GAAqwPB//WXA16
JP99NYg3lplBD+ucCS/WoW5exMTn6dMtG6piHjAi/vvAxJY7MyoxD/H6Xs4JZ0Od
KHe7Vne4CsDLhhefZKAjcVwfS789YSVkiI7JIvCLGEXpWo3rEXlpaJXFsBK0R5VD
PDE2rt/Eh/mcqrBjgnJ9KIWcqCeL/xT1/taIcnWJdNamzZCc7raJBoHxFIHNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWXu2qvgK44g2TPNROAR+pWmgrrkwHwYDVR0j
BBgwFoAUP04d6HYUB0DyXltX2Pa7U4YCP18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTNEREM2QzUyNUFBMUQ0MzJGNDcwQTk2RDkyNjFDRjI4
RkUxQ0VENEVDN0MxQjhDMUY1QTAxOEY3NUVFRjRELzAvM0Y0RTFERTg3NjE0MDc0
MEYyNUU1QjU3RDhGNkJCNTM4NjAyM0Y1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjRFMURFODc2MTQwNzQwRjI1
RTVCNTdEOEY2QkI1Mzg2MDIzRjVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEzRERDNkM1MjVBQTFENDMyRjQ3MEE5NkQ5MjYxQ0YyOEZFMUNFRDRF
QzdDMUI4QzFGNUEwMThGNzVFRUY0RC8wLzNGNEUxREU4NzYxNDA3NDBGMjVFNUI1
N0Q4RjZCQjUzODYwMjNGNUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuCOGu7p1g5niuIUERwor+qRCG
jFXUh4j2gEqi/RlGbnVi1hDahN1JkW1kKN/1RP2JHt5VDswTJdWLZnPiSlgMzPqH
EZ3LLJTXdnFDY1okXD3KlTO930HgBIbiC0jWgQXDEnHXMZrmRuXBUx4s/vv5WCoS
eL9T3yWAkUhwjSpEa4luCXhwjM73F9pnTbAluve7H4CWAwBmqGhMt0RAVJIDJEKi
2IQrTkqKxJrQZvYqHWEE5WYe2XaFNt97wRlqZCgnGvbR2xNzQpxksJKDUe5GtFtc
lLqEUZwJW+5k4jdZhHuwR79rxC9PjWKfM291xRXaD39Ngk83wb05YQ5XEURj
-----END CERTIFICATE-----