This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
File:                     66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft (raw, json)
Hash identifier:          ocC4bPOxpeEqOoxGKJAm9E3100+bM6lDjqaQ2m2dzHQ=
Subject key identifier:   09:02:92:A1:DB:3B:A3:AF:3B:67:21:75:0F:2B:5F:20:A7:25:4D:70
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       5F7EDD6F834E79C70EA92EAA3530DFC77ECCF578
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
Manifest number:          014A
Signing time:             Sat 20 Dec 2025 09:04:48 +0000
Manifest this update:     Sat 20 Dec 2025 08:59:48 +0000
Manifest next update:     Wed 24 Dec 2025 17:04:48 +0000
Files and hashes:         1: 323830333a626365303a3a2f33322d3332203d3e20323639393134.roa (hash: CQ1rd9IopoSv07z0mRsTMMv7cOUNL4PTexd6AuUZyLc=)
                          2: 66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl (hash: 18yB11icTuNmziaDZaxQpmvxOxj+nhdWdskNE/osJ1A=)
                          3: 34352e3139302e3139302e302f32332d3233203d3e20323633373530.roa (hash: 4EhLiJpcgPosKtLVuUy1ci+paZsx7C+r72JPV0wRyQI=)
                          4: 34352e3139302e3139312e302f32342d3234203d3e20323633373530.roa (hash: 3+mac6y4gD/fIkoVOV1w8Z784BAU0j2e3gDtlFpEMHk=)
                          5: 34352e3139302e3138382e302f32332d3234203d3e20323639393134.roa (hash: da25XSkJ5zfC/IYZmJGO8u80WCYiKA9urRdBdOLI0O4=)
                          6: 34352e3139302e3139302e302f32342d3234203d3e20323633373530.roa (hash: q73h2GwLm3MV9wUc3lrvacImk6dKYH0zNBCmEgDPcrU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:dd:6f:83:4e:79:c7:0e:a9:2e:aa:35:30:df:c7:7e:cc:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: Dec 20 08:59:48 2025 GMT
            Not After : Dec 24 17:04:48 2025 GMT
        Subject: CN=090292A1DB3BA3AF3B6721750F2B5F20A7254D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:7c:91:19:93:88:32:d5:e5:4e:22:ab:39:
                    9b:aa:21:b6:26:64:a5:db:0b:6b:65:0e:58:32:bb:
                    f9:3d:bd:0a:ff:a5:90:2d:e8:08:2b:9f:e7:7d:68:
                    6c:9b:b0:01:4d:fb:fa:d0:99:db:1b:34:1f:9b:f2:
                    ad:71:7c:50:10:7a:26:61:7b:04:3c:a5:aa:4c:a6:
                    c1:0e:38:3f:13:f9:b4:50:4b:99:23:d1:a6:f8:37:
                    de:de:3f:63:ce:48:0e:92:52:e6:e6:78:a1:59:fb:
                    c2:61:76:d8:87:6e:cd:b4:ad:ab:d1:d0:20:b3:9a:
                    15:f5:de:b7:d5:a5:16:15:9d:f2:31:56:51:5b:4f:
                    03:16:84:7c:89:10:d8:ea:73:8b:e6:d1:5c:8f:44:
                    6b:74:70:70:ef:86:a2:39:69:2c:5f:5c:37:ec:67:
                    a5:aa:a4:d2:5a:8c:c7:91:b8:54:dc:8a:da:5f:94:
                    d3:8e:59:4d:71:3e:90:ed:ba:0f:8f:6c:be:ba:67:
                    2b:5b:c2:56:fe:67:70:2c:4e:ea:c3:c1:7a:4e:ba:
                    8f:90:fd:b9:ed:60:2b:9d:54:42:a8:4c:ae:5d:d4:
                    75:24:fa:db:45:a9:05:9f:d2:69:41:bf:ed:2d:04:
                    f5:78:64:65:e0:85:21:95:f2:d7:3e:5f:ee:da:79:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:92:A1:DB:3B:A3:AF:3B:67:21:75:0F:2B:5F:20:A7:25:4D:70
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:59:3f:5a:6b:80:77:57:6f:58:88:83:e7:fd:8d:71:cd:
         19:96:6a:11:35:69:9c:b9:b1:6d:c9:0b:dc:aa:4e:27:03:29:
         3e:8e:03:3d:af:a4:83:67:bb:55:e7:c7:c3:7c:df:9c:71:46:
         82:81:3a:b6:76:75:ba:45:3b:07:5f:59:4f:aa:27:03:34:c6:
         8a:49:90:c3:93:d4:57:80:b1:93:a9:a8:c4:a1:61:f8:e1:d3:
         e3:7d:62:b6:ba:e7:5f:10:39:24:3e:ae:8a:4f:36:5a:4d:9d:
         06:83:1b:b9:fe:01:99:79:9a:e4:08:71:24:80:03:b5:41:1d:
         6a:bf:4e:14:b1:1f:c0:93:dc:89:23:e9:c3:3d:b1:fa:cb:62:
         d2:22:71:53:ab:3a:9e:36:a2:b8:05:e9:f2:ce:e0:49:e7:bb:
         2e:6d:f5:91:4b:09:18:ae:55:34:96:55:e8:96:07:d3:8d:87:
         58:06:89:c4:9f:8a:a6:e2:6f:53:a6:a4:71:31:7a:d1:d8:d6:
         1d:2d:f1:37:ca:ed:ba:26:76:eb:d8:c8:f3:0c:4a:29:52:5c:
         4f:84:32:a8:5f:30:c6:7f:27:ab:af:51:19:84:4a:24:7e:d7:
         cb:e2:aa:3b:67:91:d7:28:13:6d:47:8b:76:82:92:93:7c:7a:
         18:ef:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:32:10 2025 by rpki-client