This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
File:                     7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft (raw, json)
Hash identifier:          /VvP47KJKkxcqmueLTwknBfIvspL20YwmxSb/NI/Bh8=
Subject key identifier:   4E:2F:8D:1F:74:8E:55:05:ED:D6:63:DA:C2:5B:BD:F7:15:4D:A6:A2
Authority key identifier: 7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C
Certificate issuer:       /CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
Certificate serial:       3EE494A0D296092108847B9EE83AB154BCAA1522
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
Manifest number:          0143
Signing time:             Sat 20 Dec 2025 00:38:58 +0000
Manifest this update:     Sat 20 Dec 2025 00:33:58 +0000
Manifest next update:     Thu 25 Dec 2025 10:50:58 +0000
Files and hashes:         1: 323830333a363931303a3a2f33322d3332203d3e20323732303034.roa (hash: ROGYJ2QMB2QstVFiwK0hBAdafhWbr5n5RjyNgIyPrBA=)
                          2: 7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl (hash: 6OnOGkL9n2b+9ThePYAHA7Hm7cgFN3HE+M39pFtQiUs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:94:a0:d2:96:09:21:08:84:7b:9e:e8:3a:b1:54:bc:aa:15:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C
        Validity
            Not Before: Dec 20 00:33:58 2025 GMT
            Not After : Dec 25 10:50:58 2025 GMT
        Subject: CN=4E2F8D1F748E5505EDD663DAC25BBDF7154DA6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:92:dd:cf:10:7e:6a:76:09:48:c8:91:1d:
                    bb:09:54:e1:e9:24:b5:9d:6b:be:40:59:46:61:4f:
                    93:c1:4b:4e:15:dd:6e:b8:d7:d5:d3:a0:69:8d:25:
                    02:fc:42:41:b9:81:70:d3:17:68:ef:af:b7:c3:d6:
                    79:c3:53:87:04:cf:85:bd:08:4f:d0:0d:dd:04:38:
                    41:5d:ce:50:03:d4:f1:7d:2d:52:16:df:3b:47:a1:
                    fc:98:31:0a:01:e3:9e:a9:eb:00:44:a8:0a:dc:a2:
                    f0:9d:cb:f7:5a:45:81:49:77:b6:85:d3:1f:e6:84:
                    f9:a7:a5:42:f0:4f:ee:66:ab:86:8f:05:e5:94:78:
                    f5:a6:c0:ca:b2:24:22:ad:20:de:c9:30:f2:33:ba:
                    ec:3b:1e:c0:b0:0a:17:30:95:6b:c0:13:54:b2:17:
                    65:fb:51:7e:81:b0:31:f9:aa:51:12:f9:ec:e2:8a:
                    b5:04:39:e0:11:b9:d4:8b:2a:b2:9a:b2:8c:3e:64:
                    89:72:96:47:37:77:c9:94:19:d0:48:43:94:73:58:
                    2f:43:83:a9:ec:72:2c:af:54:b7:de:ac:32:8f:57:
                    55:4b:2a:9f:ef:40:5b:3d:37:1d:77:2a:1b:ee:44:
                    c3:b6:d3:af:c4:dd:3c:10:e1:20:d9:07:4d:06:56:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:8D:1F:74:8E:55:05:ED:D6:63:DA:C2:5B:BD:F7:15:4D:A6:A2
            X509v3 Authority Key Identifier:
                keyid:7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:51:3b:96:a7:10:3c:e7:7b:ad:f5:1e:63:96:67:f7:a0:
         e8:69:3d:05:7b:4a:67:25:00:c1:05:e3:9d:24:f9:42:d6:7b:
         67:4b:ec:30:19:b1:f0:1d:9d:eb:46:3e:01:fd:dd:5e:1f:cd:
         b2:9f:dc:60:af:a6:a7:6a:27:41:c9:af:54:5a:79:94:c5:d8:
         fb:96:93:83:e6:e3:2e:b7:21:1c:b7:15:8d:64:c0:a0:e5:cc:
         c6:af:83:e7:db:9b:d7:82:08:f7:aa:71:a4:3f:d4:00:e6:1d:
         c0:9e:f6:14:a9:ec:e0:b7:23:0b:c6:38:df:e2:14:6e:5f:c9:
         91:c7:24:5f:b7:ee:f7:03:34:46:88:50:d1:9a:18:ef:d1:5b:
         97:64:08:79:cf:37:ad:e3:66:6b:ca:e3:53:71:ee:be:9f:1b:
         2a:ce:d5:79:2b:59:38:b2:38:ec:ab:cb:8f:d0:c9:3f:2a:0c:
         50:f7:1c:77:f2:dd:a4:ac:d9:89:24:bb:1e:15:90:5c:c4:bd:
         db:7c:0f:4c:c2:3d:88:aa:0a:b0:fe:fd:50:41:58:06:1d:53:
         d5:0e:fa:74:f6:48:32:19:f3:bb:a5:6a:49:94:a6:bf:05:45:
         82:1c:d5:a2:4b:92:66:e7:a0:33:a8:f0:04:76:40:db:7a:cf:
         7a:58:8f:c9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPuSUoNKWCSEIhHue6DqxVLyqFSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QyQkI3RTVDRURGQjcwQzNDNTI2MUY2NzU2MUZBRDg0
QTI5NDU3QzAeFw0yNTEyMjAwMDMzNThaFw0yNTEyMjUxMDUwNThaMDMxMTAvBgNV
BAMTKDRFMkY4RDFGNzQ4RTU1MDVFREQ2NjNEQUMyNUJCREY3MTU0REE2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSJLdzxB+anYJSMiRHbsJVOHp
JLWda75AWUZhT5PBS04V3W6419XToGmNJQL8QkG5gXDTF2jvr7fD1nnDU4cEz4W9
CE/QDd0EOEFdzlAD1PF9LVIW3ztHofyYMQoB456p6wBEqArcovCdy/daRYFJd7aF
0x/mhPmnpULwT+5mq4aPBeWUePWmwMqyJCKtIN7JMPIzuuw7HsCwChcwlWvAE1Sy
F2X7UX6BsDH5qlES+eziirUEOeARudSLKrKasow+ZIlylkc3d8mUGdBIQ5RzWC9D
g6nsciyvVLferDKPV1VLKp/vQFs9Nx13KhvuRMO206/E3TwQ4SDZB00GVkVHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUTi+NH3SOVQXt1mPawlu99xVNpqIwHwYDVR0j
BBgwFoAUfSu35c7ftww8UmH2dWH62EopRXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DREZEQzMxNzZBRkIyMzBEQzBEN0MwQzg4NzlCQTFBMEQ0
RTUxOTFDRTJGQzlCMEMxNjY3RkEzQ0FFNzk1M0ZCLzAvN0QyQkI3RTVDRURGQjcw
QzNDNTI2MUY2NzU2MUZBRDg0QTI5NDU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDJCQjdFNUNFREZCNzBDM0M1
MjYxRjY3NTYxRkFEODRBMjk0NTdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0RGREMzMTc2QUZCMjMwREMwRDdDMEM4ODc5QkExQTBENEU1MTkxQ0Uy
RkM5QjBDMTY2N0ZBM0NBRTc5NTNGQi8wLzdEMkJCN0U1Q0VERkI3MEMzQzUyNjFG
Njc1NjFGQUQ4NEEyOTQ1N0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLpFE7lqcQPOd7rfUeY5Zn96Do
aT0Fe0pnJQDBBeOdJPlC1ntnS+wwGbHwHZ3rRj4B/d1eH82yn9xgr6anaidBya9U
WnmUxdj7lpOD5uMutyEctxWNZMCg5czGr4Pn25vXggj3qnGkP9QA5h3AnvYUqezg
tyMLxjjf4hRuX8mRxyRft+73AzRGiFDRmhjv0VuXZAh5zzet42ZryuNTce6+nxsq
ztV5K1k4sjjsq8uP0Mk/KgxQ9xx38t2krNmJJLseFZBcxL3bfA9Mwj2Iqgqw/v1Q
QVgGHVPVDvp09kgyGfO7pWpJlKa/BUWCHNWiS5Jm56AzqPAEdkDbes96WI/J
-----END CERTIFICATE-----