This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
File:                     2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft (raw, json)
Hash identifier:          ak9EdZR1b1wYlMkQty5stnASGDpmuEw+npVd7PUHD+c=
Subject key identifier:   EE:63:87:00:A1:B9:05:B7:06:BE:46:35:29:F3:83:90:CF:0B:68:1B
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       0B2A7FA8700488C269C722437BA22281DAC89DE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
Manifest number:          014B
Signing time:             Sat 20 Dec 2025 09:30:04 +0000
Manifest this update:     Sat 20 Dec 2025 09:25:04 +0000
Manifest next update:     Fri 26 Dec 2025 06:23:04 +0000
Files and hashes:         1: 3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa (hash: oU+x32YObQYQh76q7q9tnUj0a/IicmBvtzjwKuifQvE=)
                          2: 323830303a3939303a3a2f33322d3332203d3e20323632313637.roa (hash: zul00KV+KPu/dOakTUDcREF4my+codRji+f6huBwXGo=)
                          3: 3138362e3134382e3231312e302f32342d3234203d3e20323632313637.roa (hash: zvI1GebMxP6SFnyRZPIq+jfS/Hl9d6PvAFAniLQP8JY=)
                          4: 3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa (hash: CQ0wBpn+i6+D1TveEMXwnWwCOwSTKttntwGBXiOydl8=)
                          5: 3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa (hash: 0bAZyVabZ5Byzhys6wJR0tWsBsM11eia/ybKApCU7jM=)
                          6: 2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl (hash: KiB0nfQbuzPEK7bIoTz6S/fFjjXFJb4CzVDPxUnPims=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:7f:a8:70:04:88:c2:69:c7:22:43:7b:a2:22:81:da:c8:9d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Dec 20 09:25:04 2025 GMT
            Not After : Dec 26 06:23:04 2025 GMT
        Subject: CN=EE638700A1B905B706BE463529F38390CF0B681B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:bb:55:dc:10:0d:89:78:23:e5:95:e4:e8:
                    1a:bc:b3:49:b3:00:a3:18:b6:1c:26:39:57:b2:79:
                    2e:44:c0:d4:0e:80:da:46:72:cc:ca:88:1f:c3:67:
                    98:e5:83:c2:8f:55:16:c2:7e:30:53:6c:05:52:9b:
                    4a:52:8e:f8:28:02:3a:13:2c:bf:86:e4:4e:83:00:
                    d3:e4:15:e2:79:92:27:39:de:7c:3d:53:0c:6e:71:
                    dd:14:61:cb:b1:c6:90:14:27:af:81:15:00:8d:55:
                    5c:27:da:bc:12:b1:a2:e2:d4:db:1f:8e:4f:97:38:
                    25:02:5a:a6:87:23:4a:60:c3:5a:8f:41:0a:9f:1d:
                    1d:84:87:8d:b0:6d:64:e8:f7:89:62:25:c0:c3:35:
                    30:72:52:3d:d5:ab:82:f5:ce:8e:66:1a:49:80:7b:
                    ca:f3:e6:91:a4:4a:35:a7:c6:7a:72:2a:8f:b2:f6:
                    45:bc:b4:09:f0:0b:3e:47:34:ae:4b:e5:d0:1f:a1:
                    ed:6c:df:99:07:06:ff:66:e5:8c:5f:0a:f6:60:3f:
                    ec:2f:37:a2:d1:27:80:ca:33:60:17:d1:8f:78:80:
                    b6:c0:2c:b9:73:54:3c:ce:af:77:2b:57:9c:79:82:
                    8d:70:c7:26:1d:1a:8e:7c:6e:81:50:bc:fb:01:88:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:87:00:A1:B9:05:B7:06:BE:46:35:29:F3:83:90:CF:0B:68:1B
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:e0:c0:78:c8:3f:1b:99:3b:d6:ee:d5:0e:43:3f:a8:08:
         af:80:aa:8f:5c:7e:be:39:cd:82:2d:72:3f:af:89:c0:84:42:
         a6:72:28:04:15:0a:88:a8:0c:e3:01:44:2b:c4:d9:3d:0f:13:
         81:76:f4:c5:2f:cd:a0:e4:52:ad:90:3b:68:51:d7:64:36:c5:
         e4:54:5d:29:5d:bf:74:f3:b6:06:0a:98:df:7f:2f:94:5b:02:
         94:fb:a4:a1:20:8c:07:e4:e5:2d:99:0a:46:17:1a:d2:5d:d9:
         e1:25:df:72:6a:f8:9c:b6:46:85:80:04:ef:21:00:27:f7:b3:
         f9:82:a5:ba:0d:21:d2:da:d4:53:56:d7:0e:e4:79:6e:54:8a:
         08:e8:be:63:b3:64:ab:9a:92:de:3f:36:55:53:7f:bd:2a:9f:
         38:e2:b3:03:8f:7f:d2:8d:7a:84:e1:e5:10:60:b3:36:0d:a5:
         d2:44:3c:e5:a3:d1:70:15:7b:54:2d:f1:f7:b8:5f:d4:b4:28:
         5c:70:e5:fc:15:02:e6:b5:d1:ee:3a:d0:d0:8f:b3:dc:1f:2d:
         d5:47:9e:06:76:48:25:61:60:63:58:e7:9f:d1:b1:09:57:77:
         9e:12:ce:71:2c:3d:63:da:77:b2:51:38:92:98:ac:a0:b9:1d:
         63:f6:05:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:35:02 2025 by rpki-client