This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
File:                     D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft (raw, json)
Hash identifier:          na7roNE1KnpppySQtZeXxyBG4McxVqubweJ9yc/+Sm0=
Subject key identifier:   77:E9:24:43:2E:2D:B0:5C:67:2D:A5:B2:B1:F8:B3:CB:22:16:98:3A
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       4470C70659CD8768E24AF1226C647074C0D15C3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
Manifest number:          0142
Signing time:             Mon 15 Dec 2025 23:18:00 +0000
Manifest this update:     Mon 15 Dec 2025 23:13:00 +0000
Manifest next update:     Sun 21 Dec 2025 12:52:00 +0000
Files and hashes:         1: 3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa (hash: BCqZEJ+DLKIWTPZ9mSakXWoO4SueR/joxwWXsL/3LHY=)
                          2: 3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa (hash: vIURkEO71x2PSO0W4c9jggUhAO96hIq3n/lsEueGn68=)
                          3: 3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa (hash: jcHLopFShDNAaZXHB9TWW5P/lzi48o4GfF5T5OBkt8E=)
                          4: 3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa (hash: Rb6ko/h2RBTEe0x8+1qcEkLRY4Ch0QC0aMBZ0tNIz6g=)
                          5: D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl (hash: HweP9KjmkZQmipG3P+zBDznWEELDgE261l1qbNpIzqk=)
                          6: 3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa (hash: uV00c7xioyhd5LBjL2na7DahcErdQqyXws7jDAgaumU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:c7:06:59:cd:87:68:e2:4a:f1:22:6c:64:70:74:c0:d1:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Dec 15 23:13:00 2025 GMT
            Not After : Dec 21 12:52:00 2025 GMT
        Subject: CN=77E924432E2DB05C672DA5B2B1F8B3CB2216983A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:6a:6e:d8:97:d7:ae:66:bb:8c:ca:3b:91:
                    f6:cd:f5:b8:e6:44:68:83:63:05:1d:bc:cb:d8:59:
                    1c:7d:dc:89:e7:8f:f0:78:f3:e1:ce:15:84:f4:3e:
                    13:d9:f8:a1:ce:96:c8:3c:ea:e4:c0:be:7d:d2:62:
                    1f:9e:d7:ac:22:1a:ad:d7:7d:8a:7d:c6:eb:2b:e6:
                    ec:74:cc:26:61:cc:b9:56:8c:a0:ff:7d:5a:9a:74:
                    0c:3e:f4:71:3e:ba:41:1e:a7:00:f1:6b:3b:e8:2d:
                    35:57:a8:1a:47:6c:5c:02:ce:99:9e:19:8b:e4:a7:
                    db:12:94:cf:1e:34:61:ad:d2:92:ef:39:3b:06:29:
                    dc:2c:05:42:19:bd:8e:57:ea:b3:a1:de:be:76:dd:
                    a4:e3:0e:68:2e:4a:13:c4:4c:2d:14:d1:37:ee:97:
                    4f:3e:b9:73:74:08:27:d9:37:41:04:cf:08:52:6d:
                    e8:1a:05:77:6a:c9:63:b4:d5:bf:81:72:42:42:a3:
                    e9:cc:3d:64:a5:ee:b2:50:87:26:b1:5f:70:4c:21:
                    52:fa:47:c9:9b:4d:c0:65:2f:2b:ed:32:3b:81:6a:
                    94:19:0c:29:48:0d:5c:4d:00:a7:8b:b9:67:c2:28:
                    71:78:43:3f:f9:65:18:0f:e0:d3:0c:0d:16:be:b1:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:24:43:2E:2D:B0:5C:67:2D:A5:B2:B1:F8:B3:CB:22:16:98:3A
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:11:03:ee:d6:3b:84:29:a9:a6:b1:ad:7a:7e:d2:1e:56:10:
         ea:73:5f:80:a2:80:da:af:f2:bf:21:34:0f:75:84:70:16:1f:
         5d:1f:d3:f4:50:ab:65:1d:d5:ea:a3:4b:4e:d4:b9:3e:92:3f:
         0b:77:98:b0:09:cd:8e:fd:16:05:a0:8b:8d:cb:d4:96:8f:9b:
         cb:75:c6:fc:37:82:cf:74:64:d3:e8:dd:ab:3c:ee:fd:70:bf:
         26:6b:36:42:8d:88:14:63:89:50:ac:f2:1a:9b:3c:3a:da:a6:
         9f:93:4c:6a:2e:f8:9f:af:3d:c8:11:7d:e3:54:d7:c3:4a:e9:
         6f:bb:0c:e6:44:b9:65:52:c9:0b:26:f0:a1:23:6f:76:66:2f:
         27:57:d6:77:69:9b:16:0a:44:b8:d2:21:25:e4:8f:15:21:52:
         17:76:1f:82:5c:d2:0e:d2:dd:e4:05:88:0c:7e:57:cf:04:a9:
         5d:1a:14:6e:8f:1f:fa:18:90:5f:90:f4:8b:f4:30:2e:4a:9f:
         50:f2:29:77:8b:6b:a2:82:ed:5b:6a:c4:2c:14:f4:d5:79:f4:
         96:f4:7e:7c:9c:f7:3e:d8:3a:ba:e3:da:3c:b6:32:c2:fa:2a:
         2f:39:81:45:c0:72:99:30:6a:4d:56:a6:a0:5d:cb:05:ec:7e:
         a5:e2:f4:2d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURHDHBlnNh2jiSvEibGRwdMDRXD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGQzY3NzIwNUIwREE5Q0E5NzlCNkQ2OEI5NUI0OUM0
QjZDMzI2NzAeFw0yNTEyMTUyMzEzMDBaFw0yNTEyMjExMjUyMDBaMDMxMTAvBgNV
BAMTKDc3RTkyNDQzMkUyREIwNUM2NzJEQTVCMkIxRjhCM0NCMjIxNjk4M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrdWpu2JfXrma7jMo7kfbN9bjm
RGiDYwUdvMvYWRx93Innj/B48+HOFYT0PhPZ+KHOlsg86uTAvn3SYh+e16wiGq3X
fYp9xusr5ux0zCZhzLlWjKD/fVqadAw+9HE+ukEepwDxazvoLTVXqBpHbFwCzpme
GYvkp9sSlM8eNGGt0pLvOTsGKdwsBUIZvY5X6rOh3r523aTjDmguShPETC0U0Tfu
l08+uXN0CCfZN0EEzwhSbegaBXdqyWO01b+BckJCo+nMPWSl7rJQhyaxX3BMIVL6
R8mbTcBlLyvtMjuBapQZDClIDVxNAKeLuWfCKHF4Qz/5ZRgP4NMMDRa+sTtRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUd+kkQy4tsFxnLaWysfizyyIWmDowHwYDVR0j
BBgwFoAU2PxncgWw2pypebbWi5W0nEtsMmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEMzNEI4RjFDNDY1ODY5RTIxOUE2NUNBMzY5RTAyM0Iy
MUZEQUIyQ0MxQUQ2OTEwODhCM0Q4OEMxNERDRUIwLzAvRDhGQzY3NzIwNUIwREE5
Q0E5NzlCNkQ2OEI5NUI0OUM0QjZDMzI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEZDNjc3MjA1QjBEQTlDQTk3
OUI2RDY4Qjk1QjQ5QzRCNkMzMjY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDMzRCOEYxQzQ2NTg2OUUyMTlBNjVDQTM2OUUwMjNCMjFGREFCMkND
MUFENjkxMDg4QjNEODhDMTREQ0VCMC8wL0Q4RkM2NzcyMDVCMERBOUNBOTc5QjZE
NjhCOTVCNDlDNEI2QzMyNjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvEQPu1juEKammsa16ftIeVhDq
c1+AooDar/K/ITQPdYRwFh9dH9P0UKtlHdXqo0tO1Lk+kj8Ld5iwCc2O/RYFoIuN
y9SWj5vLdcb8N4LPdGTT6N2rPO79cL8mazZCjYgUY4lQrPIamzw62qafk0xqLvif
rz3IEX3jVNfDSulvuwzmRLllUskLJvChI292Zi8nV9Z3aZsWCkS40iEl5I8VIVIX
dh+CXNIO0t3kBYgMflfPBKldGhRujx/6GJBfkPSL9DAuSp9Q8il3i2uigu1basQs
FPTVefSW9H58nPc+2Dq649o8tjLC+iovOYFFwHKZMGpNVqagXcsF7H6l4vQt
-----END CERTIFICATE-----
Generated at Wed Dec 17 12:22:30 2025 by rpki-client