This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
File:                     895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft (raw, json)
Hash identifier:          mWooEPb8es34X1W53lm9K+MBaea26s0JnXQ6LCf7hQU=
Subject key identifier:   8D:FB:3F:AA:B7:6C:73:30:64:9D:69:E7:41:00:0E:09:4C:B4:EA:1A
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       22E70B9F3131E8BE1684C361F423F07E4784E7B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
Manifest number:          014B
Signing time:             Wed 17 Dec 2025 15:18:28 +0000
Manifest this update:     Wed 17 Dec 2025 15:13:28 +0000
Manifest next update:     Tue 23 Dec 2025 11:44:28 +0000
Files and hashes:         1: 34352e352e32322e302f32342d3234203d3e20323635363835.roa (hash: F33eintSjeTbvLD2xGF0iGt+nY+gV+TIwRfC5i4Yofc=)
                          2: 34352e352e32312e302f32342d3234203d3e20323635363835.roa (hash: UIw1o6nbjcfY9F6cLczLnigrgzeO39DNkbcFVKZe5HE=)
                          3: 34352e352e32302e302f32332d3234203d3e20323635363835.roa (hash: MjfgGbctRKOZ5aqPrhc4nNV1glEFd6Ozdknii6I/XB4=)
                          4: 34352e352e32332e302f32342d3234203d3e20323733303434.roa (hash: qIJR4pV7C+DME8THx8dOWpujOwwHq7p/yecZWTTxq9k=)
                          5: 895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl (hash: OFCZcRofIK6Ca0oUXEei7Ni2w2zqGiU+l4PtQLYg6YU=)
                          6: 323830333a313163303a3a2f33322d3438203d3e20323635363835.roa (hash: mf8KhPHxeTnzcwBOxIG80bVCp+DRTiDpZQ2RhvaDfHM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 11:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e7:0b:9f:31:31:e8:be:16:84:c3:61:f4:23:f0:7e:47:84:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Dec 17 15:13:28 2025 GMT
            Not After : Dec 23 11:44:28 2025 GMT
        Subject: CN=8DFB3FAAB76C7330649D69E741000E094CB4EA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:d3:bb:6d:3f:99:97:f1:91:1a:81:54:95:
                    a7:97:60:d1:d4:fe:4f:3d:c0:1f:75:0b:67:58:71:
                    31:7c:fe:31:20:75:31:ae:9c:a5:39:94:00:7b:d2:
                    9e:99:0b:1a:f9:e6:12:39:8e:ac:04:a8:c0:14:49:
                    3a:c2:1d:1f:bc:91:ed:8e:d6:da:d4:0e:74:ec:ca:
                    a3:0c:3f:86:a2:83:84:48:46:9c:28:f2:a4:6d:6a:
                    70:42:b8:ac:0e:43:00:c1:67:04:ab:6c:66:d7:ec:
                    da:38:ab:1a:57:cb:96:77:60:18:c4:90:f6:69:1b:
                    b5:8b:2f:ee:e3:83:c4:36:cd:42:3e:c5:c4:8f:e6:
                    57:bb:58:71:fa:2e:a6:d5:74:71:36:3b:c0:a1:77:
                    41:25:4d:e7:15:10:26:13:e7:a4:17:57:6c:87:4d:
                    a8:df:9e:3e:5b:d3:fe:c6:85:f2:5b:0b:72:ba:f9:
                    c7:6e:f9:45:3e:8d:53:75:fa:e1:20:78:3d:4c:2e:
                    06:5d:5e:16:db:88:fe:5a:c0:4d:21:47:22:d8:d4:
                    13:21:2c:d7:50:9e:f4:ab:0d:2d:5e:7c:0a:cb:44:
                    67:62:3b:ef:9d:3a:15:99:ac:80:1d:b7:e5:c1:ea:
                    72:40:2d:09:62:09:8e:a6:c2:da:9e:cf:c6:3d:55:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FB:3F:AA:B7:6C:73:30:64:9D:69:E7:41:00:0E:09:4C:B4:EA:1A
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:c2:c0:15:71:d4:72:ed:52:ff:a8:87:ff:ae:f7:cb:2e:
         42:a6:57:34:5c:0c:68:4f:2d:9c:62:89:d7:cb:f9:b8:21:e3:
         ed:4a:b7:8d:8e:88:e3:14:cd:28:ae:27:b8:a9:7f:93:49:62:
         64:75:77:88:98:a4:ed:7c:ea:e7:e0:fa:41:45:92:52:13:4d:
         84:10:7d:e3:68:83:61:ae:04:dd:80:4c:1b:70:d7:53:de:65:
         7a:5d:7f:a2:3c:fc:68:1c:5b:03:80:55:6d:da:cd:19:1a:6d:
         0f:f1:5e:85:c9:c4:d8:b7:b1:a7:c0:62:a3:37:b9:13:95:15:
         8a:cc:80:0a:35:82:a0:5b:97:c9:f4:53:d2:d6:2d:c9:0a:ce:
         83:f7:f3:a2:ac:b9:90:da:0b:9b:fc:7b:b7:83:9f:80:b7:4c:
         22:44:34:db:08:bf:42:fb:7d:f5:36:81:a2:78:3f:a8:c7:55:
         36:af:78:34:6d:52:26:d9:bb:2c:30:7b:ff:1b:90:57:fc:1f:
         bd:2a:2b:10:c4:1e:19:7f:d4:44:80:e7:4f:e4:be:84:f0:e9:
         a8:c4:91:36:ce:74:33:c8:c0:78:3f:39:2b:1c:e2:67:c1:3d:
         d1:d8:05:98:76:36:7f:91:b9:be:e7:35:ef:0b:37:ea:b8:b7:
         d5:5e:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----