This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
File:                     CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft (raw, json)
Hash identifier:          BNG6jp5PtqmNmgAvfH6mfkiRwnKVuNn3rLR5BV5aTkc=
Subject key identifier:   DA:49:9E:46:C5:96:C1:62:EF:15:DE:9A:53:F2:85:BD:1E:2B:FA:35
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       40C43B675E5004FDC228ADF2EF5E80BB58C57AFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
Manifest number:          014E
Signing time:             Mon 01 Dec 2025 03:14:15 +0000
Manifest this update:     Mon 01 Dec 2025 03:09:15 +0000
Manifest next update:     Sun 07 Dec 2025 03:03:15 +0000
Files and hashes:         1: 3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa (hash: dW5VuKC8CHdooeWs3YbaX6t43NdWhJq8QkAY2U16Tqs=)
                          2: 3230302e32362e3139312e302f32342d3234203d3e203634313631.roa (hash: H+3fPb1aZ1im5/guMO7Te2ueR24Kkv88QTPjlxPFxh0=)
                          3: 3230302e32362e3138392e302f32342d3234203d3e203230323037.roa (hash: Qh+wLsZPKtFp5NG4vCn5F8D8h2hxZ+zrNY8cDAwCfRA=)
                          4: 3230302e32362e3139302e302f32342d3234203d3e20323131343339.roa (hash: MMkvv46DYdUmHh2HqqC4Nmofjw3BUmgorvZAXRJaJjo=)
                          5: CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl (hash: /9DuO4MaFyKuU3GKyYZpDNiqQayOmftVZ7l6oa8irk0=)
                          6: 3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa (hash: BDd25UGZydltpOab2kZokmmyEsds+xUzD/aEnSkJsaE=)
                          7: 3230302e32362e3138382e302f32342d3234203d3e203632333930.roa (hash: kUsYJfIA28DfzylZdC7kaAqI+oXKzNhg4CoejTzzLko=)
                          8: 3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa (hash: t7TL1EpAw5rM1fKwkB5TtvtstIWS0txQUDh37ZuKbI8=)
                          9: 3230302e32362e3138362e302f32342d3234203d3e203631333137.roa (hash: fK/b2WDuubQwP3UyGCNSbD9C7/WYZ/lk+kcO76rDYbo=)
                          10: 3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa (hash: zsNJihN2o37C0mARgZr5P8WePe3OfDDePGioATO7Od4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Dec 2025 19:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c4:3b:67:5e:50:04:fd:c2:28:ad:f2:ef:5e:80:bb:58:c5:7a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Dec  1 03:09:15 2025 GMT
            Not After : Dec  7 03:03:15 2025 GMT
        Subject: CN=DA499E46C596C162EF15DE9A53F285BD1E2BFA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:0d:3c:35:7d:cf:e8:c2:ac:e5:fd:d0:65:
                    6d:27:93:ee:9c:fd:56:43:18:75:ae:39:6a:75:06:
                    65:7d:05:1c:db:a3:b7:35:ed:99:68:8b:30:29:7b:
                    08:bd:4f:c1:0f:c5:c9:ff:24:6d:bd:0f:fc:c3:70:
                    63:0c:f3:c9:67:67:6e:d7:b0:b2:13:3c:36:2f:b0:
                    33:97:43:a9:e2:2e:28:a2:f0:cf:7f:1c:73:2a:11:
                    ab:00:5f:c6:1f:07:fb:a7:1e:eb:a6:b5:4b:78:51:
                    b5:bb:8b:3d:59:f0:5a:22:3e:ca:f8:4a:17:29:e7:
                    1a:db:08:ab:7b:30:dd:6a:59:eb:a0:12:80:3e:b6:
                    bc:cb:63:6b:1e:6c:f2:6a:8d:91:d4:5e:c2:31:eb:
                    24:4a:d6:73:05:e1:2d:06:03:1c:44:65:b1:56:0f:
                    21:c5:02:f3:73:04:63:19:bc:c6:75:50:01:85:2b:
                    33:e8:ab:f1:b6:66:c7:fd:00:dd:f3:1a:75:16:c0:
                    0d:d1:e0:ae:9a:7e:0d:63:b7:d3:ea:24:a3:f5:9c:
                    36:14:a6:aa:aa:24:dd:48:89:66:d9:6e:36:48:81:
                    49:b6:b6:6a:80:5e:86:d5:c7:76:0a:4b:12:45:41:
                    72:0e:6d:4d:cd:72:8d:62:6d:a5:45:e2:bb:b9:95:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:49:9E:46:C5:96:C1:62:EF:15:DE:9A:53:F2:85:BD:1E:2B:FA:35
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6c:f8:7e:aa:0d:c0:c8:95:cc:ff:77:64:a2:43:b1:62:e9:
         56:8c:a8:5a:4e:f2:a2:94:93:e8:6c:22:de:85:36:ea:51:be:
         24:ac:c7:1e:f3:2b:fd:6b:2f:a3:b4:70:d6:4c:bd:7c:e3:42:
         ae:19:6a:c9:2f:1a:bc:7d:9f:de:fd:56:0e:16:c3:4b:f6:81:
         d6:93:5c:92:fc:10:0b:0a:02:d9:ad:41:5c:1c:92:8f:81:12:
         67:d0:d1:a5:6a:69:8b:95:5f:c1:59:de:67:46:77:53:b1:1f:
         c8:74:10:c8:ad:67:8a:61:46:fd:e4:47:94:47:96:89:f2:2c:
         9c:0f:6d:9c:9e:65:15:c5:6e:ed:5d:d5:a0:2d:5e:94:7d:00:
         cf:83:fc:44:75:f2:cf:0d:74:2c:e2:a2:fc:fd:bc:64:9e:6a:
         26:b1:2b:2d:a7:5d:6c:ed:66:b8:d7:31:42:ef:2b:e8:37:01:
         44:8b:5c:41:cb:fc:e3:55:e5:fb:c9:b4:f9:4a:5f:ec:44:3e:
         a5:c6:09:23:90:3f:d8:b3:36:a3:f7:95:43:4c:f7:81:0d:22:
         bd:64:81:4a:c3:89:fe:f7:44:b4:81:ee:f1:1d:8d:66:18:58:
         4f:40:29:77:ca:66:86:cf:ea:93:2c:57:7c:ab:11:b2:2b:25:
         0d:38:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 2 00:49:33 2025 by rpki-client