This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
File:                     AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft (raw, json)
Hash identifier:          6XXRqYAUOBj2HtrqVypFc1XeXKnQ5RB2Oc9EoUf2U3M=
Subject key identifier:   61:E1:40:6B:A1:2F:BA:41:FA:8A:0C:63:17:99:F2:E8:33:57:E1:DC
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       10E25F8103913DE0445F30C5C19DE081D3AD93AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
Manifest number:          015A
Signing time:             Sun 21 Dec 2025 18:15:37 +0000
Manifest this update:     Sun 21 Dec 2025 18:10:37 +0000
Manifest next update:     Fri 26 Dec 2025 16:51:37 +0000
Files and hashes:         1: 3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa (hash: Fo0urELH1hdsqSIPunOplK/MHsj//tefkcuifoqECWE=)
                          2: 3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa (hash: khexnd4MI2gNNwoPnPHS47zLooGn1gc3mrfeKvKfmzQ=)
                          3: 3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa (hash: 9NP/qLXn94xeePSynUXEHf5lLCpdv3lTav9I8/hYi9g=)
                          4: 3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa (hash: CT5Hj5Y4kRNO5ZxKt1UlHIGeZSvonJwBCnJdnH69gAc=)
                          5: 3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa (hash: dUDEvYgqIStjcsBq3FTPdHt3r73uVqW2HXbPjP3qj9w=)
                          6: 3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa (hash: GOUgeB9qbPsRESgmQKzHpbByuUIFItUpa5VvGphIk4U=)
                          7: 3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa (hash: Cn7RbvHKERkpW2NPWoc4JvBzMa5n3N2bFGFH0TFJTX4=)
                          8: 3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa (hash: uOHcKNXg5QJhaKC/+6pMfoV+Rm0Je7sIfFJVGMOaL9A=)
                          9: 3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa (hash: Ypso3ys1PVwGgrCj3GTjYZuaUxaaL9woGSWtyKDdLW0=)
                          10: 3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (hash: HA0gPdWmlQ8NT29R5jO2MUUeo21fkCMBVrbV80IO4Gs=)
                          11: 3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa (hash: 2euAAzGz+0ZKL6NaVmZgZSK2mnR0wyCNhrKZOcrK7bM=)
                          12: AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl (hash: vJq0yCLhbLJBXH7EpRZUExNpxmS2kEiALsNi4d6VaNY=)
                          13: 3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa (hash: zjrkY5FH/PeUZG5AdMWZCLOjAvMkOl4ci/uEH8GqzEc=)
                          14: 3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa (hash: D86Zi6VV+nBB/x3W83/Z27fVwfS5jBRLXipcCWEvREM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 16:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e2:5f:81:03:91:3d:e0:44:5f:30:c5:c1:9d:e0:81:d3:ad:93:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Dec 21 18:10:37 2025 GMT
            Not After : Dec 26 16:51:37 2025 GMT
        Subject: CN=61E1406BA12FBA41FA8A0C631799F2E83357E1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:90:60:16:f9:7d:43:68:bd:12:4b:12:36:
                    2d:c2:00:3d:a5:b5:b9:b5:0f:cf:38:b0:d0:01:c4:
                    0a:19:4f:ee:84:84:7f:b6:64:5a:4a:93:8a:1f:56:
                    15:69:5a:ba:e4:15:a8:87:67:be:d9:96:45:f3:3e:
                    e7:6f:d8:44:4a:18:65:ba:74:8e:3c:e4:88:c7:1c:
                    ea:08:7f:b3:b0:57:18:2f:67:a7:d5:0c:98:03:71:
                    bd:db:d7:51:26:63:a3:86:42:ef:c8:1d:b9:ac:4a:
                    8e:87:e4:53:be:ce:dc:74:e4:ab:db:25:21:03:4d:
                    00:2b:e1:12:aa:86:2e:3c:bc:c1:f9:71:20:a3:12:
                    12:bf:5e:50:0a:d5:cf:12:ff:a5:1d:d7:67:62:95:
                    9d:3a:6a:08:4e:ab:f3:3a:5b:23:f8:63:8a:62:10:
                    3b:5c:5b:fd:17:93:02:2b:7d:e4:93:ec:dc:2c:ef:
                    a3:91:e9:1d:fa:05:58:63:d6:07:38:31:12:bb:87:
                    97:62:a1:3f:fa:7d:ec:3a:b0:8e:38:6e:78:f4:7a:
                    c5:f1:63:1d:43:3a:52:2d:66:9d:a6:d4:e5:af:d6:
                    4e:89:a3:3a:33:01:4b:fd:6f:8b:b7:8c:83:0c:18:
                    d9:08:68:35:1b:0b:ca:fa:63:c9:b1:2b:e7:e4:06:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:40:6B:A1:2F:BA:41:FA:8A:0C:63:17:99:F2:E8:33:57:E1:DC
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:bc:c0:07:c8:29:0a:e5:ab:a5:ab:cb:4d:fb:74:46:49:
         e8:0f:e9:6b:16:8d:48:d7:9e:03:61:15:51:b0:f2:88:05:41:
         85:89:58:41:75:49:d7:2e:a1:50:c5:7f:c3:2c:c7:37:28:20:
         36:f4:54:87:09:43:93:44:c5:fb:24:0a:0b:74:46:a0:54:3c:
         2c:34:08:33:f4:9b:83:64:3f:0a:e0:13:4a:71:93:c6:6a:03:
         83:b8:a3:80:53:e9:e0:30:19:b1:43:86:55:1c:95:8c:4f:64:
         82:09:29:88:fe:e7:32:4f:2d:06:a5:98:fe:01:28:d4:cc:28:
         ba:93:50:4e:1b:01:08:99:e1:41:be:d3:c5:1e:21:81:0a:8b:
         db:38:52:83:39:5e:78:07:34:cf:9d:f8:35:59:42:78:dd:b1:
         fc:87:b3:53:34:40:9e:36:d2:d5:e3:7d:31:35:0c:6c:53:c0:
         5b:9e:74:2b:a8:33:bc:53:27:cc:1f:9d:88:37:a0:67:91:8a:
         4a:76:1b:2a:00:36:22:6f:26:fd:49:21:30:ec:a0:8a:b6:60:
         eb:cc:9e:79:95:28:70:7e:fc:46:08:ce:a1:e7:67:32:60:05:
         bd:92:a7:bc:72:53:33:db:00:eb:1f:9d:a4:65:bc:36:74:81:
         62:34:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:25:22 2025 by rpki-client