This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
File:                     3424CAC085E77B82A8878925FC49A646944DB380.mft (raw, json)
Hash identifier:          7cxmvUFIO8YhbsGZGvKIhct/VZ/egvb3/+Ze4MIXOQ4=
Subject key identifier:   57:0D:CC:B1:CE:C9:00:B2:2E:18:62:D4:88:5E:EB:20:CC:B3:4F:30
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Certificate issuer:       /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial:       051351C246AC45C598CB1A141239C674B8F7A1C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
Manifest number:          013D
Signing time:             Wed 19 Nov 2025 14:41:49 +0000
Manifest this update:     Wed 19 Nov 2025 14:36:49 +0000
Manifest next update:     Tue 25 Nov 2025 06:40:49 +0000
Files and hashes:         1: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (hash: EXnLTY5U73HI8SEYhr8O6uuT4l4emJMRsqDGEG/d054=)
                          2: 3424CAC085E77B82A8878925FC49A646944DB380.crl (hash: l9TYdR4XAuFO6Zjvx2kk3+gCBgeh9ba68vlBQwNLzhk=)
                          3: 3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (hash: 256L5xAhaOtJaHtIXft9UY+WCURmLfsxx/fWc1QYxOY=)
                          4: 323830333a666634303a3a2f33322d3332203d3e20323633373939.roa (hash: P8b7ZOEerp/NGHhCOgMX088+SfPKoRjkexqL8HKe8+4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Nov 2025 06:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:51:c2:46:ac:45:c5:98:cb:1a:14:12:39:c6:74:b8:f7:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
        Validity
            Not Before: Nov 19 14:36:49 2025 GMT
            Not After : Nov 25 06:40:49 2025 GMT
        Subject: CN=570DCCB1CEC900B22E1862D4885EEB20CCB34F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:a6:2c:a1:93:19:68:b2:27:31:f6:26:6d:
                    54:36:b3:5b:56:68:58:83:e2:12:91:06:b8:94:31:
                    c7:04:97:ff:72:81:05:17:9d:1d:17:da:7f:63:26:
                    9a:62:04:44:d4:3b:d0:86:d6:b9:a6:3f:41:b7:e8:
                    db:53:89:16:85:1f:ac:77:8c:f5:a5:93:9c:be:1c:
                    54:14:e7:ba:25:dd:3b:9e:c2:f1:51:2b:62:a0:b6:
                    d3:6d:41:d6:a1:34:f8:17:69:8c:a1:92:d0:80:bf:
                    75:3b:fd:51:f9:45:fb:32:a3:e8:d7:41:fc:d2:6e:
                    d7:f2:fe:44:8a:9f:47:47:e0:ff:cb:1a:d7:b7:77:
                    e5:d7:20:7b:75:57:1a:23:ab:e8:81:49:cd:75:49:
                    58:49:0f:33:60:d1:01:82:de:d9:a5:7c:b7:bb:98:
                    e8:8d:34:9b:c5:19:53:68:ad:89:91:6e:be:c7:33:
                    d6:9a:b2:57:e2:0c:b2:9c:bc:6d:92:0e:fc:f3:de:
                    22:98:de:ec:dd:2b:82:d5:dc:1a:b5:4d:73:b5:05:
                    5a:ce:5f:67:ad:b8:66:da:c5:25:10:c4:12:28:21:
                    d5:b1:40:82:40:3f:27:17:80:84:0e:1d:3d:c4:1b:
                    76:c3:9f:db:2c:41:69:2d:c3:4e:a1:3f:32:1f:6a:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0D:CC:B1:CE:C9:00:B2:2E:18:62:D4:88:5E:EB:20:CC:B3:4F:30
            X509v3 Authority Key Identifier:
                keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:8e:7c:72:91:cb:51:85:4b:4e:32:d9:a3:ea:09:28:a2:
         94:89:ab:f6:ac:39:ba:83:d3:f1:4f:e0:49:dc:78:79:f0:e5:
         d7:d7:d7:5c:0e:b0:5c:e3:e9:4b:09:87:15:5a:d4:e7:a6:46:
         e5:e8:19:bc:c4:a4:f1:f1:7c:6b:34:8d:87:ff:64:ea:a7:22:
         a0:23:b0:89:b9:ba:e6:ed:f9:95:b0:3c:b6:d7:70:76:c6:c5:
         b2:d2:0e:80:f0:dc:a0:28:cb:a2:8f:fc:80:9c:2b:7e:b8:a5:
         ab:79:a0:76:1b:f3:63:8b:34:db:ec:2d:77:78:d1:91:69:e2:
         df:d5:a1:9a:c5:1c:f6:63:d1:36:f5:bf:b2:a6:bf:91:28:29:
         25:3b:89:65:cc:3f:68:1e:23:d6:c1:78:f0:ad:2c:97:fa:3e:
         cd:e6:b5:1e:e9:b5:69:4d:72:19:16:08:c5:d1:30:8b:06:5d:
         5e:1c:63:91:7a:22:71:c1:48:2b:b8:84:6a:ef:c5:66:ec:94:
         3f:6b:16:d1:d7:81:6d:38:57:01:5a:2a:23:e2:e3:8c:d3:2b:
         b4:a5:c2:6f:54:1c:d0:2a:1f:d3:f7:82:b0:3d:2a:f5:de:15:
         bd:27:99:ab:49:7e:e0:50:4b:6c:eb:8a:fe:60:83:b4:68:59:
         71:2d:99:4d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUBRNRwkasRcWYyxoUEjnGdLj3ocAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyNENBQzA4NUU3N0I4MkE4ODc4OTI1RkM0OUE2NDY5
NDREQjM4MDAeFw0yNTExMTkxNDM2NDlaFw0yNTExMjUwNjQwNDlaMDMxMTAvBgNV
BAMTKDU3MERDQ0IxQ0VDOTAwQjIyRTE4NjJENDg4NUVFQjIwQ0NCMzRGMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfKYsoZMZaLInMfYmbVQ2s1tW
aFiD4hKRBriUMccEl/9ygQUXnR0X2n9jJppiBETUO9CG1rmmP0G36NtTiRaFH6x3
jPWlk5y+HFQU57ol3TuewvFRK2KgttNtQdahNPgXaYyhktCAv3U7/VH5Rfsyo+jX
QfzSbtfy/kSKn0dH4P/LGte3d+XXIHt1Vxojq+iBSc11SVhJDzNg0QGC3tmlfLe7
mOiNNJvFGVNorYmRbr7HM9aaslfiDLKcvG2SDvzz3iKY3uzdK4LV3Bq1TXO1BVrO
X2etuGbaxSUQxBIoIdWxQIJAPycXgIQOHT3EG3bDn9ssQWktw06hPzIfaplHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUVw3Msc7JALIuGGLUiF7rIMyzTzAwHwYDVR0j
BBgwFoAUNCTKwIXne4Koh4kl/EmmRpRNs4AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0ZBNDA4OENEOUNDQUMxQ0U3NkZDMERGMDhDRjdBOTBF
QTkzOEJGNURBRDUzQkU4ODlFQjk4MUE0NEU4QTYxLzAvMzQyNENBQzA4NUU3N0I4
MkE4ODc4OTI1RkM0OUE2NDY5NDREQjM4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDI0Q0FDMDg1RTc3QjgyQTg4
Nzg5MjVGQzQ5QTY0Njk0NERCMzgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNGQTQwODhDRDlDQ0FDMUNFNzZGQzBERjA4Q0Y3QTkwRUE5MzhCRjVE
QUQ1M0JFODg5RUI5ODFBNDRFOEE2MS8wLzM0MjRDQUMwODVFNzdCODJBODg3ODky
NUZDNDlBNjQ2OTQ0REIzODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6q458cpHLUYVLTjLZo+oJKKKU
iav2rDm6g9PxT+BJ3Hh58OXX19dcDrBc4+lLCYcVWtTnpkbl6Bm8xKTx8XxrNI2H
/2TqpyKgI7CJubrm7fmVsDy213B2xsWy0g6A8NygKMuij/yAnCt+uKWreaB2G/Nj
izTb7C13eNGRaeLf1aGaxRz2Y9E29b+ypr+RKCklO4llzD9oHiPWwXjwrSyX+j7N
5rUe6bVpTXIZFgjF0TCLBl1eHGOReiJxwUgruIRq78Vm7JQ/axbR14FtOFcBWioj
4uOM0yu0pcJvVBzQKh/T94KwPSr13hW9J5mrSX7gUEts64r+YIO0aFlxLZlN
-----END CERTIFICATE-----