This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
File:                     87170FE663930DA5DB9475CEAC8B0600B2C02832.mft (raw, json)
Hash identifier:          w4Zybyrgghg2TMwAogjZO2ty6Fxi/v7Y9DUqvlL3rCM=
Subject key identifier:   3C:DA:E5:01:3E:E5:8C:42:78:03:27:9E:35:AD:EA:E9:13:59:75:F5
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       119990BDD983422CD976A0724635867EB106EA53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
Manifest number:          0151
Signing time:             Thu 25 Dec 2025 14:58:21 +0000
Manifest this update:     Thu 25 Dec 2025 14:53:21 +0000
Manifest next update:     Mon 29 Dec 2025 18:36:21 +0000
Files and hashes:         1: 323830333a396332303a3a2f33322d3438203d3e20323634363638.roa (hash: rmMxfKrnSDJ43xn1Q+YFMJiUy1YJEcYqk2fQ47p4rdQ=)
                          2: 323830333a396332303a3a2f33322d3438203d3e203532343638.roa (hash: mRo4lP93EKeRz0S4vNIb9qjNwQ+e+xpT1i37DdvawBQ=)
                          3: 34352e3232342e39382e302f32342d3234203d3e203237393437.roa (hash: dGCos2FWMySnjSbdirGOXhzsGJPh2tSrt8vTNT0J4wo=)
                          4: 87170FE663930DA5DB9475CEAC8B0600B2C02832.crl (hash: CO+UMEgTsE0G61orzF5rRDl2bqZ3GB6BwICkW9q0epg=)
                          5: 34352e3232342e39362e302f32322d3234203d3e203532343638.roa (hash: r0Z70bC6+VS+TRPE588ntd5N8LAkM7HkBfKbbR7wyzw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 18:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:90:bd:d9:83:42:2c:d9:76:a0:72:46:35:86:7e:b1:06:ea:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Dec 25 14:53:21 2025 GMT
            Not After : Dec 29 18:36:21 2025 GMT
        Subject: CN=3CDAE5013EE58C427803279E35ADEAE9135975F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:57:1f:83:19:20:9f:5c:9f:9e:46:84:3e:
                    9b:bf:9f:f3:d8:73:50:13:ed:09:ac:04:d0:5d:0a:
                    61:25:e8:0d:ca:54:79:17:98:fc:d7:6b:5c:8b:7b:
                    7e:d6:e0:d0:36:4b:9f:10:9f:8f:54:6f:e5:31:2f:
                    39:81:6e:a9:64:da:0b:22:75:ad:aa:ce:40:90:51:
                    54:26:d0:77:90:1e:8d:61:08:3a:5b:a8:00:eb:a3:
                    37:39:67:e9:e9:c2:ca:bf:34:61:4a:a4:2a:f1:aa:
                    cd:b3:89:a8:83:d8:bb:94:3e:8e:5e:5f:81:3e:2b:
                    29:3d:e4:5f:91:0b:78:57:51:77:e9:07:d9:92:7a:
                    89:ee:62:a5:bc:94:c5:34:63:b1:94:98:d5:e9:b3:
                    fd:f5:05:97:30:7c:50:14:43:cc:90:ce:47:2c:1f:
                    a2:9f:92:8f:95:6f:aa:15:9d:cf:c6:e2:1b:6b:39:
                    d5:19:43:d8:7f:4b:0d:84:6f:59:6d:00:b3:f2:a6:
                    29:53:55:95:ba:6b:b0:9a:0b:68:42:6a:f7:e2:fa:
                    a8:52:7f:3c:55:5b:c3:2e:04:6b:c8:1d:ee:5f:a2:
                    16:a2:ef:3b:29:1b:ac:61:43:8b:6e:aa:46:73:a3:
                    8f:99:2c:55:dc:07:08:8f:6f:f6:0a:3d:43:e9:9d:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DA:E5:01:3E:E5:8C:42:78:03:27:9E:35:AD:EA:E9:13:59:75:F5
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:47:22:49:55:54:9e:85:d3:ab:90:3b:58:3b:a2:3c:8e:62:
         3b:51:9a:df:4b:25:54:93:aa:08:53:d7:45:9f:51:da:9e:0f:
         e7:77:9c:0d:4f:2c:42:06:34:8c:f0:36:be:a5:36:ea:73:08:
         6b:c7:9d:0c:bf:d3:8d:b6:c1:a8:27:cc:d3:3c:9f:ca:81:6a:
         05:97:c8:98:b7:66:cb:38:0a:95:92:a7:8d:58:2b:db:c8:1a:
         b7:fb:ec:b7:32:0d:1b:5c:24:97:cd:8d:ca:4a:77:6f:f3:f7:
         17:80:84:7b:41:6d:1f:c7:84:1d:99:94:f6:33:30:a8:aa:02:
         2c:9f:6f:8b:45:bb:9d:fb:86:97:cd:01:e3:39:ac:6c:40:a8:
         0b:37:60:83:32:38:a2:30:b7:e9:82:f1:8f:d0:89:9c:88:a8:
         89:98:b3:2b:96:34:12:a7:eb:78:e7:2c:1d:02:69:9e:25:63:
         f6:3d:63:4d:45:a4:e2:32:74:3c:9d:f8:ed:3f:dc:df:02:f6:
         64:5e:21:c6:7b:46:12:c2:22:cb:f0:12:73:eb:a9:ea:83:bc:
         a8:bf:f6:a1:5d:13:3f:b5:6b:ac:ad:60:36:01:ef:91:43:86:
         e8:51:da:5f:1b:64:ff:b6:d1:3b:bb:41:1b:5b:50:32:a2:04:
         82:3c:e5:2a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEZmQvdmDQizZdqByRjWGfrEG6lMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxNzBGRTY2MzkzMERBNURCOTQ3NUNFQUM4QjA2MDBC
MkMwMjgzMjAeFw0yNTEyMjUxNDUzMjFaFw0yNTEyMjkxODM2MjFaMDMxMTAvBgNV
BAMTKDNDREFFNTAxM0VFNThDNDI3ODAzMjc5RTM1QURFQUU5MTM1OTc1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY1cfgxkgn1yfnkaEPpu/n/PY
c1AT7QmsBNBdCmEl6A3KVHkXmPzXa1yLe37W4NA2S58Qn49Ub+UxLzmBbqlk2gsi
da2qzkCQUVQm0HeQHo1hCDpbqADrozc5Z+npwsq/NGFKpCrxqs2ziaiD2LuUPo5e
X4E+Kyk95F+RC3hXUXfpB9mSeonuYqW8lMU0Y7GUmNXps/31BZcwfFAUQ8yQzkcs
H6Kfko+Vb6oVnc/G4htrOdUZQ9h/Sw2Eb1ltALPypilTVZW6a7CaC2hCavfi+qhS
fzxVW8MuBGvIHe5fohai7zspG6xhQ4tuqkZzo4+ZLFXcBwiPb/YKPUPpnXbdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPNrlAT7ljEJ4AyeeNa3q6RNZdfUwHwYDVR0j
BBgwFoAUhxcP5mOTDaXblHXOrIsGALLAKDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOEY3NDlEMTVBMjM5RTc3MTFDNUJCRkNEMTc5RTAyMjE5
MjhCQTRGM0VCQkM3NUIwRTA4QzEyQTdFRjI4RTY5LzAvODcxNzBGRTY2MzkzMERB
NURCOTQ3NUNFQUM4QjA2MDBCMkMwMjgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzE3MEZFNjYzOTMwREE1REI5
NDc1Q0VBQzhCMDYwMEIyQzAyODMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjhGNzQ5RDE1QTIzOUU3NzExQzVCQkZDRDE3OUUwMjIxOTI4QkE0RjNF
QkJDNzVCMEUwOEMxMkE3RUYyOEU2OS8wLzg3MTcwRkU2NjM5MzBEQTVEQjk0NzVD
RUFDOEIwNjAwQjJDMDI4MzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgRyJJVVSehdOrkDtYO6I8jmI7
UZrfSyVUk6oIU9dFn1Hang/nd5wNTyxCBjSM8Da+pTbqcwhrx50Mv9ONtsGoJ8zT
PJ/KgWoFl8iYt2bLOAqVkqeNWCvbyBq3++y3Mg0bXCSXzY3KSndv8/cXgIR7QW0f
x4QdmZT2MzCoqgIsn2+LRbud+4aXzQHjOaxsQKgLN2CDMjiiMLfpgvGP0ImciKiJ
mLMrljQSp+t45ywdAmmeJWP2PWNNRaTiMnQ8nfjtP9zfAvZkXiHGe0YSwiLL8BJz
66nqg7yov/ahXRM/tWusrWA2Ae+RQ4boUdpfG2T/ttE7u0EbW1AyogSCPOUq
-----END CERTIFICATE-----