This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
File:                     CF2E2C753A200707CD61AACD7110A7372C505538.mft (raw, json)
Hash identifier:          lNTMxDOMBIVzTCcESO/BchI4ycskCfMYRR17APhnjrU=
Subject key identifier:   38:C2:68:30:4E:C3:75:DC:88:99:C1:87:AB:57:E5:A6:07:13:50:5F
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       0CAA3D38A0EB564330EA0278787C76CC1F81DDCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
Manifest number:          013F
Signing time:             Thu 18 Dec 2025 17:29:28 +0000
Manifest this update:     Thu 18 Dec 2025 17:24:28 +0000
Manifest next update:     Tue 23 Dec 2025 15:40:28 +0000
Files and hashes:         1: 3138362e3138392e3234342e302f32332d3233203d3e20323633373236.roa (hash: NgBPQazejyVb7dpLb8G2ndQyaNvK906bKF8pAgj0UXQ=)
                          2: 3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (hash: o++tbVYNGfXTgG2ZM4JDkbYUOlez3yG+fLJv7M6G6mk=)
                          3: 3138362e3138392e3234342e302f32342d3234203d3e20323634373538.roa (hash: BG+24Hw3MhpMmWLT9ajXYnmvy4L3rRESVs+ad/lUWV8=)
                          4: 3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa (hash: XXAb4s56oObfUvBVgYNZC8yyf5inJnjYBfKroaRCvtE=)
                          5: 3138362e3138392e3234352e302f32342d3234203d3e20323633373236.roa (hash: V3zCFxqDd+g8v/dU5mynO8IKLMbv79z3vmnz8bbnSf8=)
                          6: CF2E2C753A200707CD61AACD7110A7372C505538.crl (hash: HWPLpduS/eTEBnyb5CjKlGw0G1JqUShLZkTxyde5rPU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:3d:38:a0:eb:56:43:30:ea:02:78:78:7c:76:cc:1f:81:dd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Dec 18 17:24:28 2025 GMT
            Not After : Dec 23 15:40:28 2025 GMT
        Subject: CN=38C268304EC375DC8899C187AB57E5A60713505F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:d0:7a:48:21:87:a2:7c:0c:f1:1d:31:2b:
                    eb:88:2d:7e:ba:77:29:b7:11:41:68:bf:79:37:bb:
                    ea:be:bb:5d:79:f5:14:17:bc:ab:2b:94:fe:d0:ab:
                    3c:8a:d7:68:21:43:38:f1:09:b4:90:2a:cd:f5:aa:
                    a6:b1:8f:96:12:18:06:51:36:c3:f7:6b:1d:f6:89:
                    7e:2e:62:db:c4:92:59:86:ff:df:bf:09:68:ba:1b:
                    79:f8:ec:c6:63:6b:b6:5e:6b:71:ea:df:d7:0f:8f:
                    b5:f9:96:eb:8e:01:11:a5:c9:74:c0:b6:3d:76:d1:
                    84:f3:ff:76:4d:8a:d5:15:b6:54:70:57:d0:be:13:
                    8f:19:bb:79:66:1c:7e:af:4e:60:2f:90:87:ac:77:
                    53:0f:cc:82:93:2f:16:ad:dc:f6:85:bb:f6:6b:59:
                    1f:c0:dd:05:5f:aa:8e:cd:87:b6:1d:39:87:d8:b6:
                    b4:38:e1:26:8f:6c:aa:63:8a:60:44:25:9e:e0:07:
                    32:57:39:3a:5b:97:07:e6:c7:56:67:fa:c6:89:cf:
                    72:bf:6f:f0:28:a6:f5:2a:01:16:52:86:13:07:e4:
                    55:a0:d5:1d:3d:2a:00:46:67:40:40:17:2c:94:44:
                    78:96:cd:a1:4b:63:41:3c:12:7a:4d:63:51:ef:7e:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:68:30:4E:C3:75:DC:88:99:C1:87:AB:57:E5:A6:07:13:50:5F
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d2:4f:88:47:15:df:2c:02:47:82:6e:6b:94:b1:4e:fb:98:
         c8:31:a2:05:b2:e4:a6:c2:cb:aa:85:e3:75:bb:04:88:18:95:
         87:02:23:f8:82:67:9a:bd:9f:48:30:70:22:f0:4d:82:aa:92:
         f5:7f:33:ca:b5:53:4b:e0:26:2c:b4:71:96:75:1e:61:4e:98:
         89:fd:b4:cf:69:2a:fe:4d:68:a8:31:99:61:80:9e:fb:de:01:
         cb:5d:1a:60:37:81:a8:22:13:12:e1:a6:9c:36:28:a4:6b:ea:
         80:f5:c9:ea:72:2b:1f:4d:09:a4:1c:1e:ed:89:41:3d:9d:72:
         91:c8:57:18:ca:07:4c:a2:d8:3a:ee:22:67:c1:a8:5d:52:99:
         19:76:b4:65:04:c8:0a:a7:c2:5e:aa:6d:3d:d2:78:08:58:3b:
         26:72:58:ce:d2:08:df:dc:56:02:f9:91:44:0c:d6:e6:30:03:
         70:31:9b:d5:ee:95:0f:05:17:ee:37:e6:fc:cd:bd:48:49:29:
         6e:b4:81:45:06:5a:28:a5:70:cc:7a:41:f6:22:cb:09:79:38:
         d7:1d:2c:80:18:55:ad:59:14:d7:fc:80:cf:77:d2:cb:be:c8:
         b6:e1:4f:df:4e:bf:ba:8d:26:b0:72:15:e9:0c:4d:fb:5e:5f:
         70:8f:e4:33
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUDKo9OKDrVkMw6gJ4eHx2zB+B3c0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyRTJDNzUzQTIwMDcwN0NENjFBQUNENzExMEE3Mzcy
QzUwNTUzODAeFw0yNTEyMTgxNzI0MjhaFw0yNTEyMjMxNTQwMjhaMDMxMTAvBgNV
BAMTKDM4QzI2ODMwNEVDMzc1REM4ODk5QzE4N0FCNTdFNUE2MDcxMzUwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEdB6SCGHonwM8R0xK+uILX66
dym3EUFov3k3u+q+u1159RQXvKsrlP7QqzyK12ghQzjxCbSQKs31qqaxj5YSGAZR
NsP3ax32iX4uYtvEklmG/9+/CWi6G3n47MZja7Zea3Hq39cPj7X5luuOARGlyXTA
tj120YTz/3ZNitUVtlRwV9C+E48Zu3lmHH6vTmAvkIesd1MPzIKTLxat3PaFu/Zr
WR/A3QVfqo7Nh7YdOYfYtrQ44SaPbKpjimBEJZ7gBzJXOTpblwfmx1Zn+saJz3K/
b/AopvUqARZShhMH5FWg1R09KgBGZ0BAFyyURHiWzaFLY0E8EnpNY1Hvfly3AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOMJoME7DddyImcGHq1flpgcTUF8wHwYDVR0j
BBgwFoAUzy4sdTogBwfNYarNcRCnNyxQVTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDhFMjZGRjRCNTcwRTNCMENBODhFODQwRjU3ODcwQzJB
NDY1OEVDMENGODM1QTNDRjQ5QjNCNTMwQTU4Mzc0LzAvQ0YyRTJDNzUzQTIwMDcw
N0NENjFBQUNENzExMEE3MzcyQzUwNTUzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjJFMkM3NTNBMjAwNzA3Q0Q2
MUFBQ0Q3MTEwQTczNzJDNTA1NTM4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA4RTI2RkY0QjU3MEUzQjBDQTg4RTg0MEY1Nzg3MEMyQTQ2NThFQzBD
RjgzNUEzQ0Y0OUIzQjUzMEE1ODM3NC8wL0NGMkUyQzc1M0EyMDA3MDdDRDYxQUFD
RDcxMTBBNzM3MkM1MDU1MzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCz0k+IRxXfLAJHgm5rlLFO+5jI
MaIFsuSmwsuqheN1uwSIGJWHAiP4gmeavZ9IMHAi8E2CqpL1fzPKtVNL4CYstHGW
dR5hTpiJ/bTPaSr+TWioMZlhgJ773gHLXRpgN4GoIhMS4aacNiika+qA9cnqcisf
TQmkHB7tiUE9nXKRyFcYygdMotg67iJnwahdUpkZdrRlBMgKp8Jeqm090ngIWDsm
cljO0gjf3FYC+ZFEDNbmMANwMZvV7pUPBRfuN+b8zb1ISSlutIFFBloopXDMekH2
IssJeTjXHSyAGFWtWRTX/IDPd9LLvsi24U/fTr+6jSawchXpDE37Xl9wj+Qz
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:46:03 2025 by rpki-client