This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
File:                     0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft (raw, json)
Hash identifier:          t9Ocks6Y4L9WQpw63NxKjCIMU3r6x2g90pvh5shc1ZY=
Subject key identifier:   FC:AF:49:0D:0E:1D:94:32:3C:2B:14:69:98:4C:73:E1:FA:9F:DC:31
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Certificate issuer:       /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial:       2BB07E57AC90EC3928488F399F090FDDB0B91148
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
Manifest number:          0159
Signing time:             Wed 24 Dec 2025 06:08:22 +0000
Manifest this update:     Wed 24 Dec 2025 06:03:22 +0000
Manifest next update:     Sun 28 Dec 2025 23:09:22 +0000
Files and hashes:         1: 3133312e3136312e3233322e302f32322d3234203d3e203532333237.roa (hash: aII+rsrXDI/GaWjK8XYZ5HePEKR+vKXKtaYYq142aVY=)
                          2: 323830333a376430303a3a2f33322d3332203d3e2030.roa (hash: arvmV9/n1go30HvpDDmadIoCXCDhnKJQ6Zj5hdtG2Qg=)
                          3: 3137302e38302e3131362e302f32322d3234203d3e203532333237.roa (hash: ZIPIxHbPwceQToF6GLER9h1o/KmK32CdQpim4Eidfi0=)
                          4: 3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa (hash: 9Zmu+Kq1oDOZsE8wYHIdBUc9a455vXOjdKVhC7cgE5o=)
                          5: 0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl (hash: RJRnxes8HGFdijl+dzkDONIS/HrZP55bakXq9xtuj3I=)
                          6: 3139302e35322e35362e302f32312d3234203d3e203532333237.roa (hash: wOYS8pYAPfvxCY3gECvrSHgDdC9UC73r7fv6YYLQLUs=)
                          7: 323830333a376430303a3a2f33322d3438203d3e203532333237.roa (hash: YlN86YVc3t4QCnXbW/MTGH7DenuetIh992QbUWAr5Zw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 23:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b0:7e:57:ac:90:ec:39:28:48:8f:39:9f:09:0f:dd:b0:b9:11:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
        Validity
            Not Before: Dec 24 06:03:22 2025 GMT
            Not After : Dec 28 23:09:22 2025 GMT
        Subject: CN=FCAF490D0E1D94323C2B1469984C73E1FA9FDC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:6e:22:a3:44:63:f7:79:ec:15:ac:f3:e3:
                    61:79:e3:3f:d3:e8:57:af:2f:b4:50:79:00:be:a4:
                    27:07:64:41:33:1b:86:1d:cd:d5:e4:95:b6:52:a6:
                    48:37:b7:a3:ee:3d:ce:22:ae:16:5f:0f:c8:85:cf:
                    6b:39:14:4b:00:54:ab:81:7a:9c:e8:1d:42:4e:20:
                    68:e4:1e:c2:f9:ea:66:bb:ed:07:9a:a7:5f:6f:6f:
                    3d:55:84:8f:e1:8c:8c:ce:7a:77:86:fd:cb:ba:88:
                    20:37:36:3e:c3:b7:39:8f:4d:8b:63:eb:fc:f6:20:
                    49:d5:26:e8:fc:dc:e8:2a:76:cb:f6:c3:68:48:61:
                    69:49:78:77:50:c9:c2:9f:20:45:5b:67:d6:ca:bc:
                    27:2a:55:f9:24:21:2a:79:4f:43:e7:54:ae:e4:c2:
                    db:83:dc:44:51:01:29:16:d9:c4:d2:61:70:d8:44:
                    26:86:a9:64:0f:94:da:f8:a5:92:ba:82:7d:15:bc:
                    49:87:59:e7:f7:53:29:17:03:70:0e:86:cd:0c:ba:
                    3a:14:3f:c2:ed:f3:79:b5:e7:d8:f1:46:9e:f7:76:
                    ac:8b:75:67:d4:27:f5:79:ba:da:c7:35:06:f1:c8:
                    b7:3f:c1:a3:d7:3e:c6:10:27:4f:42:6d:73:85:02:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:49:0D:0E:1D:94:32:3C:2B:14:69:98:4C:73:E1:FA:9F:DC:31
            X509v3 Authority Key Identifier:
                keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:42:37:20:57:f4:b0:7c:74:08:76:f4:03:73:5a:56:7c:1d:
         19:c1:44:93:02:f6:e2:34:64:1d:ec:57:08:14:49:2d:32:40:
         c9:39:1d:12:34:5a:22:f6:30:ad:bf:17:a2:de:47:b3:50:da:
         31:01:77:07:bc:32:ad:8a:ad:a1:63:5a:4f:ff:c3:b3:c3:84:
         f0:9d:e8:96:ff:14:68:34:f5:7f:21:cb:88:45:3f:b6:9b:7d:
         a6:a6:e4:30:cc:15:dc:9d:f8:e3:d8:5a:e4:c3:9f:1e:5f:9e:
         42:8a:08:85:f6:61:53:bf:6f:2e:6b:a0:95:fb:4a:c6:a7:9a:
         91:73:84:0c:9b:78:9d:9d:3e:15:4b:2e:12:5d:fb:df:74:45:
         26:49:13:c6:6d:1b:d2:26:2c:de:63:b4:a8:57:1d:e0:ad:6c:
         b8:90:10:2c:e3:0c:7c:c0:50:16:c6:a5:f4:89:d1:a0:2b:4a:
         85:91:81:48:96:79:73:02:be:68:50:d9:29:29:b0:ef:87:6d:
         5f:15:13:0b:48:97:9c:ad:02:f5:34:66:da:b3:09:c7:18:7e:
         72:0b:a1:d2:25:8d:61:b4:1a:83:e5:4a:01:1a:01:bb:ee:31:
         07:ee:da:4f:54:8c:64:96:7f:e3:1b:d0:aa:cd:f8:94:c1:a1:
         34:bf:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:52:07 2025 by rpki-client