This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
File:                     DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft (raw, json)
Hash identifier:          3+92V6dgpfr4jjVbH582rhSmZ40jPXG9zaC6W5RhsgQ=
Subject key identifier:   FD:0F:3E:93:15:51:2D:A1:92:AE:A1:75:EE:54:54:33:48:A6:4E:7B
Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1
Certificate issuer:       /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
Certificate serial:       0594E1828473BA514EC0F587CDB4079A80E1DBE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
Manifest number:          0121
Signing time:             Sun 21 Dec 2025 09:35:05 +0000
Manifest this update:     Sun 21 Dec 2025 09:30:05 +0000
Manifest next update:     Fri 26 Dec 2025 13:23:05 +0000
Files and hashes:         1: 3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (hash: 8BaT5YzYP3Byrwbw/93a+QLSDNZ6kwwRMriduvdD4OE=)
                          2: DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl (hash: 3bgMN/tgHMkKjfYMCKYg/QLguH2v858A398Uv44Tb7s=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 04:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:e1:82:84:73:ba:51:4e:c0:f5:87:cd:b4:07:9a:80:e1:db:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
        Validity
            Not Before: Dec 21 09:30:05 2025 GMT
            Not After : Dec 26 13:23:05 2025 GMT
        Subject: CN=FD0F3E9315512DA192AEA175EE54543348A64E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:92:d2:ea:e6:40:75:dc:d7:22:85:58:22:22:
                    78:ad:99:14:c2:61:89:9a:e9:10:14:a0:b9:16:e2:
                    67:50:d6:5c:0f:b3:d7:26:90:93:3f:27:b6:74:21:
                    1d:ec:cb:dc:5d:ae:0d:18:9a:14:65:4e:88:b8:23:
                    46:e9:e2:a3:f2:55:b6:cf:a6:63:63:e5:bf:c7:4a:
                    de:ae:54:2c:fd:fa:ad:11:8f:8c:0a:2a:2f:a4:a1:
                    3b:c6:e4:03:73:a8:29:9e:b6:99:02:37:fc:97:c8:
                    60:4c:86:5a:ac:86:86:4d:70:1b:f5:81:18:bc:f1:
                    88:73:44:4c:5e:55:43:7a:ee:ec:70:05:7a:0b:a1:
                    21:1e:fd:6f:e7:50:c9:b6:26:35:a9:97:22:c6:6b:
                    2e:6d:fd:71:95:00:5d:a9:05:f3:71:83:9d:e6:10:
                    be:5a:5d:21:16:ff:b9:10:21:f6:0d:71:66:cc:56:
                    0e:8e:4f:58:2a:fa:6a:b1:93:9b:ae:1a:c8:db:b2:
                    46:86:aa:c3:ff:dd:d4:da:53:73:d8:be:73:55:d9:
                    21:5c:37:32:70:05:e1:ba:bb:16:7d:45:f4:5b:09:
                    b5:89:c7:ab:c3:b5:0c:d6:f6:be:31:f4:90:b4:43:
                    cc:ab:60:19:b3:de:bb:0d:59:0e:1a:9e:b8:15:5c:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0F:3E:93:15:51:2D:A1:92:AE:A1:75:EE:54:54:33:48:A6:4E:7B
            X509v3 Authority Key Identifier:
                keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:84:8a:3a:63:80:22:7a:ed:ce:22:bd:a2:5c:df:16:fe:
         38:0f:e0:f2:e1:90:66:0d:24:99:70:67:bb:7b:8d:e8:f0:78:
         24:17:60:5e:76:f8:3f:ae:5c:ad:35:60:5c:27:94:59:b2:5f:
         99:7f:d1:57:70:62:ff:9a:41:d5:81:87:df:7f:ae:6c:52:d2:
         2f:1a:76:da:13:fa:0d:10:11:49:50:5c:43:cd:8c:35:79:b2:
         69:81:c0:5c:59:01:de:af:0a:c1:37:43:b2:2f:3a:2e:e3:ae:
         a7:ce:da:69:b3:32:80:c9:d5:19:8b:98:41:25:21:bc:4d:78:
         40:f9:f9:e1:91:7f:6a:3b:3a:5f:48:bb:c5:da:c2:57:ed:52:
         8f:de:7e:ed:b2:5a:0a:5e:f5:cd:82:1a:fc:bc:b3:53:4e:f8:
         10:78:b8:ac:e4:07:9e:bf:fb:4a:73:65:a2:0e:fa:c2:e6:c1:
         91:43:ee:09:83:08:58:0f:5f:42:c2:36:d6:c2:93:e2:d3:4f:
         1e:d6:5e:96:ab:ad:c4:a4:bf:89:59:4a:4a:6a:fe:ee:9f:23:
         40:4d:0c:c3:d8:99:61:19:91:84:68:49:54:09:a5:58:2f:fb:
         1a:9f:6b:14:c6:a2:b6:f0:56:49:50:67:96:f5:4d:73:a4:43:
         11:a2:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----