This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
File:                     CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft (raw, json)
Hash identifier:          buP9gGM18hFt5/pIaLuEP18I1AFBX6zxylKLkzOFkNw=
Subject key identifier:   F9:6E:79:A4:4B:37:52:E3:E6:2C:9A:5B:17:0B:A2:0C:3D:2D:B8:D5
Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27
Certificate issuer:       /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
Certificate serial:       785B35AF9E45EAB641EFF2153B9B30A6F11D8846
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
Manifest number:          0153
Signing time:             Wed 24 Dec 2025 00:19:04 +0000
Manifest this update:     Wed 24 Dec 2025 00:14:04 +0000
Manifest next update:     Mon 29 Dec 2025 12:47:04 +0000
Files and hashes:         1: 3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (hash: wK3oeno74goU9D7+c/b55vzwIp59oFbD0eZNt8h6ig0=)
                          2: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl (hash: ouHhEXdUDEVps/UN0lDikZfVtJE1OYzBXeQdbeCc8Ac=)
                          3: 323830313a3133613a3a2f34342d3434203d3e20323730303238.roa (hash: Q1TLNayYAd06cStRkVHP3ITO3rEv1WH9iz5ULgyaMCM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 12:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5b:35:af:9e:45:ea:b6:41:ef:f2:15:3b:9b:30:a6:f1:1d:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
        Validity
            Not Before: Dec 24 00:14:04 2025 GMT
            Not After : Dec 29 12:47:04 2025 GMT
        Subject: CN=F96E79A44B3752E3E62C9A5B170BA20C3D2DB8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:98:28:d0:89:1a:4c:9e:10:cd:87:21:1f:
                    c3:d5:ad:7c:db:f3:cd:a6:91:8c:b1:af:ee:56:ed:
                    04:4f:8a:89:77:fe:db:3b:e1:c5:87:ed:73:5f:da:
                    99:91:f3:92:37:f3:a9:47:12:ea:b9:1d:4c:c4:ad:
                    c2:03:31:63:ec:79:f7:8c:09:11:7e:ba:5f:65:48:
                    57:17:3f:82:bc:fe:5e:75:eb:2a:52:a0:31:e7:4e:
                    43:e7:33:19:45:53:38:cd:54:b9:0e:a7:fa:6e:72:
                    5f:76:ee:79:d2:a1:a4:f2:46:9d:ad:b3:a5:c4:39:
                    90:31:ef:92:43:30:b8:40:9a:f3:c3:f2:0e:d7:c7:
                    02:27:72:8d:23:87:5e:b8:e7:58:8c:88:ba:86:f8:
                    e3:74:9e:21:3a:82:19:fd:a1:27:b1:a4:9c:9e:2c:
                    e9:29:39:f3:06:dd:ef:dc:57:3c:f0:f6:55:d7:af:
                    bd:74:31:a4:4c:8b:39:c3:b6:10:1b:b3:d1:b3:b1:
                    ba:51:46:0f:4d:05:67:6f:0c:99:15:a9:25:90:78:
                    b4:43:3d:47:de:e5:46:28:ad:3e:6e:6f:e0:25:d4:
                    91:ba:84:7a:69:2a:1f:55:56:6e:dd:d2:1f:8a:57:
                    8a:ab:dc:af:55:71:61:cd:d0:70:93:52:87:68:10:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6E:79:A4:4B:37:52:E3:E6:2C:9A:5B:17:0B:A2:0C:3D:2D:B8:D5
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:af:50:33:f9:00:14:ee:51:68:59:33:a1:c9:ed:e2:3f:
         d7:a7:bc:94:ff:7f:7c:ff:18:54:bc:0a:ce:f0:9d:9b:dd:76:
         68:7d:3d:c7:75:6c:82:55:a7:c5:b7:41:5f:1a:7f:c5:cc:0d:
         29:0e:68:d4:08:cc:bc:91:0b:cc:33:db:1f:18:35:60:49:9d:
         c7:94:cc:d2:38:f0:59:64:dd:ba:94:ca:3b:90:3d:ee:b4:85:
         b3:02:1f:7b:e9:26:e4:bb:40:76:ff:e4:6f:e3:4b:85:21:36:
         0a:7f:61:fe:6a:17:f1:65:a9:20:24:16:e7:1c:ce:64:af:aa:
         37:6c:16:9d:3e:da:38:ad:02:7f:5c:eb:57:9c:02:64:aa:5b:
         8b:3d:50:72:50:01:13:7f:7f:45:04:94:d6:45:92:56:b1:bb:
         6b:0e:e3:d2:96:67:9e:ee:71:a6:e4:b8:96:0f:97:51:62:69:
         f6:fd:92:00:65:fe:0b:d2:dc:73:87:33:88:93:fc:ab:4d:1c:
         2f:9a:6c:7f:d7:ea:fc:35:ce:a7:1b:1a:df:19:ad:44:72:ee:
         3b:aa:bc:95:3e:1e:e5:8c:df:30:4b:13:3f:f5:91:de:79:e4:
         7e:9f:85:cf:37:93:57:23:c7:60:a6:45:a0:20:d3:d3:d5:ac:
         73:f6:a6:8e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeFs1r55F6rZB7/IVO5swpvEdiEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQ0Q2MkE2MkNBRkJEOTlEMUFDNkNCQjZFMDczQTU1
MTg0NUYyNzAeFw0yNTEyMjQwMDE0MDRaFw0yNTEyMjkxMjQ3MDRaMDMxMTAvBgNV
BAMTKEY5NkU3OUE0NEIzNzUyRTNFNjJDOUE1QjE3MEJBMjBDM0QyREI4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0pgo0IkaTJ4QzYchH8PVrXzb
882mkYyxr+5W7QRPiol3/ts74cWH7XNf2pmR85I386lHEuq5HUzErcIDMWPsefeM
CRF+ul9lSFcXP4K8/l516ypSoDHnTkPnMxlFUzjNVLkOp/pucl927nnSoaTyRp2t
s6XEOZAx75JDMLhAmvPD8g7XxwInco0jh16451iMiLqG+ON0niE6ghn9oSexpJye
LOkpOfMG3e/cVzzw9lXXr710MaRMiznDthAbs9GzsbpRRg9NBWdvDJkVqSWQeLRD
PUfe5UYorT5ub+Al1JG6hHppKh9VVm7d0h+KV4qr3K9VcWHN0HCTUodoEGDpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU+W55pEs3UuPmLJpbFwuiDD0tuNUwHwYDVR0j
BBgwFoAUzTzWKmLK+9mdGsbLtuBzpVGEXycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUI3MDdCM0E1QjNDQjQ2QTgxMjZBMDNBN0Y0QjlFMTVG
MEQzNTY0NDhENUJGQkM0NEQxMTRENENBQTMwOEMyLzAvQ0QzQ0Q2MkE2MkNBRkJE
OTlEMUFDNkNCQjZFMDczQTU1MTg0NUYyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNDRDYyQTYyQ0FGQkQ5OUQx
QUM2Q0JCNkUwNzNBNTUxODQ1RjI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCNzA3QjNBNUIzQ0I0NkE4MTI2QTAzQTdGNEI5RTE1RjBEMzU2NDQ4
RDVCRkJDNDREMTE0RDRDQUEzMDhDMi8wL0NEM0NENjJBNjJDQUZCRDk5RDFBQzZD
QkI2RTA3M0E1NTE4NDVGMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiGq9QM/kAFO5RaFkzocnt4j/X
p7yU/398/xhUvArO8J2b3XZofT3HdWyCVafFt0FfGn/FzA0pDmjUCMy8kQvMM9sf
GDVgSZ3HlMzSOPBZZN26lMo7kD3utIWzAh976Sbku0B2/+Rv40uFITYKf2H+ahfx
ZakgJBbnHM5kr6o3bBadPto4rQJ/XOtXnAJkqluLPVByUAETf39FBJTWRZJWsbtr
DuPSlmee7nGm5LiWD5dRYmn2/ZIAZf4L0txzhzOIk/yrTRwvmmx/1+r8Nc6nGxrf
Ga1Ecu47qryVPh7ljN8wSxM/9ZHeeeR+n4XPN5NXI8dgpkWgINPT1axz9qaO
-----END CERTIFICATE-----
Generated at Fri Dec 26 00:33:52 2025 by rpki-client