This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
File:                     00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft (raw, json)
Hash identifier:          urQUsUq+u8gywdq3RhtWuEnze1LzFHDQG9mshuO/yxs=
Subject key identifier:   2F:79:E1:8E:3B:60:1C:3E:16:38:0A:3C:EB:1B:26:71:1A:B3:38:71
Authority key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
Certificate issuer:       /CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Certificate serial:       2BD7D58C9F7B3D6F7DBAA8718392EAE64710B9F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
Manifest number:          0153
Signing time:             Sun 14 Dec 2025 16:09:10 +0000
Manifest this update:     Sun 14 Dec 2025 16:04:10 +0000
Manifest next update:     Sat 20 Dec 2025 06:30:10 +0000
Files and hashes:         1: 323830363a3238653a3a2f33322d3332203d3e20323635353330.roa (hash: M4lYfMwxi3LRDhmunYDA0TtGyJI5WZl72NNAQMExhuk=)
                          2: 00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl (hash: tP3lCM4cojhfPSm13/324TK8PcDjJl+8urfQXVUw9zI=)
                          3: 34352e352e35322e302f32322d3234203d3e20323635353330.roa (hash: 12SZKM9Tc45V3wT42xOjA7g6amNPvNSH/2twfURRle4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 08:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:d5:8c:9f:7b:3d:6f:7d:ba:a8:71:83:92:ea:e6:47:10:b9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
        Validity
            Not Before: Dec 14 16:04:10 2025 GMT
            Not After : Dec 20 06:30:10 2025 GMT
        Subject: CN=2F79E18E3B601C3E16380A3CEB1B26711AB33871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:9f:be:48:40:61:69:00:fd:e9:14:3f:07:
                    3c:d8:68:0f:d8:50:c4:4c:66:a0:3c:2e:f8:1a:26:
                    41:de:da:e4:6a:9a:b0:20:10:eb:23:bd:d2:7f:cc:
                    a0:28:26:4a:50:d1:67:cf:25:40:02:40:d3:59:93:
                    a0:eb:d5:17:aa:0e:20:59:b9:a6:dd:a2:59:99:cc:
                    ee:89:09:43:cf:f5:32:46:e5:8b:ff:33:2c:08:ac:
                    86:03:a7:6d:70:84:06:46:5a:0c:82:74:27:d4:f5:
                    5a:ed:0b:d4:ec:3f:c9:3a:a7:87:7c:e8:c9:27:cb:
                    5e:8b:0a:28:d4:ac:10:0c:1a:13:5b:45:ad:ce:3a:
                    61:20:87:dc:f8:f4:58:e7:e7:14:b7:1e:51:ff:88:
                    8f:7f:28:66:dd:db:81:31:f4:59:fb:e3:62:9f:f8:
                    de:f3:36:da:97:23:14:a6:1f:a1:82:5c:f0:1c:cf:
                    d3:df:a5:31:7f:5d:b7:3f:c6:ee:c3:15:e5:04:3c:
                    28:65:b6:ad:8c:22:67:12:ac:6c:cd:b5:e3:53:48:
                    0a:0a:1b:22:87:d7:5a:65:a7:21:b5:be:7e:ce:bb:
                    1d:09:b7:2e:0a:d9:a5:63:6f:92:29:50:cf:91:83:
                    cf:9d:f7:f8:a8:1c:40:ed:21:01:55:79:68:38:ff:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:E1:8E:3B:60:1C:3E:16:38:0A:3C:EB:1B:26:71:1A:B3:38:71
            X509v3 Authority Key Identifier:
                keyid:00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:bf:cd:02:1c:7c:c8:9b:e8:c1:db:b2:0f:92:be:a4:58:
         19:08:9f:fb:6e:33:c3:69:3c:df:da:2b:d7:28:83:95:11:e7:
         c0:31:dd:e3:4d:2a:70:72:38:a9:18:1f:0c:f9:2e:5b:60:11:
         0a:fc:ba:de:b3:f7:2f:23:71:0f:f3:e4:ef:00:86:6a:e7:5d:
         f7:db:1f:c7:a0:62:7b:27:90:bd:37:59:18:b7:03:81:aa:ec:
         a1:aa:a5:a2:76:ac:87:66:65:d7:6e:42:e6:85:e3:b7:ac:aa:
         66:20:c1:1f:a8:ba:0d:4f:d5:52:06:a0:90:8f:79:9f:00:7a:
         ef:3a:3e:32:f3:41:2e:94:a8:4c:81:35:df:80:25:af:48:ad:
         6a:a3:ae:0c:60:5e:90:6f:4c:6c:e3:f3:ab:10:35:7a:2f:bb:
         0f:b6:b0:74:fe:0c:9e:64:18:70:f7:30:66:75:bf:18:62:a9:
         4b:e0:43:84:e7:12:ce:d4:7c:15:1d:43:25:7a:6b:38:8b:58:
         d8:3f:dd:63:24:2f:e9:9b:78:f3:c4:18:90:53:3f:5e:96:67:
         a9:de:cf:1b:ee:ab:5e:15:e3:41:c8:76:8d:ec:9d:a2:78:70:
         11:bd:bf:dd:22:de:df:65:05:c2:12:2c:8a:8e:50:32:84:c5:
         a0:73:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:40:17 2025 by rpki-client