This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
File:                     991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft (raw, json)
Hash identifier:          tbXZWrS1j+vJYXyBks+09kT9X97pyjOdKKKWEdk5PDo=
Subject key identifier:   B7:63:F9:96:C4:82:1E:D8:93:C5:18:D4:72:FA:46:02:1D:F4:76:BF
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       043195F9E97DEBA182AA77EE51528F913BEC6681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
Manifest number:          013C
Signing time:             Tue 25 Nov 2025 08:14:52 +0000
Manifest this update:     Tue 25 Nov 2025 08:09:52 +0000
Manifest next update:     Sun 30 Nov 2025 17:30:52 +0000
Files and hashes:         1: 3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (hash: wNzC8NdV3FAhY0BGfmsh0OAVAzwxh9+cJwEUEYLWMok=)
                          2: 991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl (hash: 9VABEMO1RA5HcNFoMxN/itdM6chqEMVKnyR7xxBoZr0=)
                          3: 3230302e35392e36342e302f31382d3234203d3e203130363137.roa (hash: f53pT77amDTuBArH+WEzU3OCsT9epXBysx2Y5ijj/2U=)
                          4: 323830333a393738303a3a2f33322d3438203d3e203130363137.roa (hash: su9GtQXbBXrz37TvNSJHGLO5vBj8F9pU0VVKdSmDqgY=)
                          5: 3230312e3232312e39362e302f32302d3234203d3e203130363137.roa (hash: e/qUkjsYKIECphv86PRHW0nXTVHje+GfAmlVABgKAWQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Nov 2025 17:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:31:95:f9:e9:7d:eb:a1:82:aa:77:ee:51:52:8f:91:3b:ec:66:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Nov 25 08:09:52 2025 GMT
            Not After : Nov 30 17:30:52 2025 GMT
        Subject: CN=B763F996C4821ED893C518D472FA46021DF476BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:46:47:70:24:c9:f1:61:3c:39:77:99:41:
                    3e:95:31:5a:32:95:2a:bb:4c:d0:f0:35:65:7c:ac:
                    8a:0b:ef:3d:1e:91:05:32:c3:4e:df:76:b3:5d:0d:
                    16:d0:9b:4c:71:e2:23:50:30:50:ec:4f:2f:88:14:
                    24:35:2f:11:1e:73:7a:fe:0e:7a:f0:87:31:b9:45:
                    3f:83:06:92:52:ff:aa:7b:3e:be:07:14:09:d6:95:
                    58:ed:e9:66:c5:67:20:a1:8c:94:68:59:5d:74:7f:
                    ee:6c:87:0c:22:f6:72:88:04:13:b8:34:b1:4c:64:
                    74:c9:8f:7f:54:7d:c4:19:46:4c:3c:9c:c9:57:71:
                    40:b4:70:bd:8f:5d:87:f6:87:55:db:81:c6:3a:b0:
                    e6:8f:af:6c:9f:87:52:d6:73:23:34:5e:f8:e8:c3:
                    65:05:71:cb:b2:cc:18:bd:a4:f7:a1:11:4e:35:39:
                    15:2f:78:4a:b7:84:05:8b:a3:c4:6a:b6:0e:f1:94:
                    ca:8b:9b:d1:25:46:fb:3c:81:f8:3a:d0:aa:2f:bb:
                    6f:67:e5:e8:b9:cd:60:97:e5:97:48:71:58:f3:79:
                    7d:a7:32:b0:2f:bf:4a:a8:89:36:e4:e8:19:12:22:
                    5a:23:6e:36:3e:37:10:17:8c:de:6f:0a:63:da:4f:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:F9:96:C4:82:1E:D8:93:C5:18:D4:72:FA:46:02:1D:F4:76:BF
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:cc:ff:88:dc:46:97:aa:6b:46:87:87:44:04:87:a2:2f:
         29:aa:2e:e5:ad:36:c6:0a:52:05:75:93:b2:f8:f3:15:81:f2:
         66:db:56:04:73:6e:3b:6f:24:85:97:0e:74:9c:5f:ee:d5:91:
         18:35:a8:36:49:41:51:b9:03:18:70:b1:ae:0a:52:90:ff:1b:
         52:ad:fa:3a:6f:fd:27:9a:7a:6c:85:5d:6c:d2:6e:3b:ed:d9:
         0a:c3:67:d4:ee:db:28:09:49:30:2f:3b:50:b5:e1:cf:a6:f1:
         15:68:fc:fc:d3:79:6c:8f:99:8f:81:35:1e:91:d2:3b:b3:c3:
         bc:5e:49:8a:2d:d9:c3:1a:fc:e5:65:4b:5f:b4:0e:3e:75:0b:
         b7:7c:d0:2b:1e:81:d5:ad:bd:aa:af:0f:64:2c:81:5b:02:6a:
         a2:d0:f2:3c:76:3e:9f:0a:9b:f1:e9:ed:8b:1d:75:34:8e:77:
         78:a4:47:39:9a:02:c8:fa:f0:02:09:cc:21:e2:ac:01:ff:7d:
         aa:2b:42:87:f0:7c:8d:76:8f:41:1f:bb:e3:bb:ff:61:11:17:
         95:2f:95:f3:f4:e8:e5:6a:79:a8:e5:00:fe:6a:81:09:39:75:
         db:cd:05:d3:fa:17:a5:68:30:07:2d:8d:2f:0d:b5:92:2e:34:
         74:36:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----