This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
File:                     991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft (raw, json)
Hash identifier:          674Ar9rdftbfht/6vwKW5e9kOcqj8WhJizaLOkW2iHk=
Subject key identifier:   C0:BD:B8:FD:84:FF:7F:E0:43:3D:8C:18:92:46:EF:23:06:77:27:D8
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       491A40489C13554BF9F3088CB0EE5E2EEBFCA288
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
Manifest number:          014B
Signing time:             Fri 26 Dec 2025 13:02:39 +0000
Manifest this update:     Fri 26 Dec 2025 12:57:39 +0000
Manifest next update:     Thu 01 Jan 2026 03:07:39 +0000
Files and hashes:         1: 3230312e3232312e39362e302f32302d3234203d3e203130363137.roa (hash: e/qUkjsYKIECphv86PRHW0nXTVHje+GfAmlVABgKAWQ=)
                          2: 3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (hash: wNzC8NdV3FAhY0BGfmsh0OAVAzwxh9+cJwEUEYLWMok=)
                          3: 323830333a393738303a3a2f33322d3438203d3e203130363137.roa (hash: su9GtQXbBXrz37TvNSJHGLO5vBj8F9pU0VVKdSmDqgY=)
                          4: 3230302e35392e36342e302f31382d3234203d3e203130363137.roa (hash: f53pT77amDTuBArH+WEzU3OCsT9epXBysx2Y5ijj/2U=)
                          5: 991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl (hash: 5MVVI4JiGG/f38npgRNFGCQDmOPz6O038k4icWM00wY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 23:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1a:40:48:9c:13:55:4b:f9:f3:08:8c:b0:ee:5e:2e:eb:fc:a2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Dec 26 12:57:39 2025 GMT
            Not After : Jan  1 03:07:39 2026 GMT
        Subject: CN=C0BDB8FD84FF7FE0433D8C189246EF23067727D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:49:8b:6e:d2:d0:9c:c9:d7:60:0a:1e:cb:6c:
                    28:b0:eb:0b:09:db:a0:c7:d8:41:99:a7:f9:43:16:
                    03:fb:dd:60:dd:01:fd:f9:a1:9c:67:8e:69:74:c1:
                    77:e8:b2:10:5c:19:fd:cc:c8:d3:64:ca:27:ce:cd:
                    91:ac:fe:bf:40:85:ec:54:b3:f5:79:42:d5:c6:a8:
                    57:ea:cd:de:ed:30:88:df:aa:89:23:9b:d3:a5:47:
                    ef:45:dd:21:9a:65:6a:cd:58:e3:ba:25:3d:bc:e1:
                    7f:d1:22:5b:52:a3:42:32:c0:30:0b:26:58:d3:6f:
                    b4:91:04:8f:68:b1:f7:a4:f7:03:9e:ad:79:cb:fb:
                    bb:5e:ca:e3:da:36:7e:d4:cd:63:8c:84:55:aa:78:
                    4d:8c:96:f3:fa:21:fe:d2:fb:0f:a3:c3:b7:20:f8:
                    02:59:d9:61:d2:70:14:50:16:7c:34:cb:54:6b:35:
                    40:b4:24:86:a5:42:31:87:13:57:86:36:a9:3b:c2:
                    d6:e0:07:6f:fc:b3:14:09:b6:a0:93:cd:e2:4a:39:
                    88:74:c5:c5:c7:3a:ba:6d:65:60:00:54:1d:0b:9d:
                    cd:b4:0f:87:0c:48:84:4b:f3:88:37:f1:42:e1:4e:
                    2b:a8:01:88:36:b2:30:2d:b8:62:4e:7f:77:39:a1:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:B8:FD:84:FF:7F:E0:43:3D:8C:18:92:46:EF:23:06:77:27:D8
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:bc:f2:62:4c:8c:d8:0c:ae:78:1e:2e:69:4b:d8:69:07:49:
         20:08:32:a7:5f:66:b1:21:8a:db:d6:f5:99:97:72:1d:06:ce:
         56:cb:ca:47:fa:51:83:06:70:1b:a6:e1:73:99:97:0a:c0:17:
         40:51:9a:b6:8d:56:8c:b4:2d:9d:b3:e7:48:83:13:f9:c9:8d:
         da:75:08:4b:65:1d:ab:b9:5b:bd:e5:4f:5b:fe:8b:3b:a5:0c:
         83:4f:be:99:6a:16:95:3b:d9:f4:88:05:07:9e:22:30:a8:e3:
         61:74:fe:1e:59:50:48:7b:a8:b9:5c:56:86:d4:cb:80:b8:71:
         7b:c8:e0:29:9e:34:ef:16:9a:08:ca:2f:2c:e9:7f:3f:22:2f:
         e0:8c:62:56:72:90:8d:ce:3c:88:d9:70:88:e7:9f:8c:e5:25:
         13:28:e2:3f:07:5b:f7:ce:7e:ad:f3:1a:6f:ca:ca:54:3a:12:
         e1:4f:60:60:36:0c:46:4c:6d:64:d4:a4:ba:20:3d:12:13:87:
         27:c5:89:fd:fa:32:2f:d5:b7:f2:23:5e:a9:3f:a2:38:e4:dc:
         55:1c:5e:a2:ed:85:62:c0:f1:39:16:e6:ee:e5:92:d3:87:3b:
         07:9f:ff:42:66:a8:d8:a1:e0:d0:2f:b7:85:57:50:bd:62:6f:
         38:22:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----