This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
File:                     F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft (raw, json)
Hash identifier:          ZOfcrgIJnO8s/Kij1j79pSMn6eBEbx/2o+dKa8/q8co=
Subject key identifier:   DF:38:4C:23:28:79:3A:27:8F:01:8E:6A:A3:DD:68:E8:1E:51:9D:0A
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       4B6C9F3AEF9B73AFFCFC67150BACE3ADB1DD8221
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
Manifest number:          014C
Signing time:             Tue 23 Dec 2025 20:16:56 +0000
Manifest this update:     Tue 23 Dec 2025 20:11:56 +0000
Manifest next update:     Mon 29 Dec 2025 13:29:56 +0000
Files and hashes:         1: 323830333a386432303a3a2f33322d3438203d3e20333934363834.roa (hash: 62GYAgtZ6mXuZ4CzbSWHZpDuDoubeMI4W5J0n0L0bjo=)
                          2: 34352e3232392e33322e302f32322d3234203d3e20333934363834.roa (hash: cuVrsheh7TSa+DjUHsqT/eSondhh00t8XNOAOO3gmXQ=)
                          3: 323830333a386432303a3a2f33322d3438203d3e203238303037.roa (hash: X9i+YhNT91opPM9LNyTNlSNmJQhYss0ZABngD6m1Zjw=)
                          4: 34352e3232392e33322e302f32322d3234203d3e203238303037.roa (hash: 8CmGauGhDld3ur2dXgXRNsopRJJWHNLKunjjG5tX9F8=)
                          5: F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl (hash: dTxN2lBDvf8AcoCFUwUDO8fOUMNbmfRNlfUtqTVom70=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 13:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:9f:3a:ef:9b:73:af:fc:fc:67:15:0b:ac:e3:ad:b1:dd:82:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Dec 23 20:11:56 2025 GMT
            Not After : Dec 29 13:29:56 2025 GMT
        Subject: CN=DF384C2328793A278F018E6AA3DD68E81E519D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:11:57:8f:93:f1:32:70:18:b8:e6:ec:12:
                    d1:81:d8:d6:4f:83:2a:aa:66:c7:4a:42:dc:13:cd:
                    7a:fe:79:38:86:38:30:a7:e4:d7:25:86:f8:66:b9:
                    cb:43:4c:c8:33:00:65:a5:61:50:53:9c:81:d2:a1:
                    c7:3d:07:d5:fa:c0:ce:e6:5c:ce:37:e3:22:69:54:
                    c6:31:17:9d:b2:6c:ca:81:5b:17:e3:54:53:7c:c5:
                    3c:9b:6f:c2:ec:3b:d7:11:fa:42:ae:23:79:cc:7c:
                    ba:3c:a4:ed:d2:3d:b0:33:1f:8b:ee:07:a5:cc:2b:
                    96:b2:cb:e0:8c:ca:ab:27:21:ce:d9:5d:e3:00:19:
                    aa:c9:93:14:a4:f5:af:62:5c:03:b4:85:f6:ab:70:
                    04:2f:1a:69:3e:5f:62:37:97:43:39:9b:ef:a7:cc:
                    95:c2:c0:f3:94:f6:1f:07:b9:c2:1a:81:3a:eb:88:
                    14:e2:e0:6b:10:b0:c5:9f:a7:bd:d5:02:f1:bd:85:
                    7b:90:83:e9:03:ba:64:5e:51:4e:60:d3:4f:08:e4:
                    b7:df:32:57:ce:1d:7e:66:79:63:82:ba:9d:0c:2a:
                    ff:5a:e3:6d:6d:9b:6f:5f:e5:74:de:e6:47:2b:04:
                    25:7e:89:53:6f:bb:90:db:38:9f:e4:53:1e:2c:61:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:38:4C:23:28:79:3A:27:8F:01:8E:6A:A3:DD:68:E8:1E:51:9D:0A
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:3b:d5:6b:3c:dd:a7:38:58:10:4c:09:77:ab:83:19:1d:
         19:c7:ca:b9:83:e7:5c:39:2e:76:a2:7f:65:b7:c7:51:d1:07:
         5b:82:07:36:cd:1f:d3:fb:34:8e:42:ac:15:8f:aa:6f:e7:a5:
         7d:67:d4:bc:23:69:12:60:f5:2e:33:ea:19:ca:3a:d3:c4:d3:
         5b:3b:a8:7b:0c:62:c0:38:46:4d:b9:b8:e3:42:66:cb:74:59:
         c9:5a:da:75:a1:45:35:a1:48:c2:23:fa:96:0f:12:26:d1:01:
         36:02:19:cb:5d:ee:82:d1:32:79:ad:ec:1f:db:54:76:bb:71:
         69:8d:43:6d:4a:c1:87:55:7c:42:a2:2b:a5:d9:a1:44:9a:47:
         80:c5:7f:10:4e:6b:de:de:07:b5:6b:a6:46:89:47:cc:3e:bb:
         5a:32:f8:b6:8a:b6:70:42:72:e7:3f:b6:8e:0c:de:0b:0f:a6:
         0f:33:fd:a9:c1:8a:8a:76:f6:3b:7b:26:33:f9:64:a1:59:8e:
         11:38:8f:76:37:30:3c:dd:36:85:79:f9:4e:35:01:c7:a4:2d:
         dd:03:99:fc:23:ef:6a:f1:20:8e:98:2b:9c:21:26:90:c4:c2:
         00:7e:cc:fa:c2:e7:a4:07:29:26:44:1f:9b:44:fd:0a:c1:d5:
         d1:3e:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----