This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
File:                     CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json)
Hash identifier:          DvJA8lw7lOl6SXdY7Z5fIdz4JqvlEWAcEErgcqhoZR8=
Subject key identifier:   17:E9:8D:F2:CD:88:FC:70:2B:5B:27:E5:D9:E8:33:B5:49:37:56:69
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       52D2BE3DCD06B9B7AD53276D37C44D88B8924E9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
Manifest number:          0149
Signing time:             Sun 07 Dec 2025 08:04:48 +0000
Manifest this update:     Sun 07 Dec 2025 07:59:48 +0000
Manifest next update:     Thu 11 Dec 2025 08:32:48 +0000
Files and hashes:         1: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: 2dAG7U5n47XTp12aSGxvzNB0rrTxyRySK9VodyiPoqQ=)
                          2: 3138352e37342e31362e302f32332d3234203d3e203336343534.roa (hash: 5hN2NJOMlsMqgRJfpQa/xPxQxH45stlb9cVIjWuo9mE=)
                          3: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: LECpA5bPBejVOnzCUoO1kdwDq77N413G1QKuYnH703M=)
                          4: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: AA9n1lVR5HX9REgcEvpVDwT20zFoSkoU8JDEA1qlUsc=)
                          5: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (hash: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=)
                          6: 3138352e37342e31382e302f32342d3234203d3e203336343534.roa (hash: /s6vyPqjFsCBzbl7k2i7VjFnyweu8raSTCp18y5qPow=)
                          7: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: fRpzL8w7EOYAhYrWWonyr1dc/FZXF8i08kv7RAJzly4=)
                          8: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: vREyyI+AZN7N3SkaHJXvgZvl0PshHIYkwZO60lmC2W0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 08:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:be:3d:cd:06:b9:b7:ad:53:27:6d:37:c4:4d:88:b8:92:4e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Dec  7 07:59:48 2025 GMT
            Not After : Dec 11 08:32:48 2025 GMT
        Subject: CN=17E98DF2CD88FC702B5B27E5D9E833B549375669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:29:4f:53:fd:3f:46:79:50:14:52:4a:9e:ca:
                    54:b3:42:9f:93:99:b4:1b:33:72:cc:07:c6:c3:fe:
                    92:0a:1d:23:a9:a4:34:d5:f4:17:a2:17:63:62:c8:
                    2d:be:89:68:11:86:6b:f8:96:e1:b1:4b:7c:83:fa:
                    71:c8:6a:1d:08:d6:e9:87:ef:23:52:aa:28:69:73:
                    8e:20:6c:85:28:f6:6d:12:04:24:cf:11:f7:03:70:
                    0a:e3:99:0a:3e:72:b4:ad:1b:18:e5:e6:40:d8:c6:
                    a2:c6:c5:b6:39:c4:93:cf:4b:49:ac:38:56:f5:fd:
                    61:c4:4c:3d:17:d1:98:4e:61:22:6e:80:75:4d:87:
                    20:7c:1e:89:93:22:fb:f5:f5:7a:43:27:2b:00:00:
                    e8:7a:e4:83:90:b8:4a:6b:08:a7:86:5b:f4:c3:c6:
                    fc:b9:b8:9c:94:3e:5c:f0:a3:17:28:6e:b8:0b:df:
                    a3:79:90:78:dc:55:59:9a:5f:b9:14:27:99:fa:54:
                    ba:28:5d:ac:52:dd:0c:11:5f:4c:68:87:7d:59:57:
                    4f:96:53:54:9b:56:bd:85:c2:7f:aa:d1:aa:e1:f9:
                    6f:42:5f:a9:a6:79:6e:a8:0d:32:f5:bb:df:37:80:
                    a6:6a:18:fe:dc:31:23:84:9b:67:6f:a4:3c:e4:81:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:8D:F2:CD:88:FC:70:2B:5B:27:E5:D9:E8:33:B5:49:37:56:69
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e7:9e:0b:b7:79:cd:92:b1:47:e9:a0:64:be:ff:a5:22:df:
         3e:17:53:0c:55:69:ec:38:28:ee:48:3f:11:7d:b9:18:7a:22:
         a7:26:14:08:05:2b:1b:ac:ba:c0:dc:6e:ff:a0:3f:6f:71:a5:
         6d:f5:99:96:17:ad:1b:a1:f0:42:41:81:d3:bc:29:0b:9e:ed:
         0f:b9:1d:cf:40:cc:d1:ce:f4:10:d8:4b:02:50:df:93:26:44:
         ad:35:2e:8e:12:d7:30:46:61:61:3e:3b:c5:da:9c:e3:65:ad:
         92:c3:45:a8:c9:52:58:48:57:76:71:b8:ed:db:22:9d:9e:43:
         56:d0:3d:c1:a5:e9:9e:ef:7d:7e:95:9e:2d:a9:4f:a9:24:72:
         b6:9f:bf:77:f9:73:f5:d0:9c:13:13:26:e1:fe:d2:8b:45:60:
         41:05:60:07:64:4b:82:d8:33:22:db:28:55:31:68:cb:7b:c5:
         96:18:5b:0b:a0:85:62:09:6f:64:5a:81:b5:78:a4:df:e2:02:
         3e:a9:03:17:5a:90:22:ba:da:12:cc:a0:9b:d4:fb:27:0b:d6:
         ac:ff:94:f1:cf:e6:c9:9e:20:f7:95:02:da:0e:45:41:df:39:
         de:57:4b:5f:e6:61:b1:5f:95:27:55:73:cb:18:48:7a:4b:1a:
         0a:0c:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:40:30 2025 by rpki-client