This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
File:                     4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft (raw, json)
Hash identifier:          HV8x4xCOJMHrD8GCAy+saXrLeZxowfRo3bWyrvUYvFQ=
Subject key identifier:   D9:0A:11:CA:2B:3A:86:76:14:83:C7:6E:2B:BA:F3:74:89:05:E6:67
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       7762D926A058CBB5CC5C43E9DB3F8E1A677407BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
Manifest number:          0142
Signing time:             Sun 07 Dec 2025 06:18:46 +0000
Manifest this update:     Sun 07 Dec 2025 06:13:46 +0000
Manifest next update:     Thu 11 Dec 2025 13:25:46 +0000
Files and hashes:         1: 323830333a323263303a3a2f33322d3332203d3e20323634383337.roa (hash: FivkCR/URb1DB7x+IFZPaqoaXxAUPC7cmu/guUrzhns=)
                          2: 323830333a323263303a383030303a3a2f33332d3333203d3e20323634383337.roa (hash: F+uV/yW4bYMLtCPUZ1Dg117SA+oppEChPV+jAyuQ4Ls=)
                          3: 3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa (hash: WXi9FisDfDN/smKFUFwYZLvihJHnwS4WjYe6lAACNjc=)
                          4: 4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl (hash: 3hjkgtXfA+xWgpdQsuyMa7kGiy/zC6t68I9oouC7oQQ=)
                          5: 3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa (hash: lRlm9k5NI1Vutod+PMco7PWz3s5bhcsYvNKScmeljRo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 13:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:d9:26:a0:58:cb:b5:cc:5c:43:e9:db:3f:8e:1a:67:74:07:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Dec  7 06:13:46 2025 GMT
            Not After : Dec 11 13:25:46 2025 GMT
        Subject: CN=D90A11CA2B3A86761483C76E2BBAF3748905E667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:b1:72:54:cf:e6:1e:9e:b2:52:d5:dd:82:
                    17:2b:d7:96:8e:e4:12:a1:3f:8c:72:10:3f:d6:33:
                    48:c8:41:83:15:ef:22:dd:36:6b:20:1c:e4:37:6f:
                    4c:4a:e9:ee:e9:74:33:fe:e4:4f:51:d8:f1:84:10:
                    e2:b1:d4:d8:3f:cf:7d:4d:e2:64:04:0e:12:41:cd:
                    0d:cd:ef:4b:e5:91:3a:54:aa:e5:ed:37:9f:87:92:
                    3f:8e:ab:b5:fd:d1:a9:cf:91:67:9f:3e:0d:1f:e8:
                    8d:67:fa:32:5f:8c:d8:ca:e9:fc:19:65:9f:69:19:
                    0a:d3:c5:b8:d4:a1:06:a0:4a:e3:ce:b2:ec:3f:14:
                    e5:ad:75:6e:3a:df:55:6d:e4:6e:94:50:b7:db:8e:
                    2f:1e:20:fc:1e:50:f5:2e:3e:bd:6e:fd:13:43:8e:
                    da:55:79:1c:9e:b6:11:65:49:28:bf:fe:e6:da:fb:
                    a7:be:91:1b:5d:8d:f7:33:65:96:5c:7e:dc:e3:fa:
                    e3:70:6d:51:93:fe:66:a6:22:db:a0:9a:72:08:69:
                    d3:5c:01:66:e0:ed:53:dc:1e:6c:f4:31:29:25:d2:
                    63:de:47:c5:6b:b2:e6:fd:39:d4:3f:08:f5:96:46:
                    70:5f:16:b5:60:9d:f5:6c:3e:21:16:1e:e2:7a:78:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0A:11:CA:2B:3A:86:76:14:83:C7:6E:2B:BA:F3:74:89:05:E6:67
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:6f:03:ca:02:4c:6e:f4:4e:7a:49:e9:e2:c5:41:83:e2:
         ab:65:64:be:02:87:08:ae:d0:9d:4e:da:c7:a9:9f:ab:42:2a:
         8f:fd:a2:a9:5d:71:7c:21:b4:dc:f5:6e:2b:54:fa:8c:3f:28:
         49:f9:5c:39:f8:94:89:12:ff:01:29:50:ac:36:0a:39:6d:f2:
         7a:8b:70:27:bc:08:c0:e2:49:ce:7c:7f:a2:e1:04:64:14:79:
         63:3b:f7:ee:6f:43:03:20:85:44:10:f1:c4:4b:24:97:3d:81:
         7c:5a:4a:7c:7e:14:81:03:ce:57:16:57:df:19:2f:ce:61:43:
         87:e3:55:fb:67:fb:f2:38:5b:9c:32:b9:e7:7a:dd:39:ba:23:
         82:13:64:69:ad:c9:55:14:39:38:79:84:4b:5b:66:2c:6d:5b:
         0f:81:ab:d0:48:98:e4:0a:6d:4b:2b:c6:4f:f7:7a:27:a7:d6:
         77:32:ef:2d:53:5a:ee:47:42:7d:21:68:27:3d:cd:b4:c9:19:
         8c:e8:4e:d5:59:d6:fd:a7:16:d0:c2:00:d7:60:4d:02:12:73:
         28:c2:ca:3f:57:4b:d5:fa:7d:9a:c1:dd:26:b4:e9:30:d9:70:
         da:cc:75:04:41:45:13:34:67:85:46:9a:84:48:ee:f9:0d:37:
         a0:ee:c0:8a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUd2LZJqBYy7XMXEPp2z+OGmd0B70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxQUY1NEM0NkYyOUIxN0U3NThFOUY5NDYzRENGOTY1
MEM3MUE4RjAeFw0yNTEyMDcwNjEzNDZaFw0yNTEyMTExMzI1NDZaMDMxMTAvBgNV
BAMTKEQ5MEExMUNBMkIzQTg2NzYxNDgzQzc2RTJCQkFGMzc0ODkwNUU2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3bFyVM/mHp6yUtXdghcr15aO
5BKhP4xyED/WM0jIQYMV7yLdNmsgHOQ3b0xK6e7pdDP+5E9R2PGEEOKx1Ng/z31N
4mQEDhJBzQ3N70vlkTpUquXtN5+Hkj+Oq7X90anPkWefPg0f6I1n+jJfjNjK6fwZ
ZZ9pGQrTxbjUoQagSuPOsuw/FOWtdW4631Vt5G6UULfbji8eIPweUPUuPr1u/RND
jtpVeRyethFlSSi//uba+6e+kRtdjfczZZZcftzj+uNwbVGT/mamItugmnIIadNc
AWbg7VPcHmz0MSkl0mPeR8Vrsub9OdQ/CPWWRnBfFrVgnfVsPiEWHuJ6eOenAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2QoRyis6hnYUg8duK7rzdIkF5mcwHwYDVR0j
BBgwFoAUTxr1TEbymxfnWOn5Rj3PllDHGo8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjM2MzhDOERGNjkzMDAyRUI4QzA1MUE3NzhGQ0ZFMkNF
NzU3QjczNUUxQ0ZBNjY4QjNGNjAxRTdDRjYxN0Q3LzAvNEYxQUY1NEM0NkYyOUIx
N0U3NThFOUY5NDYzRENGOTY1MEM3MUE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjFBRjU0QzQ2RjI5QjE3RTc1
OEU5Rjk0NjNEQ0Y5NjUwQzcxQThGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYzNjM4QzhERjY5MzAwMkVCOEMwNTFBNzc4RkNGRTJDRTc1N0I3MzVF
MUNGQTY2OEIzRjYwMUU3Q0Y2MTdENy8wLzRGMUFGNTRDNDZGMjlCMTdFNzU4RTlG
OTQ2M0RDRjk2NTBDNzFBOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb128DygJMbvROeknp4sVBg+Kr
ZWS+AocIrtCdTtrHqZ+rQiqP/aKpXXF8IbTc9W4rVPqMPyhJ+Vw5+JSJEv8BKVCs
Ngo5bfJ6i3AnvAjA4knOfH+i4QRkFHljO/fub0MDIIVEEPHESySXPYF8Wkp8fhSB
A85XFlffGS/OYUOH41X7Z/vyOFucMrnnet05uiOCE2RprclVFDk4eYRLW2YsbVsP
gavQSJjkCm1LK8ZP93onp9Z3Mu8tU1ruR0J9IWgnPc20yRmM6E7VWdb9pxbQwgDX
YE0CEnMowso/V0vV+n2awd0mtOkw2XDazHUEQUUTNGeFRpqESO75DTeg7sCK
-----END CERTIFICATE-----