This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
File:                     BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json)
Hash identifier:          jzd7D8s6MZv4cMMCh9HJas/pLkapVv+hcCas00AQLLM=
Subject key identifier:   E5:F2:82:39:2A:79:37:FE:AD:C7:F4:19:EE:20:78:BF:C0:AF:A1:D1
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       7BE47896D024265B191959E4427EF8C7951F067D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
Manifest number:          0135
Signing time:             Mon 08 Dec 2025 23:33:14 +0000
Manifest this update:     Mon 08 Dec 2025 23:28:14 +0000
Manifest next update:     Sat 13 Dec 2025 21:04:14 +0000
Files and hashes:         1: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: sz3S0CVsq3kkBNYyjWtCUza1fFwzCmkYBidmyMc7Aak=)
                          2: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: +gp+nVFgHvlbQDwBw8l90JcbDYFqIVwQN8Q6fIVq9g4=)
                          3: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: TDo9I8HOIXVWiAwuFd8E4AxQPm1JNcpGri/yELkIs+A=)
                          4: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: 3F4yf6w5uucVYeEbanEoorqXbRcoMMZlCzLdVp+wdZU=)
                          5: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: qDZpwSvgwr35B4Q5Ep3KsiY0eTX8KljaiVEi2IaGUfw=)
                          6: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: nPvm3kzjbUmYOtzUojc17lqgCTEOSCYg7LLW7Gc1DQs=)
                          7: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: 7y3IFM3NwuLfRDKqbCtjdZ5YY02akKWgfUvsoylFEKE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 21:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:78:96:d0:24:26:5b:19:19:59:e4:42:7e:f8:c7:95:1f:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Dec  8 23:28:14 2025 GMT
            Not After : Dec 13 21:04:14 2025 GMT
        Subject: CN=E5F282392A7937FEADC7F419EE2078BFC0AFA1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:fc:4a:f6:76:ed:42:af:cd:69:da:ca:a2:
                    7e:af:18:6d:3b:9c:2f:b0:01:4f:a4:5b:c8:dd:83:
                    f4:e6:d3:99:62:5e:9d:83:e6:a7:2f:4a:99:22:9c:
                    77:6a:1f:dd:31:54:b0:5f:e3:0c:39:e1:bd:3b:65:
                    99:06:37:82:51:09:52:f6:66:33:82:f2:22:0b:da:
                    fb:bf:4a:d2:f0:4d:9a:85:03:fd:cc:cc:0f:6c:b9:
                    bf:5a:a9:1e:22:cd:e4:98:86:3a:a4:4d:1e:11:e1:
                    fd:14:14:74:f6:36:3c:f4:06:b3:b7:d9:63:77:ab:
                    23:d4:dd:a4:f6:28:87:8b:c5:27:ec:be:98:67:0a:
                    05:f4:ea:8f:ab:9e:fc:6d:3d:d5:61:6a:4e:2c:d8:
                    ea:83:a2:15:3f:84:0e:9d:fd:9a:ea:fe:f0:16:82:
                    ad:b2:58:d6:e5:5d:41:5f:8a:b4:6e:58:3f:b5:77:
                    0c:f0:c7:d0:27:72:54:21:2d:6b:28:e6:61:4e:17:
                    b4:3d:1d:46:f7:b9:95:70:4d:10:ae:e2:5e:5e:01:
                    00:8e:ba:b5:9c:bd:d7:63:df:7e:fe:8e:d5:a4:32:
                    1e:e7:f7:f9:c0:db:73:40:cf:a1:d4:89:e0:e5:06:
                    45:32:1f:45:21:c5:71:c0:ca:9a:02:9d:e9:74:07:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:82:39:2A:79:37:FE:AD:C7:F4:19:EE:20:78:BF:C0:AF:A1:D1
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:19:30:06:0f:43:0d:2a:09:66:b8:ca:2a:20:a7:44:0f:
         36:21:0c:28:8a:40:ce:6c:df:dc:9b:62:9c:30:be:a4:a2:7f:
         e5:88:b5:59:4a:ec:92:8c:33:bc:29:27:05:d7:c9:f3:f7:8a:
         53:43:5a:15:16:ed:47:a8:21:03:fe:62:cd:42:b6:31:be:5f:
         5a:9e:a9:60:45:e1:f0:d4:fd:5b:ae:a2:59:77:a4:4d:6f:0e:
         11:41:7a:3a:b6:55:5c:23:bc:b9:76:4a:51:c7:40:77:90:d4:
         ca:8e:4d:61:8b:52:70:31:2a:be:32:84:20:79:ed:0d:4e:6a:
         a0:0e:6a:71:00:a5:22:00:e1:d5:b5:6f:8d:fd:30:07:d2:a9:
         8b:a6:05:7c:00:d1:bd:76:88:58:e9:94:5a:4d:31:7e:9d:2c:
         38:4d:de:ab:9f:2c:3c:4b:66:a1:55:f7:8c:50:de:1c:63:06:
         fc:a3:44:78:8e:11:7c:4f:7a:90:f5:75:54:10:a3:d1:47:f2:
         d7:6d:5c:7f:33:34:f1:49:ca:d4:3a:c4:05:7c:08:40:f9:82:
         59:c3:27:2b:b9:e1:d7:d9:a5:5e:b5:2a:0d:07:04:23:31:ac:
         77:b1:ad:6b:d1:cf:00:56:ec:82:ed:21:62:9f:c2:01:27:8c:
         39:b0:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:14:09 2025 by rpki-client