This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
File:                     921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json)
Hash identifier:          B9Uc2ANYY3BU5AL6yVxV8R5iXPRUPR2RjuNSgaTbqII=
Subject key identifier:   5E:23:8B:07:BB:C0:77:43:80:EF:60:DB:4C:67:14:52:F1:45:A1:00
Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
Certificate issuer:       /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Certificate serial:       149EBCE29893E80226B6E8E7DA048D429350EB06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
Manifest number:          DC
Signing time:             Sun 14 Dec 2025 15:33:54 +0000
Manifest this update:     Sun 14 Dec 2025 15:28:54 +0000
Manifest next update:     Fri 19 Dec 2025 06:06:54 +0000
Files and hashes:         1: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=)
                          2: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: YdmzFSQOipuDLz2H03SbrBhR1zn10l+d64TQ9VKTEfk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 06:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9e:bc:e2:98:93:e8:02:26:b6:e8:e7:da:04:8d:42:93:50:eb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
        Validity
            Not Before: Dec 14 15:28:54 2025 GMT
            Not After : Dec 19 06:06:54 2025 GMT
        Subject: CN=5E238B07BBC0774380EF60DB4C671452F145A100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:ae:5d:de:9e:df:60:30:a6:3d:29:99:3c:
                    81:44:6f:e9:dd:c5:68:00:c8:65:16:ea:94:71:4b:
                    f6:f6:92:ec:e7:a8:11:33:93:93:e9:77:e0:b5:1a:
                    8d:e2:12:5b:51:0b:f8:89:06:93:b5:8e:f5:37:be:
                    9c:8c:68:15:fa:71:dd:90:8a:a2:19:d9:e1:f2:76:
                    a3:5f:a8:9f:ad:da:ae:81:43:b1:42:94:37:e1:be:
                    5d:bd:ca:67:ed:f2:e4:1a:f6:52:29:28:e8:15:34:
                    a3:b3:76:76:79:ef:46:ce:c3:23:70:19:71:68:6a:
                    aa:86:34:f6:a7:f2:c2:88:99:87:91:0a:1e:2e:85:
                    5c:02:99:77:f5:39:7c:95:93:e2:eb:6e:db:15:f4:
                    6a:98:fc:b1:78:d7:f5:c6:10:57:77:78:c1:b1:20:
                    14:4a:f7:ba:18:3f:c4:10:5c:d1:a5:65:4d:e0:54:
                    ba:09:d9:85:44:12:9d:3f:33:5a:a8:9a:54:09:a4:
                    ce:30:62:34:2c:56:ef:84:73:e6:d2:de:ec:17:58:
                    7c:6a:75:d4:ad:59:54:0e:0b:e2:05:d2:9c:1c:b0:
                    ff:1f:31:14:74:1f:cc:48:dc:29:24:f0:30:4a:4f:
                    bd:f0:c0:7e:b6:90:97:df:38:0c:80:e2:ac:64:f8:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:8B:07:BB:C0:77:43:80:EF:60:DB:4C:67:14:52:F1:45:A1:00
            X509v3 Authority Key Identifier:
                keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:4c:fa:dd:22:79:d9:27:a9:ae:34:1b:9e:75:7f:12:a6:
         e7:ee:9f:1d:fa:68:ec:b3:73:bb:9c:a8:16:9d:26:e5:5c:74:
         b0:99:e4:9d:06:f5:10:c1:29:6f:76:41:9b:cf:2a:d3:6b:7d:
         03:0b:05:54:38:27:bd:37:39:95:b8:9f:07:34:68:6f:6a:55:
         88:81:9a:cb:49:af:cf:a7:f9:1b:d2:c7:25:43:b0:cd:41:95:
         3f:5c:3c:d0:54:e6:2b:9a:a0:f7:d7:9f:ad:b6:4a:cc:27:78:
         d9:fb:96:ff:fb:47:6b:cd:e1:a6:ed:c9:34:73:30:8f:b8:d1:
         bf:d3:01:e3:37:48:65:0c:dd:94:20:14:d4:48:36:6a:22:6f:
         a0:ff:54:96:63:48:d3:3c:74:05:2d:8b:d2:ba:04:95:e9:f2:
         28:20:80:2b:de:aa:f8:d6:99:f3:ac:b5:97:90:68:bc:f2:b1:
         de:77:69:93:25:86:f4:33:7e:82:95:b0:9f:56:dd:09:bb:90:
         de:3a:1d:b2:6d:b9:80:bc:00:5e:73:91:f2:49:90:96:4e:53:
         95:e2:a3:5e:68:1d:f4:4d:95:7c:e1:0d:f7:8e:37:cc:00:f4:
         60:15:c5:2a:b3:bd:c9:1f:1d:68:8a:d0:fb:06:83:b5:79:2b:
         60:41:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----