This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
File:                     921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json)
Hash identifier:          BtQGGRnbSe5mI/xmLUl79c9VGEbgyu0JgtsAcSzsBIk=
Subject key identifier:   76:92:5B:A5:EE:A3:6D:D4:31:F1:E8:33:39:D5:4A:B7:8E:6C:34:B3
Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
Certificate issuer:       /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Certificate serial:       080C8B6761340D3D2D72CF6B90AAE38F964BA351
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
Manifest number:          D9
Signing time:             Sun 07 Dec 2025 02:31:12 +0000
Manifest this update:     Sun 07 Dec 2025 02:26:12 +0000
Manifest next update:     Fri 12 Dec 2025 00:56:12 +0000
Files and hashes:         1: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=)
                          2: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: 0e8cfV1tPuZRz7KJs3v9+dm0ahZX5ubyMeBSZT4c9jo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:8b:67:61:34:0d:3d:2d:72:cf:6b:90:aa:e3:8f:96:4b:a3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
        Validity
            Not Before: Dec  7 02:26:12 2025 GMT
            Not After : Dec 12 00:56:12 2025 GMT
        Subject: CN=76925BA5EEA36DD431F1E83339D54AB78E6C34B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:a7:5f:7d:10:d2:1a:7c:4e:a7:62:84:1a:
                    1e:77:f2:3b:97:07:d2:e6:88:8f:64:16:d3:0b:52:
                    2b:35:2c:41:ef:4c:bd:20:8c:4e:eb:dd:f5:bb:67:
                    04:1f:ac:a0:83:92:0a:ed:2b:8e:9b:54:5c:fc:14:
                    ec:10:bd:85:39:cf:b2:97:7e:2c:12:ae:e6:32:20:
                    43:c2:37:25:32:68:9e:ba:f5:a0:d5:78:c7:b5:a9:
                    82:4c:5b:ad:22:5a:cd:8a:d6:eb:76:de:a1:3e:85:
                    b2:c2:ff:4f:36:e0:70:87:55:bd:60:f4:1c:d6:98:
                    a5:6a:9b:b5:ff:2f:09:6d:d8:f7:d3:27:3f:eb:f9:
                    95:66:98:3c:ee:d7:1b:48:e8:f2:5f:cd:0b:7a:9f:
                    86:1e:ea:18:ce:dc:7c:54:7b:a0:8e:47:38:93:df:
                    f7:9f:f3:d2:85:35:dc:8c:e1:94:a7:e1:1c:ca:3e:
                    b1:46:80:4b:52:82:c6:14:79:f5:6b:4c:58:08:d7:
                    47:c5:ab:fd:dd:3a:d7:6c:ce:86:37:53:f1:11:3b:
                    e8:ca:21:ac:ad:9a:26:d1:27:56:de:e7:e5:2d:25:
                    3a:9c:e2:d6:3d:52:e5:02:38:50:db:2b:88:9c:e9:
                    c9:9d:9a:ee:19:eb:53:4c:6e:1c:35:a9:5c:3d:e0:
                    7e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:5B:A5:EE:A3:6D:D4:31:F1:E8:33:39:D5:4A:B7:8E:6C:34:B3
            X509v3 Authority Key Identifier:
                keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:2b:75:89:ee:4b:bd:19:1f:e3:6f:85:62:19:71:a3:12:
         2a:28:d3:76:53:c7:a3:f3:d7:4d:f0:fd:73:74:75:37:48:fc:
         65:83:a5:d1:bb:e7:16:07:62:89:4c:a8:67:03:6b:3b:1a:1c:
         98:5c:97:95:3f:94:e8:e8:c4:f1:d1:a0:e6:24:85:ff:87:4d:
         58:a9:5c:66:99:37:c3:2b:e2:02:96:cf:d2:b8:62:ea:86:f3:
         5d:12:f7:d7:64:d8:22:26:08:eb:d2:85:fd:e3:b7:63:87:14:
         af:22:fa:35:4b:b4:5f:b5:49:b5:d7:0f:15:bc:44:47:54:e8:
         b9:99:94:6d:94:7c:2f:54:99:bf:33:c2:0f:c6:a5:37:0d:ad:
         d6:c2:03:20:01:24:92:c7:88:e9:a3:94:f3:ac:32:42:0e:33:
         fe:1d:0a:ee:e5:f5:db:14:85:6d:4a:ac:29:b9:fb:47:79:ae:
         13:54:aa:9f:61:ce:71:e9:3c:cc:a2:92:93:5b:51:2e:69:a8:
         c1:14:70:af:fb:18:e2:16:c0:7b:af:8f:cb:c5:78:33:a5:ee:
         df:06:b3:2e:c8:9f:f3:e4:72:24:e2:6b:9c:d5:5d:7a:d2:da:
         00:a8:9a:25:83:1d:25:d7:7c:d1:57:ed:17:28:83:20:35:9d:
         23:e7:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----