This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
File:                     BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json)
Hash identifier:          c2s+8Jh/IGXk1+2ohYMO6tP71Oc87Kh8A14LvKh8Oxs=
Subject key identifier:   D5:EB:AD:EC:F2:85:D8:EA:5C:84:C4:86:31:EA:01:C5:80:82:06:6E
Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
Certificate issuer:       /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Certificate serial:       0D38BA62E48AC56080AE7289F88A5ED3396732BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
Manifest number:          0142
Signing time:             Wed 26 Nov 2025 23:42:30 +0000
Manifest this update:     Wed 26 Nov 2025 23:37:30 +0000
Manifest next update:     Tue 02 Dec 2025 19:01:30 +0000
Files and hashes:         1: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: TnOVedbp+yogJRQK4jz8NHuHBn2RuKd+k8b7N8MvRe4=)
                          2: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: BDRAqjvF9Uc2CQYpoI8LDwFCocK3tVLJJoi+jfXHO4U=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Dec 2025 08:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:38:ba:62:e4:8a:c5:60:80:ae:72:89:f8:8a:5e:d3:39:67:32:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
        Validity
            Not Before: Nov 26 23:37:30 2025 GMT
            Not After : Dec  2 19:01:30 2025 GMT
        Subject: CN=D5EBADECF285D8EA5C84C48631EA01C58082066E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:17:c2:51:81:84:76:27:f7:ab:21:50:45:
                    84:26:a9:88:f4:5b:5c:3d:ff:71:e1:f0:74:f3:55:
                    f6:58:5b:4f:10:68:98:fc:8d:94:14:f0:7c:a9:8d:
                    a3:49:29:f0:0e:d2:b8:96:bf:1d:92:4b:38:cb:a6:
                    d5:59:9f:ae:46:0b:a1:eb:bb:93:a9:24:46:98:e9:
                    10:32:ca:c5:ea:bd:48:16:07:4d:bf:3e:fc:66:b9:
                    0d:69:99:79:e3:c9:b7:b2:ce:3f:8b:57:08:74:0f:
                    52:77:f9:62:3d:9c:16:72:60:73:12:4a:23:f1:a4:
                    5b:c6:76:af:f9:3c:95:9e:19:59:21:d8:88:77:97:
                    12:87:a4:c9:e5:5a:48:75:a7:35:0c:84:7f:58:6e:
                    71:e5:ce:c9:45:d5:48:0a:9a:81:3f:40:9c:16:15:
                    2e:b8:64:77:fd:9a:78:59:c2:ab:09:b3:71:64:e9:
                    95:d3:ad:9e:ea:07:0c:1b:33:24:01:96:90:c8:dd:
                    b9:01:b4:c7:73:90:a2:12:40:2f:03:b6:4f:49:f8:
                    b0:64:2d:43:8d:34:1c:0b:a4:67:c5:c5:24:94:24:
                    9e:0a:d6:f3:0f:69:ec:92:93:50:31:c8:d9:7d:0b:
                    4c:a5:1a:06:2f:61:cb:ff:5b:00:e7:69:df:bb:fa:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:AD:EC:F2:85:D8:EA:5C:84:C4:86:31:EA:01:C5:80:82:06:6E
            X509v3 Authority Key Identifier:
                keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:87:1d:58:f8:c4:b0:9f:98:1f:78:c4:5f:cf:33:66:16:
         67:4a:a2:de:a7:bc:e7:7f:39:ff:b1:87:65:e2:79:21:f0:95:
         d8:d4:32:7d:65:54:7a:a8:76:94:8b:1e:94:c6:13:f6:a5:a1:
         be:49:02:70:1d:67:6c:81:e3:09:15:0b:d9:bd:de:31:00:7f:
         73:63:ff:9c:b3:38:14:14:9a:8a:fc:cc:b7:57:fb:de:ff:95:
         dc:0f:0f:07:bc:26:04:57:e0:67:3b:ec:14:c0:7f:56:8c:8c:
         51:25:7d:e5:3b:f6:eb:dd:3d:cc:5b:69:98:f4:65:a8:41:82:
         20:56:80:6a:29:4a:74:83:a5:4e:66:95:cf:0d:a8:a6:cf:e6:
         e7:52:03:8e:39:f6:19:38:bf:42:de:27:da:ad:ab:d7:84:e2:
         57:a1:d9:66:e7:cf:a8:88:37:6a:e6:b5:3f:b5:0c:d4:67:44:
         67:79:40:3c:5d:1c:94:55:80:38:f2:00:ca:e0:3c:13:80:53:
         38:ee:1b:79:b3:f2:e3:5c:07:77:93:04:e6:c8:c6:84:19:ff:
         0e:cc:24:d2:70:54:d3:6a:ce:0e:f1:bd:b2:58:38:72:4f:ca:
         c9:52:93:48:22:8b:df:ea:81:58:3b:22:16:6c:41:5d:55:19:
         b4:b5:ca:64
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUDTi6YuSKxWCArnKJ+Ipe0zlnMrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB
OUUzN0NDNzAeFw0yNTExMjYyMzM3MzBaFw0yNTEyMDIxOTAxMzBaMDMxMTAvBgNV
BAMTKEQ1RUJBREVDRjI4NUQ4RUE1Qzg0QzQ4NjMxRUEwMUM1ODA4MjA2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6BfCUYGEdif3qyFQRYQmqYj0
W1w9/3Hh8HTzVfZYW08QaJj8jZQU8HypjaNJKfAO0riWvx2SSzjLptVZn65GC6Hr
u5OpJEaY6RAyysXqvUgWB02/PvxmuQ1pmXnjybeyzj+LVwh0D1J3+WI9nBZyYHMS
SiPxpFvGdq/5PJWeGVkh2Ih3lxKHpMnlWkh1pzUMhH9YbnHlzslF1UgKmoE/QJwW
FS64ZHf9mnhZwqsJs3Fk6ZXTrZ7qBwwbMyQBlpDI3bkBtMdzkKISQC8Dtk9J+LBk
LUONNBwLpGfFxSSUJJ4K1vMPaeySk1AxyNl9C0ylGgYvYcv/WwDnad+7+mLXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU1eut7PKF2OpchMSGMeoBxYCCBm4wHwYDVR0j
BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2
RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD
MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz
MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5
QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0
Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKxIcdWPjEsJ+YH3jEX88zZhZn
SqLep7znfzn/sYdl4nkh8JXY1DJ9ZVR6qHaUix6UxhP2paG+SQJwHWdsgeMJFQvZ
vd4xAH9zY/+cszgUFJqK/My3V/ve/5XcDw8HvCYEV+BnO+wUwH9WjIxRJX3lO/br
3T3MW2mY9GWoQYIgVoBqKUp0g6VOZpXPDaimz+bnUgOOOfYZOL9C3ifaravXhOJX
odlm58+oiDdq5rU/tQzUZ0RneUA8XRyUVYA48gDK4DwTgFM47ht5s/LjXAd3kwTm
yMaEGf8OzCTScFTTas4O8b2yWDhyT8rJUpNIIovf6oFYOyIWbEFdVRm0tcpk
-----END CERTIFICATE-----
Generated at Thu Nov 27 14:06:26 2025 by rpki-client