This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
File:                     3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft (raw, json)
Hash identifier:          TO/pi18sQdzjP/3HR2z+8LRnz9NlBk4rqQakcC9lQ50=
Subject key identifier:   E3:E6:B4:6F:A4:6C:30:B8:B8:C5:FC:48:CF:DD:6F:10:68:5C:6E:9E
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       7A316E4D3EBB5047B66884004753801E792CB70E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
Manifest number:          0144
Signing time:             Fri 05 Dec 2025 15:46:46 +0000
Manifest this update:     Fri 05 Dec 2025 15:41:46 +0000
Manifest next update:     Thu 11 Dec 2025 06:01:46 +0000
Files and hashes:         1: 3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (hash: TwENXE9MINDzJxezpU6RLWqWFSi6cvkXDAa+XXkISdY=)
                          2: 323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (hash: MqwMNFGJ7UgbOVEQWxbU5hVaghWE/1a37kKoRYuarpU=)
                          3: 3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl (hash: Khq2+hQjua6RthCHzz21fkVkTkJyRmV0/R/DrnAXe84=)
                          4: 3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa (hash: ZFz+ldthdpJDmo4FmWZ0CAydFmaLOh635KqcOcyn6Co=)
                          5: 323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (hash: RmKEwQbfcsWn5R2wHHVzndU8+69HzL8akYJDXU4u40Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 06:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:31:6e:4d:3e:bb:50:47:b6:68:84:00:47:53:80:1e:79:2c:b7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Dec  5 15:41:46 2025 GMT
            Not After : Dec 11 06:01:46 2025 GMT
        Subject: CN=E3E6B46FA46C30B8B8C5FC48CFDD6F10685C6E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:df:7a:12:76:aa:89:5c:4c:8e:34:18:ff:
                    ce:84:01:5b:76:0e:b7:25:43:84:3e:13:d1:13:96:
                    e2:ea:af:d0:c0:bc:ce:0b:03:ef:33:ea:d6:ff:64:
                    f6:8a:99:ea:be:ee:a7:db:b6:9e:7f:5a:67:22:f4:
                    45:c3:78:a6:18:8b:b8:b2:8b:53:81:fd:da:71:c1:
                    2f:e0:92:2f:0d:ba:b1:4b:aa:36:a1:09:be:21:5b:
                    ae:41:64:1d:1b:6a:98:ac:d5:5f:cb:de:1f:98:1e:
                    70:ec:56:38:42:fd:24:53:d3:0b:1e:b9:c8:47:33:
                    40:7f:a0:6d:ee:5e:00:af:04:4f:80:f8:7f:bd:c9:
                    79:fb:f9:fb:18:05:cd:59:2b:22:ce:52:60:79:ec:
                    66:8c:4a:97:a4:65:13:28:85:ff:af:7b:b9:46:68:
                    f1:39:74:a3:6b:b8:49:d3:6c:d3:5a:5f:1e:20:86:
                    73:db:e6:12:94:0b:22:97:83:e8:07:fd:d0:7c:ae:
                    69:f1:7a:72:69:be:ff:2d:ea:89:cf:1f:12:c5:d4:
                    4b:0e:c9:a5:4d:09:47:cb:c1:85:e7:89:8e:b8:4c:
                    3d:cb:26:73:1f:ab:b2:84:14:26:02:b1:64:f6:62:
                    be:d9:08:72:96:0c:06:b2:a4:4d:e8:28:87:ff:cb:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:B4:6F:A4:6C:30:B8:B8:C5:FC:48:CF:DD:6F:10:68:5C:6E:9E
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:db:fd:5f:48:7a:8d:20:82:2e:be:cf:9d:e8:72:82:ea:
         d4:5b:0c:8d:db:7e:51:d6:66:a2:23:e2:64:c4:20:82:8a:dd:
         99:61:60:74:45:3a:3c:38:c1:42:d9:e2:b4:f1:06:e7:0c:26:
         11:25:53:cc:be:dd:1e:02:98:1f:1b:51:c2:0a:37:56:77:ea:
         5c:24:1d:35:3d:72:99:fc:da:aa:3e:d5:98:76:0e:e3:38:ce:
         c3:38:b2:65:48:27:04:ce:c0:2a:d7:12:36:2c:84:c5:e7:61:
         2b:b8:3f:0d:fb:c0:1c:26:7c:7c:90:fb:f8:04:25:f9:10:ee:
         1d:35:d1:f3:0f:0a:96:4a:88:6e:c8:73:7a:70:6b:cc:19:01:
         bc:7d:ca:49:70:70:d9:b3:8a:3a:80:27:e9:17:82:a9:fc:34:
         7d:c9:bf:a5:00:a8:73:79:e5:84:5d:2d:71:c1:2f:16:1b:e6:
         d8:29:0a:aa:e4:bd:99:a1:b3:6e:74:4f:fc:fe:34:6a:16:b1:
         80:bb:03:05:6d:5c:b8:80:e4:40:0c:5d:55:e2:2a:42:95:ce:
         85:7f:81:3f:76:61:1b:5a:f6:dd:3d:d7:f5:a9:4a:25:8d:9d:
         ba:50:63:de:ed:50:03:2f:a4:31:b9:c2:4f:a1:7e:2b:9a:e5:
         f5:04:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----