This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
File:                     CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft (raw, json)
Hash identifier:          4I8WcjTq7GF8Kwd+hEfkumzDEXnbkioPzb34eFIzZwc=
Subject key identifier:   8D:C7:56:91:37:21:D3:BB:A4:08:64:7D:7C:B9:A7:01:E4:00:C6:88
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       10E10C0294FC9B284A1A194FA590534F112174F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
Manifest number:          0149
Signing time:             Thu 18 Dec 2025 23:58:27 +0000
Manifest this update:     Thu 18 Dec 2025 23:53:27 +0000
Manifest next update:     Wed 24 Dec 2025 07:29:27 +0000
Files and hashes:         1: 3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (hash: Lp8itGX8i8BvTiHNYK6IyXru0xDfdNKADzCredWO6SM=)
                          2: 323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (hash: C3W/w2y6r/ZFYMQY4Ut83wrH6Dgf7/0VGr9hKowpp2Y=)
                          3: 3133382e39392e3133362e302f32342d3234203d3e203631343937.roa (hash: RK0nikVIaqyMaMoCsLHM0XvVg3ZPgIO9Hx7uNumFi3A=)
                          4: 3133382e39392e3133362e302f32322d3234203d3e203631343937.roa (hash: w6YQeVzBbdGX4ZtqxOWuTiF9w7pymQdvj42qCjcXegM=)
                          5: CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl (hash: MvTl61gjzEJkp43dWYfKeD5b5MSGkQu2rTrTxdWnfV0=)
                          6: 323830333a643034303a3a2f33322d3438203d3e203631343937.roa (hash: KPCzcyChvyPeehaWnhvSTDPTdKfFfKuYkiILeOULoU8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e1:0c:02:94:fc:9b:28:4a:1a:19:4f:a5:90:53:4f:11:21:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Dec 18 23:53:27 2025 GMT
            Not After : Dec 24 07:29:27 2025 GMT
        Subject: CN=8DC756913721D3BBA408647D7CB9A701E400C688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:df:70:3c:73:be:4e:22:d4:8a:0f:18:0e:
                    1b:07:ec:e8:4e:0f:c1:2f:08:b4:4a:3a:e9:38:6a:
                    07:9b:c1:9f:26:0c:29:4b:48:fc:bc:68:40:8f:38:
                    f1:0b:41:1e:ff:b3:4e:e1:f8:9d:d9:33:06:55:24:
                    2c:78:f7:ec:cb:7c:d6:21:98:f2:57:70:ce:b7:5d:
                    81:e6:0d:ac:51:f7:48:22:22:34:3a:4f:a6:52:5a:
                    e8:9c:7f:50:f7:ed:81:3c:63:16:28:48:77:71:d0:
                    48:15:4a:fc:c0:0a:8c:53:45:a9:ed:6f:c5:8a:ee:
                    7f:88:30:ef:47:88:cc:cb:c0:8d:e6:f3:49:56:56:
                    c3:54:8f:05:96:87:58:b8:43:e2:c1:3f:37:37:41:
                    5d:5b:8f:e1:44:61:c7:fc:46:9b:00:46:c6:25:a9:
                    31:ff:8e:91:4c:91:f5:2f:5a:11:2d:2d:57:9c:70:
                    09:a0:08:47:33:cf:3b:5f:b1:a6:03:13:b0:ac:a1:
                    8c:b8:d4:db:67:9b:ab:97:4c:52:66:a5:48:c7:f4:
                    bf:50:72:59:1f:9a:35:4e:2f:e6:54:74:9d:65:e9:
                    05:85:ac:97:7c:da:89:26:22:99:49:c4:28:11:75:
                    1f:c1:9c:17:ee:04:5d:a8:fb:8e:27:93:b9:24:7c:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:56:91:37:21:D3:BB:A4:08:64:7D:7C:B9:A7:01:E4:00:C6:88
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:af:b4:c2:59:c4:dc:19:87:4b:f2:12:91:be:31:55:32:aa:
         22:ec:ec:55:11:64:84:af:9f:8d:79:a1:84:a8:dc:09:1e:60:
         59:70:f9:80:2c:2a:98:0c:4f:76:05:d0:78:2f:4d:3c:2f:cd:
         3c:d5:4b:25:de:15:e8:53:04:01:4d:66:f5:14:6e:c4:e7:fd:
         ad:13:67:ed:9f:1c:a1:11:7f:df:82:20:18:c6:6a:47:bd:94:
         a3:a9:39:70:d5:ef:79:d2:25:4c:b1:79:d5:a4:69:f3:16:50:
         31:49:f1:fc:c7:90:43:48:e2:87:0c:ff:c9:e3:55:f6:13:dd:
         d3:fc:c9:39:5a:c3:89:79:f1:32:92:ec:53:f3:09:f2:c3:a5:
         01:73:e7:67:48:a9:60:2d:95:3e:04:9f:5f:bf:b5:66:7d:b9:
         3a:cd:bf:39:b6:e0:60:43:56:11:ce:7e:b3:ad:c0:1a:44:0d:
         6c:60:2f:3d:0f:ce:ba:93:8f:2a:0b:2f:6b:ad:22:54:93:de:
         dd:18:7b:37:b5:b8:a6:e2:2e:2c:3b:c4:09:fd:e3:6a:6d:37:
         12:fe:e6:8f:53:89:b7:17:1f:c2:d7:b6:d2:d4:e2:20:ad:c4:
         e6:87:7c:36:b8:f9:51:32:e2:7a:c2:3b:1c:95:53:be:32:3f:
         d3:68:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:36:54 2025 by rpki-client