This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
File:                     8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft (raw, json)
Hash identifier:          tbrx/OUKsW4+1z53h/5OIfBUUJvcqF5MaZYfw5UPEBU=
Subject key identifier:   D1:48:D5:AB:9C:F4:13:FA:BF:B9:A4:44:10:5C:04:F2:95:2E:11:CE
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       4D5FA2C892B49D17E8E4FC4090868F23791AE54E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
Manifest number:          0139
Signing time:             Sun 23 Nov 2025 21:35:24 +0000
Manifest this update:     Sun 23 Nov 2025 21:30:24 +0000
Manifest next update:     Sat 29 Nov 2025 00:00:24 +0000
Files and hashes:         1: 8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl (hash: cT8WDh/uaDLMnf6NQ5Kxst3HTPJO/kh0URreTArEMZI=)
                          2: 3138392e39302e3232382e302f32332d3234203d3e203237393838.roa (hash: eIrdvXDSgH5n+WjVCNdO8Xw5MvxaNcAUc+NXvC2KEgg=)
                          3: 323830333a383165303a3a2f33322d3332203d3e20323730303535.roa (hash: G1dwA+Pb5Y9QDiEmN4c5JBcp0aUmK+gDqHi8QvYsIjo=)
                          4: 3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa (hash: GER5rHDFJghVlntpFGz0Py+fWXKsEEXFVS4e86HbYo0=)
                          5: 3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (hash: jkPrhSfraU3dVsuxgcc4n67HF4iX97OTDFvvnzNSpK4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:a2:c8:92:b4:9d:17:e8:e4:fc:40:90:86:8f:23:79:1a:e5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Nov 23 21:30:24 2025 GMT
            Not After : Nov 29 00:00:24 2025 GMT
        Subject: CN=D148D5AB9CF413FABFB9A444105C04F2952E11CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:02:70:04:f0:53:34:be:47:95:d8:47:84:
                    de:76:49:ee:ff:20:f5:40:6a:94:4f:0a:c8:cd:c2:
                    83:16:1b:3d:35:d2:4a:2b:be:e4:c8:2c:95:df:a7:
                    c6:73:fd:f9:bd:79:3b:37:3d:84:10:eb:22:8a:1e:
                    d3:e2:22:e8:38:c2:e9:ee:f9:98:78:4c:35:ea:71:
                    a7:15:1b:7e:f7:d4:15:6d:36:ab:44:21:06:ab:2c:
                    44:27:c6:db:e0:b2:51:5d:f3:0b:c5:ef:df:6c:38:
                    c0:b3:5e:5b:7a:ce:39:0c:47:b2:37:88:09:af:26:
                    6a:60:62:9c:9f:4a:66:c5:7f:63:6c:9c:89:8e:c3:
                    ce:b6:35:d6:2d:5f:05:32:cb:ce:30:eb:92:05:cc:
                    0f:35:4e:58:5c:5b:7a:cc:c6:5e:0e:91:63:aa:14:
                    4a:46:2e:b1:13:9b:70:32:b3:19:10:91:ad:b6:50:
                    0e:ec:d3:86:07:31:29:69:0a:26:86:f6:14:39:80:
                    63:c2:07:25:63:26:87:6f:98:2d:69:31:76:4e:ef:
                    f7:cc:39:ff:f7:58:25:c0:d7:74:a7:18:c0:6e:ca:
                    c3:24:6b:97:dc:fd:9c:f0:c3:59:c0:c3:46:27:d9:
                    43:c4:31:7c:ff:81:33:29:56:d2:cb:83:fc:d1:82:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:48:D5:AB:9C:F4:13:FA:BF:B9:A4:44:10:5C:04:F2:95:2E:11:CE
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:32:29:a5:ac:ae:79:3b:9b:6b:75:ed:76:63:ec:97:94:
         47:4a:27:57:6f:67:7f:1d:81:26:46:ad:29:a1:1e:65:83:bb:
         2e:bc:92:7c:73:f4:98:85:4b:21:f1:9a:14:75:81:3f:55:0d:
         ad:3f:ce:36:60:3e:72:91:6f:c5:90:b3:d2:5b:69:87:13:e3:
         0d:0b:e7:79:52:29:e4:2d:29:03:c6:b9:2c:29:93:44:44:fd:
         00:26:08:f7:b2:72:23:b3:cc:c5:cd:12:b6:20:eb:e0:89:8c:
         54:7a:c7:9a:e7:8c:83:d9:b6:cc:3c:ef:37:25:17:71:7f:14:
         99:ab:96:ae:d9:10:e8:84:c1:d0:8a:dd:4c:8b:3b:e4:b7:6b:
         a2:aa:ed:c7:97:56:fd:9c:11:42:21:8f:3c:a8:12:f6:fb:50:
         d8:95:58:f4:10:d5:31:43:5d:3e:56:2c:82:1b:8e:81:03:f5:
         0d:52:95:2f:b9:b1:de:31:76:a8:85:34:81:c5:2d:21:ff:4c:
         ca:1f:25:7b:89:25:b8:06:9a:f8:4a:ee:86:1d:ce:79:5f:95:
         9f:23:0d:88:7e:40:ab:a9:91:ad:d3:1d:e0:4e:56:f7:72:62:
         f7:21:c5:43:9a:c2:9d:3b:29:79:fc:ee:4f:d3:7a:82:47:f4:
         e2:ae:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 21:44:21 2025 by rpki-client