This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
File:                     8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft (raw, json)
Hash identifier:          SQJHXU7XOCdeiuuCUa/4j8tfaD1twCJOyDtV2X2XeQk=
Subject key identifier:   BD:38:95:D4:63:88:4C:FF:92:ED:5F:31:22:D9:AC:57:0B:C4:3E:34
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       7587648C8B3FDA9FCF58116C04F6EDBD40D97795
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
Manifest number:          014B
Signing time:             Sun 28 Dec 2025 10:51:48 +0000
Manifest this update:     Sun 28 Dec 2025 10:46:48 +0000
Manifest next update:     Fri 02 Jan 2026 05:19:48 +0000
Files and hashes:         1: 323830333a383165303a3a2f33322d3332203d3e20323730303535.roa (hash: G1dwA+Pb5Y9QDiEmN4c5JBcp0aUmK+gDqHi8QvYsIjo=)
                          2: 3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (hash: jkPrhSfraU3dVsuxgcc4n67HF4iX97OTDFvvnzNSpK4=)
                          3: 3138392e39302e3232382e302f32332d3234203d3e203237393838.roa (hash: eIrdvXDSgH5n+WjVCNdO8Xw5MvxaNcAUc+NXvC2KEgg=)
                          4: 8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl (hash: L7tx2PV7Tc8bj+uU7wYU/Pxg8le3Fanw5WpE6xy5AuA=)
                          5: 3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa (hash: GER5rHDFJghVlntpFGz0Py+fWXKsEEXFVS4e86HbYo0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 03:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:64:8c:8b:3f:da:9f:cf:58:11:6c:04:f6:ed:bd:40:d9:77:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Dec 28 10:46:48 2025 GMT
            Not After : Jan  2 05:19:48 2026 GMT
        Subject: CN=BD3895D463884CFF92ED5F3122D9AC570BC43E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:ef:92:e8:42:c7:fa:92:cc:3c:b1:22:72:
                    c8:7a:6b:14:0a:c4:18:91:19:d1:c8:c5:a3:ff:a2:
                    b5:a1:7b:e7:9a:58:5e:14:88:e9:07:18:7f:9e:6c:
                    49:12:a6:a9:af:6b:bb:e9:17:d4:2a:51:51:38:35:
                    bd:1c:46:cd:9c:fb:f7:cf:ee:82:13:d3:aa:88:2e:
                    08:35:04:94:90:ef:2d:e3:5a:55:ca:e7:33:23:d2:
                    f6:57:2a:a8:10:c4:04:60:6e:df:ca:92:dd:d2:d4:
                    82:91:57:28:dc:17:e9:8f:f1:b5:2e:a6:73:8e:7c:
                    a7:24:7d:de:96:78:be:8e:7a:f4:b9:be:46:da:b6:
                    5f:f1:31:02:aa:88:a5:f1:b2:d4:03:6a:34:a1:8f:
                    8b:92:62:b0:e6:d7:2a:fc:d2:8b:db:29:b5:58:63:
                    8e:b8:b8:81:52:72:df:33:c6:04:84:87:81:84:f4:
                    a1:59:a9:37:b7:14:31:74:b3:b8:32:20:da:04:b5:
                    ab:eb:b4:84:a3:e0:c2:50:62:5c:c7:ff:1e:56:61:
                    4e:ec:50:63:31:93:90:3a:62:01:28:a1:fa:29:99:
                    e8:5d:5c:ac:59:6f:78:ab:84:49:9c:1c:bb:47:88:
                    6b:f8:16:f2:e8:fa:bf:97:29:3d:21:c0:60:fd:a1:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:95:D4:63:88:4C:FF:92:ED:5F:31:22:D9:AC:57:0B:C4:3E:34
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:89:64:2d:be:b6:7f:a7:b9:7a:72:6a:d0:fa:a6:4b:0f:
         2f:ca:f0:24:c9:58:3c:f7:f2:76:38:32:67:b2:8b:52:5b:f0:
         fd:79:7e:4e:8e:de:3a:96:e6:95:2b:4b:65:87:2b:36:2a:51:
         8c:b6:39:2f:05:d1:66:67:a5:60:c5:2f:5d:4c:9c:4f:9b:1d:
         0d:42:a6:ef:5c:ca:85:fc:fd:cb:a9:c0:22:fc:6c:bc:0d:e7:
         63:f1:19:bd:cf:85:d9:90:c3:14:59:11:8f:78:9d:67:52:77:
         a4:b2:8d:c4:a6:76:16:ef:5a:e2:c9:aa:00:e6:90:f7:0f:47:
         66:73:5a:cc:c0:a7:dc:9d:79:c2:9e:52:1b:c4:17:5c:c4:8a:
         e7:79:d1:86:99:39:76:6a:d8:c8:a3:4e:6c:74:3c:10:cb:7b:
         49:5c:4e:33:73:5b:3a:fc:71:84:c3:13:5b:bb:a9:0b:ef:49:
         79:d9:01:d8:b5:5e:be:f2:0e:77:3b:fc:2d:c6:95:b3:d1:75:
         56:5f:b9:d6:89:33:9a:28:3b:67:6b:04:c6:d7:ef:ab:98:2a:
         46:73:96:99:59:40:e5:a3:93:54:5b:bd:97:29:70:e9:39:2d:
         73:56:a4:ba:4f:e1:74:3d:28:5b:c6:ae:f9:a3:97:8d:ff:d1:
         57:79:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----