This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
File:                     8511BF5F476710251836E1F3F5006C888AE1B68A.mft (raw, json)
Hash identifier:          8l0IB8SxZyhXM7m8+Otq4mgBFa3akpWdSFeutFn2H4s=
Subject key identifier:   98:72:70:36:E5:2E:9F:2B:19:3D:DB:97:A0:55:A9:59:63:8E:3A:E4
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       7930BF767D283637171D882FDD79C27E33556110
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
Manifest number:          014A
Signing time:             Tue 23 Dec 2025 10:26:00 +0000
Manifest this update:     Tue 23 Dec 2025 10:21:00 +0000
Manifest next update:     Sat 27 Dec 2025 14:04:00 +0000
Files and hashes:         1: 3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa (hash: YNzPLDNtqG8py5HPawGJT7+VPBmXv9SfGWU8xmkN5Po=)
                          2: 3136372e3234392e3139322e302f32342d3234203d3e20323633383135.roa (hash: s7+6PZmbStLVAJ8hGJPVakLuC+oaAQ7LAFICHOnM5cU=)
                          3: 3136372e3234392e3139332e302f32342d3234203d3e20323633383135.roa (hash: MDlWgLL9ruvd3MvnUyC4pAi/hAdv+qqTeIM9EyvJ1ac=)
                          4: 3136372e3234392e3139352e302f32342d3234203d3e20323633383135.roa (hash: bfzEFKTEqW5vKyUf+Xu2j/RUXHdX14+G491HxctU4JA=)
                          5: 3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa (hash: DWV5IYF+CgPhUxo1ps8cD5zuA/HzwlCKU425M2+BIhs=)
                          6: 8511BF5F476710251836E1F3F5006C888AE1B68A.crl (hash: 4oXXHpiAf+XOM43lmK5bEa34SVkOqarLuicIQ6FIbUQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 14:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:30:bf:76:7d:28:36:37:17:1d:88:2f:dd:79:c2:7e:33:55:61:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Dec 23 10:21:00 2025 GMT
            Not After : Dec 27 14:04:00 2025 GMT
        Subject: CN=98727036E52E9F2B193DDB97A055A959638E3AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:e3:eb:60:72:9f:95:24:f6:f1:06:e4:8e:
                    cf:0f:fb:3b:0d:6b:a8:5b:a9:d3:40:8f:27:d8:31:
                    31:a7:9e:49:6b:10:d1:2e:a2:89:3e:cd:b7:e6:e4:
                    6b:b8:16:88:fb:1d:12:31:f2:4c:39:77:71:fd:d6:
                    78:47:bd:4a:08:69:4a:18:18:d4:df:b4:6e:5e:f2:
                    ff:f3:91:69:2d:bd:1d:f9:1b:46:e1:b8:8f:8d:10:
                    b2:88:e2:99:5b:66:79:76:5e:7c:ae:b5:85:da:17:
                    bb:89:7a:e8:86:13:98:cc:46:e9:ff:fb:53:60:96:
                    dc:3e:99:49:7b:12:6b:6b:73:b7:ca:f6:9f:8d:1d:
                    ec:18:2e:de:34:f5:55:cc:b5:f9:ef:e4:20:ab:ec:
                    80:42:dd:62:97:5f:32:6a:86:19:25:78:68:fa:ef:
                    a3:62:21:30:42:af:e0:00:b6:ee:dc:1c:93:28:6e:
                    f2:e8:bd:eb:dc:95:ac:4b:e1:eb:a7:78:e0:05:3e:
                    5a:79:68:48:af:6a:bd:62:8d:e4:c5:01:84:f2:28:
                    b0:2d:9a:18:b6:91:6d:55:5f:1b:5d:15:ba:27:9e:
                    12:ef:bd:6b:d8:5f:1e:d1:57:f4:11:91:a1:89:68:
                    f2:c7:74:f0:45:33:26:fc:01:c3:30:e5:07:52:f5:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:70:36:E5:2E:9F:2B:19:3D:DB:97:A0:55:A9:59:63:8E:3A:E4
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:95:d0:2e:a9:93:31:e9:e5:6c:3c:0a:0c:63:c4:9a:80:4b:
         cc:d2:60:c0:84:85:ce:07:2d:12:3d:14:4e:b0:71:e0:c3:d1:
         45:3a:a3:2e:8f:83:8d:8c:65:03:b8:c1:5b:c8:b2:c4:a7:92:
         16:5b:84:10:e8:96:df:b7:bf:10:f1:28:43:53:be:9b:d1:d9:
         7f:54:93:db:27:e1:f7:5c:2a:d9:53:9b:ae:5e:67:72:a8:6f:
         9a:b6:61:48:35:04:13:55:c6:01:d5:00:2e:ac:3c:a7:c8:f9:
         a0:1d:7b:58:3b:61:8f:89:54:32:76:6f:f4:a9:16:20:a4:54:
         b3:37:5c:32:67:86:b8:e1:0d:95:97:5c:01:09:94:16:dc:02:
         24:e8:78:64:21:7a:58:35:2e:51:d6:0b:c7:18:51:14:c3:e7:
         e2:ed:e1:6e:a8:74:ab:e3:28:02:3c:54:c6:33:af:62:f7:8d:
         80:78:6f:9c:ce:cc:5b:7e:8c:b3:67:40:f4:c1:0a:90:76:9c:
         08:6e:25:6d:ea:bc:aa:cf:50:ce:c9:a9:92:54:83:90:70:01:
         92:73:fd:b2:e3:98:91:56:59:80:33:1f:bd:ee:e5:e2:38:8e:
         cc:1d:e4:68:74:cb:cb:48:9b:4b:8a:22:6e:68:9a:84:19:26:
         31:af:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:12:13 2025 by rpki-client