This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
File:                     59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft (raw, json)
Hash identifier:          2rOsZC3W/q3bMIEZn74ktSUFIaRu4mirnGTFgsewUp4=
Subject key identifier:   2D:1C:03:1D:0F:E6:A3:55:2E:9E:31:C3:F8:68:A3:8F:B7:57:D7:0C
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       5996AE259A0078A9652AC9B19AEBCE733D74E0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
Manifest number:          0152
Signing time:             Sun 07 Dec 2025 12:02:44 +0000
Manifest this update:     Sun 07 Dec 2025 11:57:44 +0000
Manifest next update:     Fri 12 Dec 2025 23:43:44 +0000
Files and hashes:         1: 3139302e3135312e3135392e302f32342d3234203d3e203532333339.roa (hash: VU8TdKL6XWqdUBftvqgSpWD4xEzzGZAXFaPoqmuBmpM=)
                          2: 3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa (hash: JjWMJ6u1PBYKOCApfoR0EsmZ1/cc1Ik+vmPTF24LAx8=)
                          3: 3139302e3135312e3135322e302f32342d3234203d3e203532333339.roa (hash: kQEqPJjBSGNIt3964uds8gbYrRH/khe48Wd1xYw/SdI=)
                          4: 3139302e3135312e3135382e302f32342d3234203d3e203532333339.roa (hash: PDvmSMKxQfsTK3Yi9Ss5Hl6qHiIsol7o05xG0OmlB7E=)
                          5: 3139302e3135312e3134372e302f32342d3234203d3e203532333339.roa (hash: vU6timbvws3Bm94+Zq5NiJv+33+tZnbcq5w4r2GCID8=)
                          6: 3139302e3135312e3135312e302f32342d3234203d3e203532333339.roa (hash: 5B1w7CpYGhH3/wcopl024oZOMSe7PJHhqU9Ikow+x70=)
                          7: 3139302e31332e3131322e302f32342d3234203d3e203532333339.roa (hash: Sd+0QalPiM7P1vGxV7oOVfuoEF5sVYRo2izj3eMc2Uc=)
                          8: 3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa (hash: qECG9/qHX8XHcsNxkjE8cB2GhJRaVbThZqOQhnkdty0=)
                          9: 3139302e3130372e3232312e302f32342d3234203d3e203532333339.roa (hash: iSLOAAFd296nJJKtSljR+2vwHOZr6DzGTr8rGVXoFhE=)
                          10: 3139302e3135312e3134362e302f32342d3234203d3e203532333339.roa (hash: 10GQ/2N5maU8Gf6QRZEJBrMb68pbe/fCph6KVI4nBgo=)
                          11: 3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa (hash: +1wIA+/t67aP7+Tc+siGSE22Fyq3QYFkbkVdzH1XAMY=)
                          12: 59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl (hash: GfxBeNvpYbTrUbr3mYdKH8NEEqDy6TIEfleIYIaRMfg=)
                          13: 3139302e3135312e3135342e302f32342d3234203d3e203532333339.roa (hash: 74raNbwZ51+P8JyxfFf9qkxQDZfA2DONDqSM/P5mu4A=)
                          14: 3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa (hash: 0xh16u4hVtWmDaKB4iEjhO+5aoF606jkbuV3HrmIw0I=)
                          15: 3139302e31332e3131342e302f32342d3234203d3e203532333339.roa (hash: Bb7lXNE46HxZf42HiJhpeKsCM7TdxIzYspXVkAdWJU8=)
                          16: 3139302e3130372e3232322e302f32342d3234203d3e203532333339.roa (hash: pnqa9VCLwem4/iJngw4HwXIDBrbMN0lkufAFEQPYHh0=)
                          17: 3139302e31332e3131332e302f32342d3234203d3e203532333339.roa (hash: ar5vsmyNl5JJbINuyFlF5yavwtasY7NpjviVHVviQRs=)
                          18: 3139302e3135312e3135332e302f32342d3234203d3e203532333339.roa (hash: UsMFYZnO++JgGZo2mueXAY83nFb/4o02AGKa3IGFG7c=)
                          19: 3133312e37322e32382e302f32342d3234203d3e203532333339.roa (hash: MxDz3M61IINiU2HFnI946m8ECwAN7INpBSZ/HwIIfj8=)
                          20: 3139302e3135312e3134382e302f32342d3234203d3e203532333339.roa (hash: 669h9XkuquZIyzUdUS8y3Tzw7Lsexi0eUJzmd6CiCXA=)
                          21: 3133312e37322e33312e302f32342d3234203d3e203532333339.roa (hash: yi8zEktn07tOb/CTUEf/+ImlRvyVQgjA1UwrRixRMPs=)
                          22: 3139302e3130372e3231392e302f32342d3234203d3e203532333339.roa (hash: FQkMmjeVx+TDddJO90NWC3sV6vVOhLpE/7Gtklrh4dc=)
                          23: 3139302e3130372e3232302e302f32342d3234203d3e203532333339.roa (hash: Ul6WR+AbgTSOQQxSePmELTpp/8jNpSr8gDTKFE4WHR8=)
                          24: 3139302e3135312e3134342e302f32342d3234203d3e203532333339.roa (hash: yiqaMNwD1XjKvOt8OE3as77SyKzE5c1XnxmYxg9CJKY=)
                          25: 3133312e37322e33302e302f32342d3234203d3e203532333339.roa (hash: 4SviN6Mf0eYx4yDenLD5CxLv5N9yDjRooNCKsLjqRU8=)
                          26: 3133312e37322e32392e302f32342d3234203d3e203532333339.roa (hash: gl5twJKhPQHyvE2y3AAI+fNmov9IRml918ThjRrKdfM=)
                          27: 3139302e3130372e3232332e302f32342d3234203d3e203532333339.roa (hash: J71nsYtMP4SM0zwcPY4ED7+2rXIxb9kapak78rspu24=)
                          28: 3139302e3135312e3135362e302f32342d3234203d3e203532333339.roa (hash: 1K/WhR44y2R/x2Bs/J2wUz+nNfUasd130OjOWE4NCJw=)
                          29: 3139302e3130372e3231372e302f32342d3234203d3e203532333339.roa (hash: Z9Iq1ENRjmnJ0OtpnSoukcbKrnX2P5WcHj78MIfdDMw=)
                          30: 3139302e3135312e3134392e302f32342d3234203d3e203532333339.roa (hash: 4jsaeOpjkc37/JOCKbfaJfOklXwbaoq3Vxk3ZC0ZPCQ=)
                          31: 3139302e3135312e3135352e302f32342d3234203d3e203532333339.roa (hash: AtcH9oQHj4bcBlZ3G6oVMAxgJy/3cBgjXx3aYKBDTtQ=)
                          32: 3139302e3135312e3134352e302f32342d3234203d3e203532333339.roa (hash: w42jVx7KbKIrLg8jv1D+HhQMX/LUbwVzJpzcur7YDTI=)
                          33: 3139302e3130372e3231382e302f32342d3234203d3e203532333339.roa (hash: bUbco5B1ky4Kovr/SmvdYp8QFTj1C8JapKx/SKYsrLk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 23:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:ae:25:9a:00:78:a9:65:2a:c9:b1:9a:eb:ce:73:3d:74:e0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Dec  7 11:57:44 2025 GMT
            Not After : Dec 12 23:43:44 2025 GMT
        Subject: CN=2D1C031D0FE6A3552E9E31C3F868A38FB757D70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:22:78:0c:4d:66:eb:d4:e2:90:4c:9b:03:
                    82:a7:e7:f7:27:38:56:44:b4:ae:f3:1c:1e:90:cb:
                    60:26:66:85:54:4f:7e:4a:b0:dd:7d:80:99:cd:d5:
                    c1:26:38:67:2a:0a:5a:b7:b3:d2:29:bd:d1:7b:b3:
                    c1:f5:c2:49:95:d0:fd:bf:bd:f8:c8:8e:57:76:da:
                    ed:3e:a1:d6:6c:db:9c:9e:e1:cc:6d:67:1f:02:3f:
                    dc:aa:30:5e:11:1b:d6:a6:34:58:41:74:41:71:fb:
                    1f:7c:e7:98:ab:c0:28:d5:21:7f:e7:de:f4:84:9c:
                    09:4e:5f:22:7a:b4:ff:86:64:a3:09:4f:fb:f0:6b:
                    5b:dc:51:36:64:b0:9f:85:64:25:94:0d:1b:22:ae:
                    c1:83:88:f4:7c:b1:0a:53:86:eb:c0:b1:71:2b:33:
                    5e:10:41:46:da:31:a5:ce:e3:29:e1:e1:6e:f3:06:
                    fc:5e:09:9e:1e:71:e3:46:a0:ad:f3:30:0a:67:77:
                    c9:10:d4:f8:55:b1:e6:9e:29:ae:9b:81:9f:d2:51:
                    6b:09:a2:f7:b8:1c:53:39:d9:69:ce:16:6a:aa:65:
                    9a:2c:8f:cf:76:90:51:20:cb:dd:b2:26:3e:75:68:
                    be:1d:49:a0:1a:62:4d:04:4a:aa:01:85:76:57:89:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1C:03:1D:0F:E6:A3:55:2E:9E:31:C3:F8:68:A3:8F:B7:57:D7:0C
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:cd:b0:49:f7:c2:fe:46:ca:61:56:e0:9f:98:5f:3c:c0:
         96:4f:6f:ef:65:56:5c:8c:58:9a:8e:14:1e:45:06:93:10:b2:
         9b:2a:85:96:ba:a1:1b:e6:68:4f:01:59:27:35:a7:0c:8d:b1:
         16:a9:27:9f:11:8c:5d:b0:4b:98:cf:a5:fd:d9:e2:e9:fe:47:
         e8:5f:72:c1:bb:06:a9:4c:1f:eb:32:d8:fb:fc:a8:63:7a:54:
         f2:c4:cc:85:84:1b:59:68:90:d4:50:68:db:92:95:9c:cc:ee:
         38:41:74:e7:ee:31:1d:91:74:a0:c5:aa:b9:6f:ec:3a:ca:a0:
         11:6b:4a:c4:78:c6:84:ac:2c:43:47:35:fa:9e:17:03:52:e4:
         3c:71:7d:98:b5:dc:b3:3d:de:1e:68:0b:33:0d:eb:9f:19:17:
         79:29:ca:61:06:ee:73:11:78:6d:1a:7c:27:eb:e6:d8:d0:2d:
         36:98:ed:79:16:00:fe:24:fa:d7:4f:fa:ea:2b:4d:97:80:74:
         04:56:4c:86:f5:62:c1:af:50:fb:cb:4c:4f:6a:b3:68:ab:c9:
         2d:f7:64:9a:53:5e:12:15:dc:20:d2:3b:1c:c5:26:ca:09:80:
         e1:32:a3:50:8b:c1:f1:e7:a6:a0:43:d5:f6:8c:b0:af:5c:d6:
         d5:36:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:34:24 2025 by rpki-client