This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
File:                     DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft (raw, json)
Hash identifier:          UvEfRz3OESPq4lw1e6zgN4lDgSsO2TBoUSXD4mavyMI=
Subject key identifier:   02:A8:34:90:42:16:5F:23:70:B3:52:BC:9F:96:43:3A:26:0E:1B:0A
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Certificate issuer:       /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial:       1BD22E93523C1580F69D801B48983FCAA0F8A8E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
Manifest number:          0144
Signing time:             Thu 11 Dec 2025 05:36:21 +0000
Manifest this update:     Thu 11 Dec 2025 05:31:21 +0000
Manifest next update:     Mon 15 Dec 2025 08:35:21 +0000
Files and hashes:         1: 3136362e37352e352e302f32342d3234203d3e203532333936.roa (hash: /HJpo8fhGLiczdW0hIyPCI+8CejGuyEt1elbN6lOC0E=)
                          2: DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl (hash: UZ+PiV9Ogz8+pGBObbqEnc3Yxyry751cg2PRvdBNxd8=)
                          3: 3136362e37352e302e302f31362d3234203d3e203136363239.roa (hash: MeEUgBWbdj5gh4Y7oRYwCqgHb8XMIr/E2OvmSZ1vsaE=)
                          4: 3136362e37352e3130302e302f32342d3234203d3e203532333936.roa (hash: C4kdyy0E/8UNrtzx9QsS1hAX0eB/6CuxTFC9dGm2Ia4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d2:2e:93:52:3c:15:80:f6:9d:80:1b:48:98:3f:ca:a0:f8:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
        Validity
            Not Before: Dec 11 05:31:21 2025 GMT
            Not After : Dec 15 08:35:21 2025 GMT
        Subject: CN=02A8349042165F2370B352BC9F96433A260E1B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:e1:35:fd:a3:7f:3e:51:bd:d1:ff:3f:5d:
                    13:ef:3e:4d:c4:06:09:a0:4b:69:85:ba:f4:91:cc:
                    fe:1e:67:3a:de:ad:04:9c:d1:bd:1b:93:f2:c4:71:
                    22:b6:25:90:79:89:31:93:62:b4:f4:46:94:8a:c1:
                    4e:a0:8b:66:57:32:36:1e:b8:ed:a6:68:1d:45:54:
                    f9:b5:22:22:05:f2:14:57:64:81:b1:95:8c:4a:3e:
                    ea:72:40:f3:de:20:ab:80:d8:88:82:5c:25:9e:27:
                    6c:06:89:1d:b9:14:f7:78:de:29:13:a7:b5:c9:b3:
                    61:91:de:2a:b0:b8:67:eb:4a:c6:f2:49:01:7b:91:
                    c2:f3:72:aa:9c:18:b0:c4:d3:5b:37:a5:70:3b:1b:
                    1e:55:a3:62:df:ce:3e:bb:c2:c2:ac:bd:81:6b:3a:
                    f8:f4:e8:0c:e3:71:94:5b:83:0a:d6:2a:84:53:8f:
                    c2:8f:51:47:dd:fb:95:6a:07:81:bc:9f:80:24:1a:
                    c3:2a:a2:d8:a2:8c:fc:f1:0e:7b:87:bb:80:95:a5:
                    16:e8:1e:c4:81:9b:f2:bc:70:0d:7c:93:a5:d4:2a:
                    8e:0e:15:2a:88:9a:c2:b3:f2:65:45:54:37:06:73:
                    67:0a:06:87:47:f0:af:18:b7:76:16:78:93:9b:fc:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:34:90:42:16:5F:23:70:B3:52:BC:9F:96:43:3A:26:0E:1B:0A
            X509v3 Authority Key Identifier:
                keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:26:a8:ab:e0:52:c7:02:c1:13:39:05:c6:1f:80:33:4e:
         22:14:5f:21:d1:72:11:e1:cb:f1:58:06:51:82:fb:03:aa:32:
         00:59:6f:c8:f0:d8:10:60:d0:ef:30:cd:53:df:de:7c:29:6b:
         2c:06:ea:cc:f1:c5:e8:a9:0f:51:e6:3c:a2:b3:db:08:1d:d8:
         51:68:fe:24:0e:c7:07:49:0c:39:d3:e9:51:77:f2:fd:fb:af:
         0a:c3:ac:a4:62:eb:e9:a0:0b:a9:37:df:50:77:cf:45:fb:9a:
         3e:b0:ba:f0:4f:20:8e:9f:66:2e:d8:4f:c0:e7:7f:66:c2:94:
         62:78:64:2a:66:22:65:44:7f:38:53:d7:55:e3:19:e0:89:b5:
         74:67:e4:f6:36:c5:4d:0b:2e:d7:79:63:52:df:06:5f:5d:1f:
         9c:6c:6a:f9:c6:ec:68:09:06:1b:d5:b0:e1:57:fd:a8:12:e1:
         d6:a4:b2:3b:9b:56:bd:2b:6d:d0:93:32:b3:34:aa:22:65:02:
         1a:56:f9:41:ba:1a:3a:11:ca:ad:d8:9c:8b:1c:66:b8:a5:36:
         72:f6:f4:f7:6d:5f:07:ef:97:11:e1:c4:1d:7b:94:9e:33:c2:
         8e:81:a9:8b:d8:dd:f9:f5:1c:fc:6f:34:5f:54:c0:d0:16:5d:
         c9:bd:30:5e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUG9Iuk1I8FYD2nYAbSJg/yqD4qOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyMUU4NTM4RjUwRDRDRjM0NjZGMzgwRDY0RkZBNzc3
OUVFMjBENjAeFw0yNTEyMTEwNTMxMjFaFw0yNTEyMTUwODM1MjFaMDMxMTAvBgNV
BAMTKDAyQTgzNDkwNDIxNjVGMjM3MEIzNTJCQzlGOTY0MzNBMjYwRTFCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOuE1/aN/PlG90f8/XRPvPk3E
BgmgS2mFuvSRzP4eZzrerQSc0b0bk/LEcSK2JZB5iTGTYrT0RpSKwU6gi2ZXMjYe
uO2maB1FVPm1IiIF8hRXZIGxlYxKPupyQPPeIKuA2IiCXCWeJ2wGiR25FPd43ikT
p7XJs2GR3iqwuGfrSsbySQF7kcLzcqqcGLDE01s3pXA7Gx5Vo2Lfzj67wsKsvYFr
Ovj06AzjcZRbgwrWKoRTj8KPUUfd+5VqB4G8n4AkGsMqotiijPzxDnuHu4CVpRbo
HsSBm/K8cA18k6XUKo4OFSqImsKz8mVFVDcGc2cKBodH8K8Yt3YWeJOb/I3RAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAqg0kEIWXyNws1K8n5ZDOiYOGwowHwYDVR0j
BBgwFoAU3SHoU49Q1M80ZvOA1k/6d3nuINYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEI2RDA1NEM2NkM5Mjk2ODQyNzkxMTNCQTkwNDIxOTRD
Mzk2NTgyQTExQzEyMDQzMjU5QTEzOUI5RjMyNkI2LzAvREQyMUU4NTM4RjUwRDRD
RjM0NjZGMzgwRDY0RkZBNzc3OUVFMjBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDIxRTg1MzhGNTBENENGMzQ2
NkYzODBENjRGRkE3Nzc5RUUyMEQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRCNkQwNTRDNjZDOTI5Njg0Mjc5MTEzQkE5MDQyMTk0QzM5NjU4MkEx
MUMxMjA0MzI1OUExMzlCOUYzMjZCNi8wL0REMjFFODUzOEY1MEQ0Q0YzNDY2RjM4
MEQ2NEZGQTc3NzlFRTIwRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9Caoq+BSxwLBEzkFxh+AM04i
FF8h0XIR4cvxWAZRgvsDqjIAWW/I8NgQYNDvMM1T3958KWssBurM8cXoqQ9R5jyi
s9sIHdhRaP4kDscHSQw50+lRd/L9+68Kw6ykYuvpoAupN99Qd89F+5o+sLrwTyCO
n2Yu2E/A539mwpRieGQqZiJlRH84U9dV4xngibV0Z+T2NsVNCy7XeWNS3wZfXR+c
bGr5xuxoCQYb1bDhV/2oEuHWpLI7m1a9K23QkzKzNKoiZQIaVvlBuho6Ecqt2JyL
HGa4pTZy9vT3bV8H75cR4cQde5SeM8KOgamL2N359Rz8bzRfVMDQFl3JvTBe
-----END CERTIFICATE-----