This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
File:                     CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft (raw, json)
Hash identifier:          1oipOy5KJFmhcRnM+mrosyU7Cyk+LY0NBDFUOeTm10U=
Subject key identifier:   39:DD:BF:9D:67:DB:C1:9E:AC:4E:66:86:52:91:87:1D:3C:EC:34:69
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       2F2707F1F1C3A6EF6780790233AD0D689DCF3E79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
Manifest number:          0151
Signing time:             Tue 23 Dec 2025 12:22:13 +0000
Manifest this update:     Tue 23 Dec 2025 12:17:13 +0000
Manifest next update:     Mon 29 Dec 2025 01:27:13 +0000
Files and hashes:         1: 3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (hash: BNJk2fyz8MX0zLw9d5G+Z1dWbMRo51I6pv47DVU8OUQ=)
                          2: CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl (hash: bMfAxcT0IOynfofu4U9hyfSOZQ7bbqUwFeNR+5FB8AE=)
                          3: 323830303a6161303a3a2f33322d3438203d3e203532333530.roa (hash: oYv9FW1x7Sv6nNKwSSYnsl949bZtUgfEdM2DZpYFg/A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 01:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:27:07:f1:f1:c3:a6:ef:67:80:79:02:33:ad:0d:68:9d:cf:3e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Dec 23 12:17:13 2025 GMT
            Not After : Dec 29 01:27:13 2025 GMT
        Subject: CN=39DDBF9D67DBC19EAC4E66865291871D3CEC3469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:c5:c4:da:60:b5:b0:31:dd:76:4e:fa:0f:
                    c0:35:04:9a:2c:68:00:3b:e8:c1:c7:55:24:e0:83:
                    48:e8:7b:ee:5f:51:be:7a:f6:6a:48:a8:40:87:05:
                    9a:34:ac:86:ac:96:42:20:c8:0a:ad:23:a2:af:51:
                    84:f2:68:9d:04:03:9a:5b:dc:96:25:b1:6f:6e:d8:
                    66:b3:3a:6d:74:ec:e7:2f:4e:ab:7d:e9:0a:19:75:
                    48:aa:b6:40:2a:c8:6c:c9:06:60:d0:a6:5a:fc:4b:
                    10:1d:21:07:2f:f2:02:6b:8c:7f:d8:cf:b2:cd:db:
                    96:85:6e:90:0d:3d:1a:d4:73:15:8e:12:fb:94:4b:
                    17:19:d5:46:e5:ba:16:b5:cb:9f:07:e8:05:1d:79:
                    42:57:5f:ad:b2:21:ed:a5:8e:58:1b:af:1b:68:13:
                    9a:18:24:11:80:81:99:80:99:78:b7:ed:28:80:e6:
                    4c:87:00:1a:00:64:b6:3c:55:88:97:1e:cb:54:cd:
                    c1:7a:62:34:1a:40:da:df:db:c8:a6:a2:cf:ec:c7:
                    04:36:8f:9b:2e:a4:4f:17:8c:ee:77:69:34:59:77:
                    c9:48:59:dc:87:c7:b2:55:d9:47:88:46:11:93:e5:
                    a4:87:75:d0:de:19:f0:ea:51:76:de:d6:2e:f7:19:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:BF:9D:67:DB:C1:9E:AC:4E:66:86:52:91:87:1D:3C:EC:34:69
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:a3:61:b3:53:e5:a8:57:bc:58:43:bf:9c:5a:fe:d5:f7:
         5b:59:32:f0:90:49:82:59:6f:c8:46:e8:b7:7d:39:87:79:cc:
         1a:5e:8f:3b:e5:eb:d0:96:6d:24:27:57:f9:ce:82:1f:07:57:
         7f:23:c4:1c:10:bb:fe:ad:f6:27:67:a7:f1:29:4d:ab:0a:cd:
         0b:4f:c6:4f:50:86:6a:14:5d:d0:8f:3e:70:61:11:00:42:8b:
         64:85:84:40:f7:f3:aa:54:2f:f2:4e:a2:2a:48:a1:df:60:72:
         47:d4:1f:70:d0:c9:b6:aa:4b:62:a8:ef:e9:70:57:31:4c:12:
         45:fe:4d:72:ea:2f:d6:a5:4a:b5:dc:bc:1b:a8:b6:06:37:fb:
         81:a0:62:b5:64:2b:56:ee:95:21:75:8a:ee:b4:b5:e4:00:17:
         57:5c:f0:02:d7:c4:f1:55:ee:17:6d:7a:b9:5f:be:c1:40:2b:
         fa:28:6e:2e:1f:b8:34:7f:3b:e2:ae:9d:b3:b4:73:ca:77:02:
         5d:7f:7d:79:ea:ef:ad:35:c3:a0:67:16:ec:91:cf:dd:f8:ab:
         38:d4:22:4e:b5:58:dd:d6:d2:4e:f7:9b:49:48:cc:96:17:5d:
         8d:f1:aa:02:27:84:1e:93:88:bd:c7:7e:50:a6:7b:b4:00:1b:
         18:b0:5e:11
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULycH8fHDpu9ngHkCM60NaJ3PPnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxRkM5M0EzRjIwMzI2QkU4M0I2NDI0RjY3OEUyRUE2
NzE0NDMzQzAeFw0yNTEyMjMxMjE3MTNaFw0yNTEyMjkwMTI3MTNaMDMxMTAvBgNV
BAMTKDM5RERCRjlENjdEQkMxOUVBQzRFNjY4NjUyOTE4NzFEM0NFQzM0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWysXE2mC1sDHddk76D8A1BJos
aAA76MHHVSTgg0joe+5fUb569mpIqECHBZo0rIaslkIgyAqtI6KvUYTyaJ0EA5pb
3JYlsW9u2GazOm107OcvTqt96QoZdUiqtkAqyGzJBmDQplr8SxAdIQcv8gJrjH/Y
z7LN25aFbpANPRrUcxWOEvuUSxcZ1Ubluha1y58H6AUdeUJXX62yIe2ljlgbrxto
E5oYJBGAgZmAmXi37SiA5kyHABoAZLY8VYiXHstUzcF6YjQaQNrf28imos/sxwQ2
j5supE8XjO53aTRZd8lIWdyHx7JV2UeIRhGT5aSHddDeGfDqUXbe1i73GTnFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOd2/nWfbwZ6sTmaGUpGHHTzsNGkwHwYDVR0j
BBgwFoAUzh/JOj8gMmvoO2Qk9nji6mcUQzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjdENEY0MkNDM0FENkFERkMzNkE0ODU3RTREOEEyOUU3
MjJBNjkwOUE4NTNGMEU2QzExOEUwMzcwQTFBOTZGLzAvQ0UxRkM5M0EzRjIwMzI2
QkU4M0I2NDI0RjY3OEUyRUE2NzE0NDMzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTFGQzkzQTNGMjAzMjZCRTgz
QjY0MjRGNjc4RTJFQTY3MTQ0MzNDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODY3RDRGNDJDQzNBRDZBREZDMzZBNDg1N0U0RDhBMjlFNzIyQTY5MDlB
ODUzRjBFNkMxMThFMDM3MEExQTk2Ri8wL0NFMUZDOTNBM0YyMDMyNkJFODNCNjQy
NEY2NzhFMkVBNjcxNDQzM0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBC6qNhs1PlqFe8WEO/nFr+1fdb
WTLwkEmCWW/IRui3fTmHecwaXo875evQlm0kJ1f5zoIfB1d/I8QcELv+rfYnZ6fx
KU2rCs0LT8ZPUIZqFF3Qjz5wYREAQotkhYRA9/OqVC/yTqIqSKHfYHJH1B9w0Mm2
qktiqO/pcFcxTBJF/k1y6i/WpUq13LwbqLYGN/uBoGK1ZCtW7pUhdYrutLXkABdX
XPAC18TxVe4XbXq5X77BQCv6KG4uH7g0fzvirp2ztHPKdwJdf3156u+tNcOgZxbs
kc/d+Ks41CJOtVjd1tJO95tJSMyWF12N8aoCJ4Qek4i9x35Qpnu0ABsYsF4R
-----END CERTIFICATE-----
Generated at Wed Dec 24 16:46:03 2025 by rpki-client