This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
File:                     DC24274E5C8E92342E101D071FFDFA45EB73464D.mft (raw, json)
Hash identifier:          IPS/Xj4EEI5YmLaWhAd+6R/9V7mYCvJUXCNKzjOnmMs=
Subject key identifier:   9D:48:09:0A:63:33:6F:47:47:1D:F4:AD:EC:89:10:EA:7F:54:14:40
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       786C99287A2D310E0D7C8A0B1A60DC296135A87A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
Manifest number:          0140
Signing time:             Sat 06 Dec 2025 12:38:31 +0000
Manifest this update:     Sat 06 Dec 2025 12:33:31 +0000
Manifest next update:     Thu 11 Dec 2025 23:53:31 +0000
Files and hashes:         1: 3136302e31392e3230312e302f32342d3234203d3e203238333139.roa (hash: nOSmYaR4ArRRyxJ8tm5EeNl+3arZ78hFBnXoy+AXpYU=)
                          2: 3136302e31392e3230302e302f32322d3234203d3e203532343339.roa (hash: QqG+CZ9eTuPSBxyxcQnb6EP/xm0vlAmHSG8XO29kPaw=)
                          3: DC24274E5C8E92342E101D071FFDFA45EB73464D.crl (hash: SAtSQ5ct6uK96vuScvB+yO9I3HwgvVT2/cbHk6lYxtw=)
                          4: 3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa (hash: Y+62yYo9+pCOdnygT+mvZwDIBAp09vSQvW2/5wizcq0=)
                          5: 3136302e31392e3230302e302f32342d3234203d3e203238333139.roa (hash: mcAxB9aFT50zkegPOaVbiAyuGq/x20Y/wkHoRJTwTCs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 23:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6c:99:28:7a:2d:31:0e:0d:7c:8a:0b:1a:60:dc:29:61:35:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Dec  6 12:33:31 2025 GMT
            Not After : Dec 11 23:53:31 2025 GMT
        Subject: CN=9D48090A63336F47471DF4ADEC8910EA7F541440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:95:a0:6e:9e:7a:52:d6:f4:a6:90:43:39:
                    c4:25:79:03:49:48:cc:4f:a2:5a:30:b3:7e:ad:23:
                    54:1b:eb:d3:3e:21:c9:1e:f7:6a:c0:d8:5f:c8:53:
                    e1:73:46:55:99:4a:92:6c:af:4a:fd:f9:2c:c2:25:
                    8d:dd:60:a1:bd:f4:39:de:69:b1:4d:d2:a2:d5:7b:
                    09:0c:68:4a:c3:73:27:4f:4d:a1:74:1f:aa:ea:7e:
                    ec:7b:7f:48:73:de:8e:cc:d4:21:4d:54:44:af:ff:
                    14:7e:46:d5:45:41:08:d3:57:5b:e9:21:b3:20:48:
                    2c:02:9b:d7:24:0e:09:14:98:25:1d:55:bb:12:6e:
                    24:02:cf:30:9d:d9:4c:da:95:40:e4:ca:72:27:ee:
                    cb:a2:bd:92:df:9d:bb:95:18:0d:61:8c:72:62:1a:
                    04:3e:4e:bc:d5:f2:dd:98:66:c1:73:5e:35:ea:dd:
                    f6:4e:98:75:be:b9:12:ec:8e:92:02:a2:e3:97:3a:
                    b7:dd:88:ed:0d:e5:5f:cf:d3:dc:54:79:65:5d:2d:
                    01:c0:6a:04:25:e4:e3:85:27:53:e0:94:d3:fa:3d:
                    7e:91:ff:fa:66:59:46:93:ab:6f:09:79:d9:2c:e2:
                    e4:46:12:ad:83:fd:b1:b4:24:95:4f:f5:b0:2f:b4:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:09:0A:63:33:6F:47:47:1D:F4:AD:EC:89:10:EA:7F:54:14:40
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:36:c3:f2:48:5c:a4:40:ac:12:be:3d:19:fc:1d:c2:bd:bb:
         03:77:a4:83:ed:41:72:23:d8:44:82:49:bb:38:cc:25:7b:bb:
         53:14:18:3c:9e:63:c6:c0:96:be:49:28:1c:d4:13:f9:31:96:
         1f:6d:a0:22:a5:f8:6b:c0:c1:e0:69:c0:2e:54:7c:d8:f5:6b:
         85:ee:8c:a0:69:9d:a6:85:42:eb:68:90:75:0e:bc:af:38:f4:
         11:c4:ab:23:42:1f:51:0a:b6:5a:28:1e:3c:be:0f:02:87:ad:
         8e:55:1c:c5:dd:52:20:4a:95:39:4f:f0:d4:4c:26:eb:f8:5d:
         c1:64:ba:77:ef:bb:85:f5:a1:d3:bc:a8:aa:27:7a:85:72:42:
         4d:ea:5a:e9:d1:b0:71:9a:4d:84:9a:00:16:e4:03:53:9c:4f:
         4c:fa:66:f9:f4:5d:e5:55:90:aa:81:4d:c6:04:24:21:05:75:
         52:41:58:ed:7f:1b:90:17:8d:00:26:70:f6:38:2b:d1:1c:40:
         42:20:0e:9d:7e:e8:46:90:91:48:5b:1b:db:41:22:08:59:9b:
         9a:17:c3:d5:e4:5c:bf:fb:a3:de:67:eb:32:ea:42:8a:5c:86:
         8d:60:75:5d:13:0b:e5:0e:62:7e:77:b9:05:d7:99:8e:e6:d8:
         7b:88:b7:3e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeGyZKHotMQ4NfIoLGmDcKWE1qHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyNDI3NEU1QzhFOTIzNDJFMTAxRDA3MUZGREZBNDVF
QjczNDY0RDAeFw0yNTEyMDYxMjMzMzFaFw0yNTEyMTEyMzUzMzFaMDMxMTAvBgNV
BAMTKDlENDgwOTBBNjMzMzZGNDc0NzFERjRBREVDODkxMEVBN0Y1NDE0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmZWgbp56Utb0ppBDOcQleQNJ
SMxPolows36tI1Qb69M+Icke92rA2F/IU+FzRlWZSpJsr0r9+SzCJY3dYKG99Dne
abFN0qLVewkMaErDcydPTaF0H6rqfux7f0hz3o7M1CFNVESv/xR+RtVFQQjTV1vp
IbMgSCwCm9ckDgkUmCUdVbsSbiQCzzCd2UzalUDkynIn7suivZLfnbuVGA1hjHJi
GgQ+TrzV8t2YZsFzXjXq3fZOmHW+uRLsjpICouOXOrfdiO0N5V/P09xUeWVdLQHA
agQl5OOFJ1PglNP6PX6R//pmWUaTq28Jedks4uRGEq2D/bG0JJVP9bAvtMSPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnUgJCmMzb0dHHfSt7IkQ6n9UFEAwHwYDVR0j
BBgwFoAU3CQnTlyOkjQuEB0HH/36RetzRk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U1MTUyQjQwQ0YzOTQxMjJGQUFCQzcwNzYwMUM0MjY4
MTlDNzE4M0Q1RTQyNUI0RTkyRTkyODM4OEU5NTJBLzAvREMyNDI3NEU1QzhFOTIz
NDJFMTAxRDA3MUZGREZBNDVFQjczNDY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzI0Mjc0RTVDOEU5MjM0MkUx
MDFEMDcxRkZERkE0NUVCNzM0NjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFNTE1MkI0MENGMzk0MTIyRkFBQkM3MDc2MDFDNDI2ODE5QzcxODNE
NUU0MjVCNEU5MkU5MjgzODhFOTUyQS8wL0RDMjQyNzRFNUM4RTkyMzQyRTEwMUQw
NzFGRkRGQTQ1RUI3MzQ2NEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYNsPySFykQKwSvj0Z/B3CvbsD
d6SD7UFyI9hEgkm7OMwle7tTFBg8nmPGwJa+SSgc1BP5MZYfbaAipfhrwMHgacAu
VHzY9WuF7oygaZ2mhULraJB1DryvOPQRxKsjQh9RCrZaKB48vg8Ch62OVRzF3VIg
SpU5T/DUTCbr+F3BZLp377uF9aHTvKiqJ3qFckJN6lrp0bBxmk2EmgAW5ANTnE9M
+mb59F3lVZCqgU3GBCQhBXVSQVjtfxuQF40AJnD2OCvRHEBCIA6dfuhGkJFIWxvb
QSIIWZuaF8PV5Fy/+6PeZ+sy6kKKXIaNYHVdEwvlDmJ+d7kF15mO5th7iLc+
-----END CERTIFICATE-----