This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
File:                     BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft (raw, json)
Hash identifier:          zUXJE/mCD+i4s+GPdeH5b5QX6TgzafQ4L69KAf9Fp+k=
Subject key identifier:   38:80:37:96:62:CD:22:0D:99:40:E4:DC:0F:8C:FB:22:01:DE:C5:7A
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Certificate issuer:       /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial:       57373C46CA6E7743BD878C40F417936CC6727155
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
Manifest number:          0153
Signing time:             Thu 25 Dec 2025 13:22:30 +0000
Manifest this update:     Thu 25 Dec 2025 13:17:30 +0000
Manifest next update:     Tue 30 Dec 2025 16:11:30 +0000
Files and hashes:         1: 3136342e3136332e3133322e302f32322d3234203d3e20323634363638.roa (hash: WQZjJHmCLVzOG9N/VNKVy9HwfUCL6PBQq9vvZVgjK2g=)
                          2: BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl (hash: +cfBo9ToaJNtsvPiHyDgi0WzUhH5R8w1UWh3mDlywhc=)
                          3: 323830333a353763303a3a2f33322d3438203d3e203532343638.roa (hash: 9cpozkOT2iP1G8VBjYdpENxiPQdkDwL3DLsn8InoC34=)
                          4: 3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa (hash: q5yJrUI9mGGHdjpWilPP8xhWWH4yOdhWej3RQmmD8PA=)
                          5: 323830333a353763303a3a2f33322d3438203d3e20323634363638.roa (hash: AJFdj9LMJzBq55DiN5Ieh/Fx/AUOdl/cDCKDSms1eIc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 01:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:37:3c:46:ca:6e:77:43:bd:87:8c:40:f4:17:93:6c:c6:72:71:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
        Validity
            Not Before: Dec 25 13:17:30 2025 GMT
            Not After : Dec 30 16:11:30 2025 GMT
        Subject: CN=3880379662CD220D9940E4DC0F8CFB2201DEC57A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:16:bf:34:f0:c3:02:65:34:b2:50:ba:dd:
                    82:40:2c:88:32:0c:86:61:a1:fb:aa:49:74:88:96:
                    6a:55:d5:65:26:d0:27:71:88:c0:5f:43:59:79:03:
                    f0:ed:de:7b:34:58:90:d5:9f:92:dc:0c:ec:6b:a0:
                    10:e8:1e:b5:67:56:e4:d3:fd:00:1e:08:1d:86:86:
                    8d:9e:37:96:be:17:dc:9e:c6:04:55:86:62:02:27:
                    ab:78:11:46:4f:78:6d:da:c9:77:3a:05:45:15:24:
                    e3:0a:9e:6c:a5:4e:f4:aa:fb:04:99:1e:91:9a:d3:
                    01:3c:ee:c1:2f:e1:31:da:34:93:43:fe:09:ab:a2:
                    ff:0d:d1:28:68:a0:8c:bc:da:2d:da:82:20:4c:9b:
                    0e:7f:ef:cb:a0:79:76:76:46:7f:2e:c1:fa:d0:7a:
                    03:94:9c:3c:7e:fd:0c:33:f6:f5:76:4a:8c:81:1d:
                    77:39:31:59:48:82:d5:5b:a0:74:f0:21:cf:70:e3:
                    67:0a:96:d7:ac:c4:21:d4:53:2a:40:c6:e8:b9:94:
                    37:c7:54:c3:6d:97:59:30:bd:52:90:14:72:a6:c8:
                    f0:a4:6d:53:2c:eb:a5:87:78:f9:bc:f1:d4:0f:8a:
                    57:69:ae:3a:38:8b:a1:0a:13:99:d9:00:c3:cf:d0:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:37:96:62:CD:22:0D:99:40:E4:DC:0F:8C:FB:22:01:DE:C5:7A
            X509v3 Authority Key Identifier:
                keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2e:32:76:d0:f5:5a:01:b7:a5:d1:f8:31:0b:78:34:14:9d:
         54:f9:76:ab:8f:b4:eb:3a:4d:a0:2c:0d:bc:b3:3e:e2:24:f9:
         52:82:31:f4:50:d9:56:54:ee:27:6e:07:43:a0:59:5f:37:47:
         61:a6:e7:ef:0e:3a:0c:88:71:f2:de:2e:34:06:1e:b4:f0:81:
         32:70:9b:38:c7:62:3e:6f:67:0b:c4:99:e2:57:38:e6:2b:07:
         50:b7:69:8b:ea:73:4e:84:5d:58:0b:b0:b7:b3:15:e8:d5:90:
         9e:2a:96:f6:50:bb:e3:32:6c:b7:b3:32:fe:dd:57:1c:7c:ce:
         19:a1:96:50:25:c1:35:5d:56:73:3c:26:2a:1f:49:ee:10:68:
         c6:35:ef:74:7c:24:ef:d4:31:66:55:6f:d8:96:6b:54:fe:73:
         10:22:98:bb:83:3c:93:67:cf:c3:ce:4d:28:2c:c0:29:09:51:
         95:f9:c0:59:da:95:ed:89:a2:fb:f2:87:30:70:6c:2a:59:26:
         03:fc:06:cb:b6:0c:60:9f:47:21:2c:14:9b:c1:8b:7a:6a:21:
         ec:b5:f6:d0:f8:d6:c4:5a:59:94:e2:b1:b0:54:26:dc:7e:29:
         a2:0e:53:83:3a:27:88:13:3f:98:f6:00:85:06:1e:8f:86:ca:
         82:40:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----