This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
File:                     097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft (raw, json)
Hash identifier:          eiX6n0T8BQtZtNZ7dNesy8h/0jat7brBv36B5qc5CLs=
Subject key identifier:   C5:19:F9:94:3A:B5:D3:61:BC:25:45:4A:79:AD:EA:C4:D9:C3:B3:8B
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       127F4D05D59EB3499E7B807DCE660998ADF999B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
Manifest number:          0143
Signing time:             Tue 09 Dec 2025 11:36:13 +0000
Manifest this update:     Tue 09 Dec 2025 11:31:13 +0000
Manifest next update:     Sat 13 Dec 2025 21:00:13 +0000
Files and hashes:         1: 34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa (hash: 4Mq1We2jPvHGHNovEJweieCRcTIn25J6U/Wvod+EimQ=)
                          2: 34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa (hash: sHh4HZxpqgx2ZTIZ8r7XvDUMqHRURZoEV29/EBPUjzs=)
                          3: 34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa (hash: UIXEawx2DYcI+pLPU43S72Fp7w2iCEBJ8Qeb52fSum4=)
                          4: 34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa (hash: Kz1/0X+uJKzXFAtLfFogOPWPvnzYg/J2jrZw7uCurpo=)
                          5: 097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl (hash: DlCfF5N/B6BF+x48QuZCapHwGCKxf7xA/BMzUFLAkXs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 21:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:4d:05:d5:9e:b3:49:9e:7b:80:7d:ce:66:09:98:ad:f9:99:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Dec  9 11:31:13 2025 GMT
            Not After : Dec 13 21:00:13 2025 GMT
        Subject: CN=C519F9943AB5D361BC25454A79ADEAC4D9C3B38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:5a:0d:a0:fc:79:3a:f2:c4:5c:0f:cc:f4:
                    fe:d0:0e:5d:0c:dd:76:9c:b0:ac:07:5d:7e:e0:5b:
                    70:30:2f:e0:20:83:5c:2a:84:70:65:c9:70:8c:37:
                    83:8c:8d:c0:83:ea:44:7a:d5:a4:dd:16:b7:cd:4b:
                    0d:58:8c:0a:2a:03:6d:80:bb:f3:d8:0b:3a:29:f1:
                    2a:3f:c8:4a:da:68:89:ae:0d:e3:77:e3:31:45:dc:
                    cb:30:ca:cf:71:ca:e5:c7:3a:dc:0d:ac:db:01:20:
                    4d:fa:51:7a:da:1e:d9:ab:06:8c:18:10:27:a4:ee:
                    4f:42:f9:66:6e:54:6b:5c:cc:bc:02:cf:3e:5d:c4:
                    72:2c:5e:c4:3d:7b:e9:78:66:60:80:f7:e4:10:9a:
                    05:3f:98:6d:df:24:41:95:87:5d:30:f0:c7:88:2a:
                    5c:b6:6b:ba:bc:4d:98:9b:9e:09:21:e4:ab:71:08:
                    e5:0d:19:0f:b5:cc:10:04:22:e9:a4:4d:6b:ea:f3:
                    00:e0:4f:35:cc:a5:14:cd:73:23:22:8c:79:2b:17:
                    8e:f2:d0:a9:7e:1c:2a:57:e7:1d:da:82:e3:23:b1:
                    81:d0:8f:77:ac:93:3d:3f:c0:e8:96:25:ff:34:f6:
                    89:80:d7:66:f8:1e:a0:c2:d6:35:8f:bc:14:ac:bd:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:19:F9:94:3A:B5:D3:61:BC:25:45:4A:79:AD:EA:C4:D9:C3:B3:8B
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6d:88:f9:a9:2c:6f:f4:0b:dc:cf:fa:0b:76:9e:2e:c6:c7:
         d5:ba:8a:00:56:52:70:9d:eb:05:c3:eb:92:5b:a8:f7:44:da:
         7b:e4:89:f4:a7:b0:7d:dc:43:ce:bd:1c:37:77:45:62:47:8c:
         65:61:75:a6:43:03:7c:9d:5b:2a:29:bc:08:64:c6:c7:05:58:
         81:65:52:c7:10:9d:b4:ba:39:82:90:b5:5c:1f:87:a8:a5:7b:
         20:90:cf:6b:1e:4f:0e:e9:77:a2:34:a2:04:e6:f1:c4:10:bf:
         5a:45:d6:39:9a:d7:da:cb:15:31:81:6e:d3:e2:3d:af:e5:9e:
         98:cf:96:7f:85:bf:98:c0:f0:d2:a4:cf:1b:79:3e:cb:e9:d2:
         ae:e0:0f:cb:95:b2:ee:45:74:d6:15:ec:69:12:7c:99:fc:26:
         2e:14:2e:9c:6e:c6:ad:db:bf:b2:72:b6:43:75:c3:ce:ce:89:
         c4:5d:46:8e:cb:b7:36:73:db:35:3d:b2:83:90:8e:ff:42:a3:
         84:e8:55:8f:a0:5b:39:60:76:95:45:7f:6a:c3:ae:8b:2f:ba:
         77:51:3e:30:4b:a8:ee:dc:8b:d7:cd:65:70:41:3e:58:d5:24:
         b4:fd:19:5c:ad:6f:2a:fe:0d:f0:a9:9f:ad:0f:01:5c:e9:f4:
         07:bc:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----