This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
File:                     DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json)
Hash identifier:          NZPSIL5N5cPeKpQg5jJFOxYUJzxFlQIdMMkMSkslJeA=
Subject key identifier:   4C:B2:AC:4B:4D:95:8F:8D:D8:AE:D8:0F:37:66:99:CC:06:41:73:FA
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       357CB06788F0C6C6A47F2D0073F5E577A457BC3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
Manifest number:          0153
Signing time:             Tue 16 Dec 2025 14:01:43 +0000
Manifest this update:     Tue 16 Dec 2025 13:56:43 +0000
Manifest next update:     Sun 21 Dec 2025 05:06:43 +0000
Files and hashes:         1: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: 1qCJqOPzmozJiDvmsdNN6Q2tunIx8zf4p4wvtjU+mvY=)
                          2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=)
                          3: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=)
                          4: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=)
                          5: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7c:b0:67:88:f0:c6:c6:a4:7f:2d:00:73:f5:e5:77:a4:57:bc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Dec 16 13:56:43 2025 GMT
            Not After : Dec 21 05:06:43 2025 GMT
        Subject: CN=4CB2AC4B4D958F8DD8AED80F376699CC064173FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:6e:8d:82:12:cf:87:0b:a8:78:04:8c:1e:
                    88:da:2a:bf:f4:48:dd:8d:e7:bd:ab:3d:a8:e1:de:
                    c7:a9:08:ed:85:02:01:d7:05:46:d6:8c:00:b5:61:
                    53:1c:2b:6e:08:cc:ce:c7:79:3f:68:95:fa:a4:83:
                    3e:42:2d:97:e7:bb:13:6f:b6:9e:60:73:cf:b2:99:
                    92:9f:b7:de:82:c1:1d:d9:4c:e2:de:17:ac:57:8f:
                    84:c0:6a:8c:b8:23:6e:e1:77:13:47:4b:a3:59:31:
                    db:eb:cf:d8:d4:89:ab:72:07:77:0c:3f:6e:b4:8f:
                    15:a8:30:b5:1b:ca:c3:e2:25:0f:a5:0f:ca:2c:59:
                    9b:a0:ef:cd:b4:eb:e8:5e:37:c8:3d:68:f2:7c:db:
                    f6:47:62:bb:f6:b2:48:d6:1d:03:51:e3:66:b4:24:
                    08:f7:60:d3:4c:ef:ab:7d:a2:4d:c1:7e:cb:bc:22:
                    33:d6:34:2d:07:34:fc:6f:b6:15:cd:ce:c3:ed:0d:
                    3f:57:9b:ac:f5:35:83:2e:e8:3d:86:e9:b9:49:de:
                    fa:5f:0d:5a:e4:3d:7b:7e:d6:53:a6:3b:f7:ae:c7:
                    cf:51:a4:b0:52:f8:b3:50:35:c7:9a:c9:2c:ee:60:
                    8c:58:7e:17:36:21:19:4a:bd:20:b6:00:ab:e6:e7:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:AC:4B:4D:95:8F:8D:D8:AE:D8:0F:37:66:99:CC:06:41:73:FA
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:d5:27:03:49:4d:49:52:35:55:5c:b3:44:b4:be:1e:18:
         11:66:03:f8:db:3b:41:a2:e4:4b:78:25:69:9f:30:5d:65:fb:
         8f:d6:7f:90:46:45:fa:6d:46:6f:8c:44:fc:14:83:48:e3:ff:
         20:ff:18:78:4e:9c:da:7a:ff:93:db:91:83:58:81:14:a8:5b:
         67:57:5b:e2:f7:d6:ad:67:70:54:05:d1:88:ba:05:03:2d:82:
         6b:30:b6:8f:db:ab:a5:9b:54:52:c1:33:6f:5b:a7:48:8d:42:
         ea:5d:00:23:6d:19:5a:5c:39:e5:40:f8:24:ea:89:e0:e8:5c:
         09:ec:a9:90:be:d0:20:5d:2c:95:e8:f9:a8:13:5b:b2:eb:b8:
         c3:98:67:2e:7e:43:ac:c9:ce:aa:b0:bb:2b:95:81:df:24:31:
         df:80:68:38:a0:e7:c5:28:5a:b9:bc:b9:7e:9f:14:42:33:7d:
         4d:78:1a:c8:0a:7f:47:96:88:e8:a8:b6:a9:ac:28:82:12:5b:
         07:3e:62:2d:07:ee:f9:d8:d9:89:c7:d3:c2:b6:ad:bd:9e:7f:
         a0:72:e3:66:f4:f8:8a:44:6d:01:b4:b7:08:c8:08:ed:2c:7a:
         d0:5d:b9:de:b9:0b:e0:78:9f:9f:c8:87:fd:2d:3c:c4:9b:6e:
         55:7a:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----