This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          2hbLxPD0NAnZV3bXYYYy2zam1jm1pnIBYMqqBfOUO/I=
Subject key identifier:   54:7E:DD:D2:7D:17:00:A4:1C:86:C4:A5:EC:02:CC:D4:1F:8C:63:A8
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       08619576D77509F073E858C30F4D38BC78BC7FF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          0154
Signing time:             Mon 22 Dec 2025 22:43:27 +0000
Manifest this update:     Mon 22 Dec 2025 22:38:27 +0000
Manifest next update:     Sat 27 Dec 2025 19:06:27 +0000
Files and hashes:         1: 323830333a313330303a3a2f33322d3634203d3e203532323633.roa (hash: rjI4ULmGu6qYjv0FL0k2/1/NMRijEcEzQUkamWFbEsw=)
                          2: 3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (hash: oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=)
                          3: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (hash: +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=)
                          4: 3137302e3135302e35392e302f32342d3234203d3e20313938393439.roa (hash: 7RGpY/XBpOBhxSwzR+Uyed1wlKrIs2uoOjGaM+NmrY0=)
                          5: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (hash: FEWS1FF/XF+UlpNr4p4hcjaJzVSq5aKm/ZVtKJXfumQ=)
                          6: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (hash: 15AnM/dZ2cOa4ul8ya6chcuL7wO96O9N5qgUEe0rbqc=)
                          7: 3139302e3131332e39362e302f31392d3234203d3e203532323633.roa (hash: y02JrXJYNXuWW9UHV3528drFMBQbw38YOOkzJPUFtFk=)
                          8: 3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (hash: OdxcYAVFWJ0LXWU4ccY3o3N3bUq6GFK5FchgsDHF/dc=)
                          9: 3137372e39332e302e302f31392d3234203d3e203532323633.roa (hash: s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=)
                          10: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: LreTSJdfh50YZBeSRFfunKe+k5KdHjRGvxE9Vw3V2Tk=)
                          11: 3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (hash: 5bexrapK4q9CZpLcnBFYUUN76MCYRsb04cp3LUHAk/I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 19:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:61:95:76:d7:75:09:f0:73:e8:58:c3:0f:4d:38:bc:78:bc:7f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Dec 22 22:38:27 2025 GMT
            Not After : Dec 27 19:06:27 2025 GMT
        Subject: CN=547EDDD27D1700A41C86C4A5EC02CCD41F8C63A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:2f:d6:3c:b9:60:8c:9e:2b:ed:00:6f:87:
                    44:62:b9:81:cf:e6:d9:11:29:a9:49:90:80:69:81:
                    69:60:12:c3:e6:00:c7:d1:eb:cb:5e:20:ba:72:73:
                    59:3d:54:6a:a1:b7:de:6a:52:91:27:30:dd:24:2d:
                    db:bc:39:9f:63:4f:60:6a:77:20:a8:98:d2:e8:66:
                    3e:be:dd:92:7e:e0:dd:44:3f:98:5a:08:03:dc:ae:
                    51:fb:e0:16:89:bc:80:71:41:b6:b0:68:46:46:ed:
                    6f:63:ae:78:0b:2b:38:4b:cf:80:90:0c:93:a7:63:
                    e6:a5:7f:bf:90:1a:4f:e1:08:3c:39:84:b8:57:60:
                    5c:87:6c:6f:78:8b:6f:a0:cd:cf:12:5c:55:6b:ee:
                    5d:ca:2c:ef:88:17:b8:24:79:b3:f0:05:4b:f5:c7:
                    20:7c:77:35:97:36:eb:b0:09:43:e5:5a:3a:96:36:
                    a6:95:c9:b6:9b:54:3c:cd:b5:b8:0a:ec:17:b7:6b:
                    41:ba:44:a1:8c:66:a6:14:2a:b4:f6:85:c6:cf:11:
                    b7:38:88:17:8b:38:ec:37:8c:59:a1:0f:6c:30:e6:
                    da:5d:65:81:9c:4c:e8:bb:9e:44:28:1e:1a:0b:61:
                    08:c9:df:28:6f:cd:37:b3:2c:64:86:00:8a:2a:dc:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:DD:D2:7D:17:00:A4:1C:86:C4:A5:EC:02:CC:D4:1F:8C:63:A8
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:d1:75:e5:85:b2:00:31:d3:a2:33:23:ee:72:09:33:20:
         18:29:66:cf:24:b5:23:69:6c:0f:61:cf:d3:3f:f5:b7:25:f9:
         5e:d9:b5:50:4a:f3:d1:38:5e:24:56:f4:1f:4b:e5:da:58:62:
         2b:bb:a5:b5:13:bb:91:95:b7:b6:d1:a6:a6:01:2e:e1:18:b8:
         d0:a1:9c:e6:90:a1:12:a8:9d:b0:1d:0f:a1:60:55:08:87:c9:
         af:f7:09:a7:8c:4f:27:b4:11:62:ef:78:80:12:31:0a:6a:f7:
         ef:ea:b5:d9:54:17:10:bb:ee:e6:0f:8b:c9:74:6f:15:c6:09:
         c2:21:0f:35:4e:8f:8a:a5:b4:b8:2d:29:30:46:18:d7:38:d2:
         50:65:03:07:b4:87:28:e4:11:35:86:c4:c7:18:ef:05:d8:0b:
         2b:e7:75:64:43:3c:cd:f3:2c:83:ec:40:70:69:e7:08:fd:38:
         33:6b:93:e8:f5:01:87:cd:8b:3d:5a:8c:67:83:59:3c:fa:8c:
         2d:de:af:84:09:e5:26:62:63:54:1d:a1:a9:a2:62:35:ed:01:
         8c:ce:d0:f4:60:39:cb:ea:f1:f1:75:50:64:70:4c:68:1c:4d:
         9e:f6:cb:e2:cb:cb:94:cf:de:2f:50:a1:b3:c0:5e:c6:7f:06:
         85:63:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:19:56 2025 by rpki-client