This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft
File:                     1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft (raw, json)
Hash identifier:          GHQBiiRHyFK0/7jvzrXgpius05gPZvyj3+J3oy4ozxE=
Subject key identifier:   20:54:65:47:93:9B:E7:C0:D9:11:FF:98:D4:3D:45:E0:C1:C8:E0:AB
Authority key identifier: 1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8
Certificate issuer:       /CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
Certificate serial:       1FA5D016BBFA136E78DE4D1D1E14B71C5C9CF45C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft
Manifest number:          0141
Signing time:             Sat 06 Dec 2025 21:03:14 +0000
Manifest this update:     Sat 06 Dec 2025 20:58:14 +0000
Manifest next update:     Thu 11 Dec 2025 16:50:14 +0000
Files and hashes:         1: 3137372e37332e3135332e302f32342d3234203d3e20323731383730.roa (hash: ivmzcojmjad3TRlWAro9QoA3nu8wRuGu/0nzpIQn6OM=)
                          2: 3137372e37332e3135352e302f32342d3234203d3e20323634363436.roa (hash: GEEWDtdDM6dY3kZm46PwvdBwYq+MkTOxykfq81rQIpY=)
                          3: 3137372e37332e3135342e302f32342d3234203d3e20323636373337.roa (hash: gpR2tO41017m6oku3lU26HiouHul6Aw4bWN0EfyWIaI=)
                          4: 3137372e37332e3135342e302f32342d3234203d3e20323634363436.roa (hash: AkGMAwv9wnPfGeO7IOHL11oYY7D6HjIRNgOzUDRMCcU=)
                          5: 3137372e37332e3135322e302f32342d3234203d3e20323634363436.roa (hash: t05kc4GwTSJ+HzpvjlaV8v7CZKHPakItDcr0lS0Cs6w=)
                          6: 1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl (hash: 52nRHYIpBxpuf7zNfEH1olm2eIiLAxuHG04p5pEQSSY=)
                          7: 3137372e37332e3135322e302f32342d3234203d3e20323636373337.roa (hash: qvyYgeiDILl6Q1r2MFnPKSA9x9Hj2GHuhIam44gM1uk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 16:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:d0:16:bb:fa:13:6e:78:de:4d:1d:1e:14:b7:1c:5c:9c:f4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
        Validity
            Not Before: Dec  6 20:58:14 2025 GMT
            Not After : Dec 11 16:50:14 2025 GMT
        Subject: CN=20546547939BE7C0D911FF98D43D45E0C1C8E0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:f2:6d:2f:b8:33:b3:98:c0:86:e4:60:2f:
                    7f:9d:74:17:6c:ff:40:51:41:34:dc:df:bd:e4:d9:
                    a1:a6:5d:14:db:e8:1f:bb:68:21:3d:de:74:fb:5c:
                    20:cb:33:5f:1a:20:e9:97:78:60:74:f6:1d:76:35:
                    a7:32:47:41:2b:1a:af:32:99:49:31:00:5d:9e:85:
                    81:60:7d:99:97:a4:8f:d4:31:94:50:8e:8a:14:4c:
                    3a:9f:b3:db:fa:3c:8a:49:9e:a2:65:f4:fa:53:a9:
                    6c:5f:cb:b8:f1:db:ee:7a:19:ad:aa:c8:da:7e:70:
                    04:4d:bb:8f:6f:8b:eb:92:a4:1b:ef:ef:ac:5a:fc:
                    6d:d9:6e:4e:f7:10:82:06:fd:0a:15:1c:68:d7:11:
                    8b:57:24:e4:fb:df:5c:f3:25:c5:42:45:9c:e1:2e:
                    12:6d:ba:e8:13:76:6c:84:c7:db:aa:e0:07:94:3b:
                    99:ac:51:52:0d:5a:1e:98:83:c9:de:a5:21:b9:ab:
                    96:8f:80:3b:d7:72:b2:b3:11:71:f3:29:3b:ba:ee:
                    59:62:1f:a1:89:c3:1d:47:a9:84:d4:fb:b6:e4:51:
                    f3:99:03:63:5f:e9:1d:51:01:cf:b5:54:4b:9c:6b:
                    3e:70:0e:a8:7e:f3:5a:3b:8d:d5:87:21:5a:c6:b7:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:65:47:93:9B:E7:C0:D9:11:FF:98:D4:3D:45:E0:C1:C8:E0:AB
            X509v3 Authority Key Identifier:
                keyid:1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:8b:b4:cf:10:2d:05:61:03:d8:6e:55:0f:20:a4:88:0f:
         6a:c3:72:ec:8a:57:f3:30:b8:fd:20:11:cf:1b:53:4e:3f:34:
         8f:d4:9b:4d:43:1b:b5:83:ee:9f:5b:0e:5f:f0:2b:03:ac:65:
         49:7a:ec:d5:b1:ed:03:90:1e:3d:47:01:97:95:cf:00:54:3d:
         53:2d:d4:2d:b8:ba:bc:6e:7b:eb:a5:55:a0:58:ff:ce:2c:91:
         a5:b4:c6:24:c5:cb:82:b0:c3:9a:6d:80:79:3c:a0:31:26:2f:
         77:01:91:56:22:9f:1c:f4:4a:06:10:a8:4e:9b:e5:33:b6:17:
         6c:b8:13:61:3d:92:5b:4d:34:d3:2b:73:5d:44:9c:31:22:6f:
         ae:7a:45:26:70:c7:ca:57:b2:cf:5c:9c:90:7a:41:7b:13:95:
         98:2a:f9:21:95:66:89:fe:25:dc:7c:74:eb:f6:4a:91:c6:c8:
         1f:7d:41:68:9f:ab:b6:4e:d1:f0:2f:05:e1:85:91:23:6d:4c:
         f7:41:8d:81:d1:1e:52:ba:e2:35:f8:2e:60:ce:39:22:87:35:
         16:97:e0:bb:03:79:42:00:98:0d:bd:01:10:44:55:07:b6:54:
         ce:8a:8b:e6:c0:aa:fa:38:bd:34:73:1e:5a:4e:ce:bd:b8:99:
         cf:2e:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:38:39 2025 by rpki-client