This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
File:                     11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft (raw, json)
Hash identifier:          kLUIRsN5iqCQY70CHkyMcQ4EGJUdxFg94jpSfhfTNLs=
Subject key identifier:   15:B3:F9:20:54:47:E1:4D:25:64:18:BB:4F:88:B3:E9:17:B8:EC:2F
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       3A3925DDF804B6D5225EC6A83107865A67F5C2F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
Manifest number:          0145
Signing time:             Tue 16 Dec 2025 18:34:17 +0000
Manifest this update:     Tue 16 Dec 2025 18:29:17 +0000
Manifest next update:     Sun 21 Dec 2025 18:21:17 +0000
Files and hashes:         1: 34352e3136322e36302e302f32332d3234203d3e20323637363739.roa (hash: 04r0aYcgUAItm/Ek+HHn7So65HxpuINIA/vHixmZu+4=)
                          2: 34352e3136322e36302e302f32322d3232203d3e20323637363739.roa (hash: uXzX61WoyAFDn4vX0lxLXY4KCNjT4UB0Ws4oruZhjXk=)
                          3: 323830333a366561303a3a2f33322d3332203d3e20323637363739.roa (hash: 5U1nV+DdS8kBeVMKooMbEcbPrbRzReZ/+3EWAD1KDc0=)
                          4: 34352e3136322e36322e302f32332d3234203d3e20323637363739.roa (hash: vXGWZD3JMWKBssc3qffMiVj02W5ob17Mo/zrcpHHdl0=)
                          5: 323830333a366561303a3a2f34382d3438203d3e20323637363739.roa (hash: fVJishM4vPqqiWQ/PmsaozHUELBcCoDrCIs7J8ZB9GI=)
                          6: 34352e3136322e36332e302f32342d3234203d3e20323637363739.roa (hash: VUsu8lzpmKRKktDghVLE+1m++BLEsxpQT7h8OOXNTf8=)
                          7: 11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl (hash: SpQQSadSntUvQl3prZi9N5vDTZ6ELSgYeeCoeKKZz2o=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:39:25:dd:f8:04:b6:d5:22:5e:c6:a8:31:07:86:5a:67:f5:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Dec 16 18:29:17 2025 GMT
            Not After : Dec 21 18:21:17 2025 GMT
        Subject: CN=15B3F9205447E14D256418BB4F88B3E917B8EC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:ab:a8:de:c0:76:44:3f:27:71:c2:47:33:
                    54:29:3a:a4:14:6d:c4:45:7d:3e:e2:80:b9:bc:48:
                    89:c8:17:e7:e7:10:99:21:e7:fa:cc:7c:78:15:78:
                    af:f3:6d:7f:9c:82:d2:58:a8:5e:27:a2:9a:2a:27:
                    18:20:2d:a0:e3:03:3e:5c:80:fe:c2:cd:2e:0e:f8:
                    33:1a:c0:af:1e:36:59:7c:de:eb:37:62:26:61:a6:
                    95:d0:f5:db:e8:2e:ef:ff:87:8a:ba:85:76:5f:55:
                    32:cb:eb:9c:3b:6c:c0:96:15:87:c2:da:55:c5:a6:
                    c4:91:b6:23:3e:2b:66:7f:55:2f:41:74:23:1d:db:
                    f5:2b:50:97:e1:50:8f:0a:b4:74:5c:a2:61:61:19:
                    d3:ba:56:ec:85:88:03:7b:7d:f7:f1:8a:1f:d1:fa:
                    e6:7b:98:63:19:b2:a2:7e:06:73:fc:22:c9:48:13:
                    99:a9:88:c0:eb:1a:f1:9b:80:b7:a1:5a:36:97:ab:
                    cc:0d:f9:d8:60:bb:11:1f:89:58:75:59:bd:23:d7:
                    61:9a:83:00:94:a7:18:40:74:9d:2e:33:7f:7c:b3:
                    2e:90:5c:45:eb:0a:a4:12:b7:31:5c:df:92:42:6d:
                    b1:ca:ae:cd:ea:9e:3b:7f:70:33:00:05:e1:59:b0:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:F9:20:54:47:E1:4D:25:64:18:BB:4F:88:B3:E9:17:B8:EC:2F
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:78:8e:bd:42:9a:fe:5e:a3:18:0f:0a:61:b6:2d:9d:b2:
         98:23:01:ef:4c:fc:c3:ca:27:e4:85:d7:07:52:12:de:7c:b0:
         68:e6:ae:06:62:f4:b5:19:19:4c:3e:ff:23:e6:1b:34:90:1f:
         64:03:1b:91:e8:79:89:17:d0:8e:c1:3f:54:3f:5a:92:18:a3:
         05:95:98:7d:7d:f1:71:47:b5:d7:4e:a2:51:fc:15:c8:a2:76:
         01:fd:ff:f8:8e:20:a6:2e:97:11:f0:d7:c3:e9:58:93:56:8e:
         dd:1f:4c:e4:5b:22:a9:dd:de:08:83:65:0e:26:b7:47:17:f8:
         7e:14:61:ac:00:ad:3c:ee:4e:81:69:af:a3:ad:ec:0c:de:03:
         1e:1e:d3:3d:69:d3:1c:da:f2:4c:72:41:fd:07:1f:07:35:2d:
         bb:5e:42:cb:5e:94:10:03:77:87:ee:b3:2e:8b:0b:f7:da:f6:
         6e:90:00:cc:96:2e:95:fb:d7:4c:80:9d:8a:07:ca:39:b4:14:
         82:d3:67:02:16:5b:48:9d:f7:10:e5:fa:f2:0c:4f:93:a5:91:
         4c:f9:fd:88:5c:eb:dc:2f:84:2d:77:7a:31:84:9d:20:c7:96:
         66:22:8f:7f:34:8d:f1:a0:c2:dc:ef:3a:28:1c:24:52:a4:05:
         79:4f:2f:a7
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOjkl3fgEttUiXsaoMQeGWmf1wvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDODQ0QkY1RDYzNDdFM0RCOUY0NEI4QzNFRkFDMUYx
NDk5Qjc5NTAeFw0yNTEyMTYxODI5MTdaFw0yNTEyMjExODIxMTdaMDMxMTAvBgNV
BAMTKDE1QjNGOTIwNTQ0N0UxNEQyNTY0MThCQjRGODhCM0U5MTdCOEVDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMquo3sB2RD8nccJHM1QpOqQU
bcRFfT7igLm8SInIF+fnEJkh5/rMfHgVeK/zbX+cgtJYqF4nopoqJxggLaDjAz5c
gP7CzS4O+DMawK8eNll83us3YiZhppXQ9dvoLu//h4q6hXZfVTLL65w7bMCWFYfC
2lXFpsSRtiM+K2Z/VS9BdCMd2/UrUJfhUI8KtHRcomFhGdO6VuyFiAN7fffxih/R
+uZ7mGMZsqJ+BnP8IslIE5mpiMDrGvGbgLehWjaXq8wN+dhguxEfiVh1Wb0j12Ga
gwCUpxhAdJ0uM398sy6QXEXrCqQStzFc35JCbbHKrs3qnjt/cDMABeFZsAZDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUFbP5IFRH4U0lZBi7T4iz6Re47C8wHwYDVR0j
BBgwFoAUEchEv11jR+Pbn0S4w++sHxSZt5UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMzY1QTIyRjc4OTRBMjEzMkVEMzg0N0Q0MDg1Nzk4RTM3
MTFFQzUzQUQ2RkNFN0I4QzA1MEIyNEU4MzI5Mjc2LzAvMTFDODQ0QkY1RDYzNDdF
M0RCOUY0NEI4QzNFRkFDMUYxNDk5Qjc5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUM4NDRCRjVENjM0N0UzREI5
RjQ0QjhDM0VGQUMxRjE0OTlCNzk1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjM2NUEyMkY3ODk0QTIxMzJFRDM4NDdENDA4NTc5OEUzNzExRUM1M0FE
NkZDRTdCOEMwNTBCMjRFODMyOTI3Ni8wLzExQzg0NEJGNUQ2MzQ3RTNEQjlGNDRC
OEMzRUZBQzFGMTQ5OUI3OTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdlniOvUKa/l6jGA8KYbYtnbKY
IwHvTPzDyifkhdcHUhLefLBo5q4GYvS1GRlMPv8j5hs0kB9kAxuR6HmJF9COwT9U
P1qSGKMFlZh9ffFxR7XXTqJR/BXIonYB/f/4jiCmLpcR8NfD6ViTVo7dH0zkWyKp
3d4Ig2UOJrdHF/h+FGGsAK087k6Baa+jrewM3gMeHtM9adMc2vJMckH9Bx8HNS27
XkLLXpQQA3eH7rMuiwv32vZukADMli6V+9dMgJ2KB8o5tBSC02cCFltInfcQ5fry
DE+TpZFM+f2IXOvcL4Qtd3oxhJ0gx5ZmIo9/NI3xoMLc7zooHCRSpAV5Ty+n
-----END CERTIFICATE-----
Generated at Wed Dec 17 06:01:44 2025 by rpki-client