This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
File:                     D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft (raw, json)
Hash identifier:          yLDyEwlbRVMT5DbmtaZjuvGFgqxkOkozpkISlKhr0gA=
Subject key identifier:   9B:6D:95:AA:F5:68:24:8B:C0:BF:95:3D:EA:49:E4:CC:6D:8F:67:EE
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       128B06EC022D3FC5D80DB1349BF47B81AD80DAE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
Manifest number:          014A
Signing time:             Tue 16 Dec 2025 09:44:14 +0000
Manifest this update:     Tue 16 Dec 2025 09:39:14 +0000
Manifest next update:     Sat 20 Dec 2025 22:51:14 +0000
Files and hashes:         1: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (hash: 7mm3mCGIoZexDzhAGuH/bf5GqhNwXZ3jwwtWfeQz3c8=)
                          2: 3135392e31362e342e302f32342d3234203d3e20323732333233.roa (hash: MDeJlQE/QYUt0IOXHP5qWTWuvb4cThq/54ZgjGe5N3Q=)
                          3: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl (hash: KdGa/QGhnDmDew9LT/7LkLbmKpoBlctYDogTa67FEuQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8b:06:ec:02:2d:3f:c5:d8:0d:b1:34:9b:f4:7b:81:ad:80:da:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Dec 16 09:39:14 2025 GMT
            Not After : Dec 20 22:51:14 2025 GMT
        Subject: CN=9B6D95AAF568248BC0BF953DEA49E4CC6D8F67EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:db:22:da:b6:08:21:65:b1:8e:7c:89:b5:
                    e9:83:4d:2c:6e:95:02:7b:46:6a:87:5b:6b:f2:03:
                    6d:5e:ea:04:d6:f4:b9:65:36:fd:24:75:61:f3:d2:
                    ab:f3:c3:74:16:bc:a9:73:23:59:64:0a:03:df:10:
                    91:04:33:66:73:af:3a:0c:c4:17:ab:88:bd:4e:18:
                    48:5b:d8:68:e7:e7:64:e4:34:af:75:ad:1e:23:cd:
                    1c:2b:26:c8:1b:5d:ea:f4:84:db:ed:88:36:49:28:
                    00:33:5d:d3:a5:9b:22:8f:ca:76:46:8f:68:37:90:
                    9c:d2:9b:80:40:60:8b:e8:74:e9:63:70:ab:8f:7a:
                    34:f5:46:f1:9c:46:7a:03:62:a6:23:fd:22:02:45:
                    9d:86:bd:50:28:e9:a6:d4:bd:7e:1c:dd:c0:65:a9:
                    d6:3f:6d:1a:7a:de:6b:8d:a7:77:22:33:2e:06:6b:
                    64:8e:5a:44:6e:15:1c:cb:f5:ad:0f:e0:03:85:da:
                    b9:f5:08:e6:03:b7:b1:83:5a:a7:dd:f2:0d:1d:f2:
                    fb:71:3c:00:7a:fb:15:10:06:fc:29:9e:c6:5b:ae:
                    f3:b0:68:1c:38:e3:82:16:d2:24:b3:71:ed:09:f5:
                    c4:48:7e:7e:56:e7:98:01:d7:44:c9:4e:ee:60:d4:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:95:AA:F5:68:24:8B:C0:BF:95:3D:EA:49:E4:CC:6D:8F:67:EE
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cf:8d:8c:00:6b:3a:69:2a:a1:a1:8d:9f:37:63:3c:e2:b5:
         d0:ff:39:bb:64:f6:3e:6b:cb:93:de:ad:e1:e4:f5:4b:c3:87:
         c8:8d:23:94:3a:42:c5:3c:d9:a0:52:9d:57:b6:2a:3e:7b:d5:
         78:69:b1:85:f3:56:9c:fc:e9:2a:8b:ce:7e:f8:e2:f3:73:13:
         02:21:16:2e:5e:9c:2d:d1:11:f3:f4:88:e9:f9:0e:74:3a:63:
         92:39:ed:ae:36:d1:e7:63:c4:50:ee:08:2c:8f:94:43:fb:83:
         22:93:ef:a6:65:96:f7:f1:50:02:57:d5:b8:6e:7a:03:65:42:
         06:05:ce:f1:a4:5b:02:8e:43:35:92:a2:e6:dd:04:ac:4b:b8:
         a7:85:6e:5a:b1:a1:f8:5d:61:a1:c9:94:39:aa:2e:06:4a:75:
         c8:3d:85:3b:f2:d7:a0:50:d7:65:91:25:d7:86:44:c5:f7:c3:
         99:59:4c:09:fe:76:a3:26:94:06:70:ed:49:4c:5c:bf:49:a7:
         bf:ae:8b:c4:ed:52:f1:36:a9:2c:6f:3b:0d:8a:5a:c8:9b:20:
         8f:c3:b6:3e:7c:db:95:db:ae:0f:23:e6:2b:fb:a0:ab:d4:de:
         5a:b8:6a:be:23:b7:3f:73:97:42:d6:65:81:49:0d:cf:77:cc:
         40:84:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----