This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
File:                     4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json)
Hash identifier:          szgGOCxVHwP7Spk8peblm4/hpkbx9+v8XcBuSZNFkNw=
Subject key identifier:   51:4B:79:CC:A2:CD:69:07:83:E5:7A:8A:A7:18:A4:C1:8E:97:02:BD
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       6FA2AB73313DC56376DB0364446320B55750F605
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
Manifest number:          0154
Signing time:             Thu 25 Dec 2025 12:01:39 +0000
Manifest this update:     Thu 25 Dec 2025 11:56:39 +0000
Manifest next update:     Mon 29 Dec 2025 19:47:39 +0000
Files and hashes:         1: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=)
                          2: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: DQz1pccd098QAGNZIN3xQYiDICpLmSiWWjS1HJivrkU=)
                          3: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=)
                          4: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=)
                          5: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 19:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:ab:73:31:3d:c5:63:76:db:03:64:44:63:20:b5:57:50:f6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Dec 25 11:56:39 2025 GMT
            Not After : Dec 29 19:47:39 2025 GMT
        Subject: CN=514B79CCA2CD690783E57A8AA718A4C18E9702BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:91:ad:1b:66:19:57:42:65:eb:de:2e:8d:
                    e4:c5:fe:ce:a6:f8:45:bb:61:aa:5d:eb:53:f9:ee:
                    66:91:74:23:6e:0e:ed:9d:30:f2:ff:53:5a:52:b2:
                    f9:26:f4:fd:14:1f:f6:40:7b:b3:47:93:d8:7e:5e:
                    5d:1b:3f:a3:b0:76:be:f4:1a:f6:40:3d:ac:d4:48:
                    a4:a2:da:6d:c9:10:2b:8a:6d:81:ec:e4:70:38:f3:
                    6e:10:aa:15:68:71:30:1a:2b:e1:c0:42:52:3c:62:
                    2f:a1:f0:f5:89:d0:22:07:e8:4f:4f:07:64:18:a2:
                    f8:e0:fd:36:06:50:17:9c:19:46:d3:aa:f7:bd:61:
                    3c:38:88:ce:bd:64:ae:b2:77:e9:03:bd:b3:17:06:
                    3e:d5:64:ea:f5:02:cc:81:35:61:06:a3:9a:ca:c5:
                    d3:88:05:65:f2:d0:34:03:d7:ab:6f:0e:67:c5:1b:
                    36:3b:b2:2f:d6:67:5d:d0:97:ba:e1:1c:58:47:c5:
                    66:a2:50:9c:fc:75:d2:b2:9e:85:23:0d:79:1d:d2:
                    f4:63:1d:0a:8c:4c:1c:a2:12:ac:26:de:82:91:75:
                    ce:da:7a:3b:99:11:74:bf:20:96:73:82:1e:33:20:
                    7f:de:d4:e6:2a:5d:1c:28:45:9e:2f:99:9e:27:51:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:79:CC:A2:CD:69:07:83:E5:7A:8A:A7:18:A4:C1:8E:97:02:BD
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:4b:17:7e:73:ff:05:4b:cb:e5:c6:af:03:b0:f0:aa:5f:dd:
         b7:b6:2f:4e:22:0e:bf:ce:92:81:93:00:e9:e0:30:92:6e:b1:
         eb:4e:53:c4:68:b8:d1:5a:b7:1c:be:8e:4a:19:49:f6:03:05:
         9a:43:37:cc:da:8a:05:be:15:30:e6:70:41:72:d9:d7:03:78:
         5c:82:b7:a6:2c:70:0f:83:c2:e0:1d:17:4b:97:e0:61:aa:e7:
         ea:fe:af:41:05:a1:52:8c:b2:6f:da:c3:45:0d:f7:95:80:5a:
         f0:54:c0:fa:27:4f:e4:cc:66:2d:c1:0e:0a:ed:b6:bc:c2:db:
         5f:db:3d:9f:33:92:6a:d9:cd:28:29:4c:7f:eb:6a:02:49:74:
         3d:10:b1:4d:33:0c:2a:06:37:a2:07:77:7c:ed:3b:9a:d2:5d:
         1b:e5:aa:d0:b2:11:03:6c:0c:00:eb:f7:d9:bc:e3:5a:ae:8c:
         d4:15:8b:79:db:5d:14:51:e2:d9:6a:65:ec:54:24:35:b9:58:
         c2:ec:32:6f:4b:ae:db:cd:d7:8f:85:ff:ef:f0:c6:41:d2:5e:
         49:fb:22:5f:c2:0a:c6:2e:b9:86:d1:74:cc:99:fc:32:08:b7:
         75:96:e1:6e:6d:57:6a:07:cc:24:f3:e5:50:67:ff:ca:a0:e6:
         71:e4:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----