This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
File:                     989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json)
Hash identifier:          0OhzvtbcmcTyR36fnajN3eijX0IUDcBNcZ0RuPv6N1g=
Subject key identifier:   78:A2:62:84:79:1B:96:AE:8A:0D:EB:21:E2:29:B7:E5:CE:2D:CD:12
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       1D50DBECE4B019FA5B175EFBA72D89DA0597BDFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
Manifest number:          0148
Signing time:             Wed 17 Dec 2025 16:19:03 +0000
Manifest this update:     Wed 17 Dec 2025 16:14:03 +0000
Manifest next update:     Sun 21 Dec 2025 18:38:03 +0000
Files and hashes:         1: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=)
                          2: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=)
                          3: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: jMJT/gqHpdwbv0Qqhd+W4dC6cQtp4z10YELoGPsuX2U=)
                          4: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=)
                          5: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:db:ec:e4:b0:19:fa:5b:17:5e:fb:a7:2d:89:da:05:97:bd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Dec 17 16:14:03 2025 GMT
            Not After : Dec 21 18:38:03 2025 GMT
        Subject: CN=78A26284791B96AE8A0DEB21E229B7E5CE2DCD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:82:19:e4:cb:59:6a:5a:39:ef:79:2e:65:
                    00:8f:ac:26:cd:9d:aa:6a:76:54:d5:a0:77:b2:d0:
                    96:c7:f0:1a:69:6c:13:85:b0:2d:9a:3c:60:41:14:
                    90:10:56:3b:19:5c:40:81:af:e6:1d:01:73:a2:6e:
                    ce:1e:7d:47:69:cd:a1:06:6b:3e:f9:06:af:d2:91:
                    4e:bb:28:3a:fe:41:b1:7c:d0:3a:00:16:d8:a6:83:
                    76:28:f6:6b:2f:75:ac:bf:68:6c:b2:80:63:44:90:
                    c0:54:15:2d:44:ce:93:da:5f:91:0d:cf:65:8e:2c:
                    2f:e4:7e:6c:c3:b3:63:64:83:4e:2e:2b:e7:9f:e2:
                    e5:45:f8:c9:b0:67:c2:f0:b8:3e:46:ad:73:b2:48:
                    ae:cd:bb:dc:2e:5d:25:d5:5a:04:35:fd:ca:ee:0f:
                    13:9a:83:6e:0f:92:e2:28:be:d5:b9:ed:3d:35:95:
                    cb:ca:da:d5:93:ba:0d:a8:f9:c5:91:e1:d8:0a:5b:
                    9f:d5:ee:eb:af:ea:be:95:ea:21:7c:28:c9:65:2d:
                    d6:7e:ce:37:1e:56:64:05:04:8b:54:77:02:40:7d:
                    43:8e:95:d4:e3:0a:d0:42:8d:b7:77:b5:02:5c:56:
                    55:72:f5:fb:0e:94:dc:29:7c:e5:54:04:d6:59:e4:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:62:84:79:1B:96:AE:8A:0D:EB:21:E2:29:B7:E5:CE:2D:CD:12
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f2:ff:6a:1c:e9:5d:ec:9a:93:2b:10:4f:5d:6a:27:cd:07:
         9b:2a:a4:ed:17:0d:41:e9:11:f9:92:ad:f1:96:a5:d7:68:64:
         86:87:64:ca:66:a9:ab:55:a9:d1:55:b7:43:fc:eb:ec:4e:5a:
         68:32:05:4a:72:b3:60:06:04:cc:ae:7d:8a:ca:84:86:d3:8a:
         c8:0b:47:f2:38:69:64:87:e7:04:c7:a8:cd:94:2b:44:f9:2e:
         83:8f:af:48:fc:be:2e:8d:e2:2d:df:b5:51:5c:9f:13:76:c7:
         fb:bb:03:fd:8d:84:38:fa:60:a8:30:d5:2b:f2:7a:ea:61:0c:
         e3:7f:d8:33:4d:75:2b:5b:b9:59:f2:c2:94:28:fe:22:d8:d8:
         6c:d3:aa:a6:dd:c3:65:f0:a8:ca:c3:8e:9f:f5:22:21:f1:3f:
         9b:b2:16:58:eb:71:6d:7a:ae:6e:4c:f9:55:f4:85:f8:7c:b2:
         d9:be:46:33:2d:82:49:1f:e3:ab:f3:82:04:f0:5d:bb:54:fc:
         42:fe:37:23:3f:e5:dc:1b:c9:0d:15:30:6d:5e:d0:7b:7f:47:
         c0:84:db:b7:ae:a6:8b:05:a7:de:ef:81:c9:e8:b8:9b:08:b8:
         00:ac:68:7d:d9:ee:7c:1e:7e:bb:29:42:0a:41:94:b5:ec:38:
         44:c1:a7:a5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHVDb7OSwGfpbF177py2J2gWXvfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz
OEE3MTFGNTAeFw0yNTEyMTcxNjE0MDNaFw0yNTEyMjExODM4MDNaMDMxMTAvBgNV
BAMTKDc4QTI2Mjg0NzkxQjk2QUU4QTBERUIyMUUyMjlCN0U1Q0UyRENEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZR4IZ5MtZalo573kuZQCPrCbN
napqdlTVoHey0JbH8BppbBOFsC2aPGBBFJAQVjsZXECBr+YdAXOibs4efUdpzaEG
az75Bq/SkU67KDr+QbF80DoAFtimg3Yo9msvday/aGyygGNEkMBUFS1EzpPaX5EN
z2WOLC/kfmzDs2Nkg04uK+ef4uVF+MmwZ8LwuD5GrXOySK7Nu9wuXSXVWgQ1/cru
DxOag24PkuIovtW57T01lcvK2tWTug2o+cWR4dgKW5/V7uuv6r6V6iF8KMllLdZ+
zjceVmQFBItUdwJAfUOOldTjCtBCjbd3tQJcVlVy9fsOlNwpfOVUBNZZ5BCXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUeKJihHkblq6KDesh4im35c4tzRIwHwYDVR0j
BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz
NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD
ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE
Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD
NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC
NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz8v9qHOld7JqTKxBPXWonzQeb
KqTtFw1B6RH5kq3xlqXXaGSGh2TKZqmrVanRVbdD/OvsTlpoMgVKcrNgBgTMrn2K
yoSG04rIC0fyOGlkh+cEx6jNlCtE+S6Dj69I/L4ujeIt37VRXJ8Tdsf7uwP9jYQ4
+mCoMNUr8nrqYQzjf9gzTXUrW7lZ8sKUKP4i2Nhs06qm3cNl8KjKw46f9SIh8T+b
shZY63Fteq5uTPlV9IX4fLLZvkYzLYJJH+Or84IE8F27VPxC/jcjP+XcG8kNFTBt
XtB7f0fAhNu3rqaLBafe74HJ6LibCLgArGh92e58Hn67KUIKQZS17DhEwael
-----END CERTIFICATE-----