This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
File:                     2901A096C59DC3A27E514C8163A5215B8F72629A.mft (raw, json)
Hash identifier:          /VrqARPaVR8YuUYVXwL588Mz8HnoyE36RHKjBUTPb/c=
Subject key identifier:   62:18:A8:16:8F:C6:BA:30:86:51:E8:A8:71:55:9D:15:89:59:AA:E0
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       44939CBAFDAF8935008F6151E4B100D552F2A47D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
Manifest number:          0147
Signing time:             Mon 22 Dec 2025 12:17:25 +0000
Manifest this update:     Mon 22 Dec 2025 12:12:25 +0000
Manifest next update:     Sun 28 Dec 2025 00:45:25 +0000
Files and hashes:         1: 3139322e3134312e3132342e302f32322d3234203d3e20323635353234.roa (hash: DhxBkbxRCpQ2XJAvhWli1LmehyvfwEgqiP4tSfMdc24=)
                          2: 3133312e3139362e3234382e302f32322d3234203d3e20323635353234.roa (hash: 8oojEBXYWBPdHl3oNz8703YJiKJ95vaH9qxTbNkVxQ0=)
                          3: 2901A096C59DC3A27E514C8163A5215B8F72629A.crl (hash: ngPdJOsIaYFyNx3qW5rZdJ/Ll0JLDplz97OQBmaH6rw=)
                          4: 3137302e38302e32382e302f32322d3234203d3e20323635353234.roa (hash: Aqj5al/mp8lwFazjVEY2PEBwBnUVFv0HtRGs0coaJwg=)
                          5: 323830363a3265623a3a2f33322d3438203d3e20323635353234.roa (hash: VIsdAqJ8c/trvPBvFOS0BMhGe5P1TUAa9FuUz5yCLqc=)
                          6: 3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa (hash: 7PxBAIWGNQrNoiKKhn34+QxCILCF+8X+FGksgZkfuVY=)
                          7: 323830363a3238363a3a2f33322d3438203d3e20323635353234.roa (hash: 39v6hQ+bC7p0Uf5cAudN3msnApBjidvgXW6hJxRZ3hE=)
                          8: 3138312e3139312e3234342e302f32322d3234203d3e20323635353234.roa (hash: No2+oZUAtmVK31SDkl54P2Py+2NrA/l/BPBSyu1D5dY=)
                          9: 3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa (hash: OA687dj+ecF+bdf9ydL80M/GPK/s2e88tuxPY7gaXms=)
                          10: 34352e3233312e34302e302f32322d3234203d3e20323635353234.roa (hash: +n955Hbe0J6qRXAiiOnADPZxqvt08N1Fo3E9Yv50gw0=)
                          11: 3230312e3138322e32302e302f32322d3234203d3e20323635353234.roa (hash: skG++ZHqpF9uJsNQfTZ/U18e6hbzlKoAE4zyLbxd1KI=)
                          12: 3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa (hash: 2Ky6iwQfV5mPvcf4RctV4LSVwKQWYw+IKW9xGs9Fjj8=)
                          13: 3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa (hash: AeuXAd0a+T265txW+Trq2uqj/NEuWRrBwyI24Gv2TI4=)
                          14: 3137302e3235342e38382e302f32322d3234203d3e20323635353234.roa (hash: aNgWY5zQaFRfijD5Nc1zOWk87umqM9CY+hCofvvEwNc=)
                          15: 3137392e302e3139362e302f32322d3234203d3e20323635353234.roa (hash: EKrHbPUM83blKWIiqd4lzGxR/wwxs3m10bZtmOdvTOc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:93:9c:ba:fd:af:89:35:00:8f:61:51:e4:b1:00:d5:52:f2:a4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Dec 22 12:12:25 2025 GMT
            Not After : Dec 28 00:45:25 2025 GMT
        Subject: CN=6218A8168FC6BA308651E8A871559D158959AAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:37:48:f9:fd:d2:75:b1:fd:d1:f2:81:eb:
                    23:48:40:01:6a:1b:e3:88:64:ae:8e:6f:fd:fb:18:
                    d4:0d:0f:7c:94:b2:b9:21:38:ff:c1:9b:c2:ac:bf:
                    8d:67:32:50:17:9b:d3:d2:da:d6:58:90:a7:41:f7:
                    ea:d1:71:b2:69:74:8c:f2:73:63:9d:50:a7:82:99:
                    a3:eb:63:27:9e:f9:0e:7a:f4:55:db:42:d7:44:c9:
                    88:e5:87:1b:ae:7f:43:35:1d:62:cd:ba:8b:69:32:
                    33:e0:92:45:9a:47:6e:85:95:7b:d3:75:ad:fe:98:
                    29:52:af:9c:e6:4b:80:cb:66:bd:57:e3:47:b8:1b:
                    47:a2:d8:a3:43:32:40:1a:0b:7c:da:62:dc:6b:0e:
                    f5:31:13:84:6f:54:7c:c0:95:c9:c0:39:d5:8c:c4:
                    a7:05:cf:b0:20:05:65:43:20:5d:32:2b:66:1f:89:
                    b3:4e:16:00:76:c3:4d:80:65:bf:34:1e:bf:c3:22:
                    59:e3:bf:8c:25:d1:fb:ca:9b:cb:b8:92:14:9e:41:
                    4c:b6:15:49:7e:49:0a:24:bc:01:6d:ba:e0:c6:2d:
                    48:96:88:c1:66:bd:1c:03:49:9c:99:f9:3d:1e:8e:
                    27:07:b1:f1:fa:27:2e:09:2f:a3:38:f5:6d:a9:aa:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:18:A8:16:8F:C6:BA:30:86:51:E8:A8:71:55:9D:15:89:59:AA:E0
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:ec:38:51:17:42:b8:51:99:45:58:0f:48:0b:b1:4e:53:
         f2:24:60:19:b7:6f:8c:86:89:68:e3:93:a0:70:7b:8c:5e:d2:
         91:45:e7:4e:7b:f9:21:7d:cc:f3:18:9e:c1:49:cd:ae:12:c9:
         92:45:b5:cc:69:fd:42:04:06:ce:a3:e4:3c:b5:d4:52:2a:bf:
         e2:cb:e3:a0:b6:68:88:00:0d:71:00:46:45:c4:9e:58:ea:13:
         e9:e3:5c:62:b6:af:ae:9b:59:d7:64:10:8e:23:c2:8e:cb:03:
         de:84:ca:dd:7a:df:dd:cd:59:9e:1e:dc:ce:3c:65:0b:02:27:
         3c:e1:45:a7:c7:3f:20:19:ae:2f:27:bf:b3:fd:c4:5f:1e:1c:
         2f:a4:c3:c9:aa:83:c7:f0:ed:57:2b:30:64:26:3f:83:99:af:
         da:40:74:04:02:53:05:ea:29:2a:97:04:04:b8:9a:dd:16:28:
         e8:fe:c1:e1:aa:17:a5:74:9d:e7:bd:1f:4b:b3:10:30:7c:09:
         f0:01:35:a4:3e:8e:6e:9e:c9:c7:5b:19:7a:3f:53:39:8e:7e:
         62:68:81:3c:89:c7:f4:e2:89:e2:91:22:6b:51:18:c4:08:5a:
         98:d0:c1:e6:71:c3:77:59:40:e8:f5:42:7c:eb:9a:55:df:d8:
         f1:3f:8a:97
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURJOcuv2viTUAj2FR5LEA1VLypH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwMUEwOTZDNTlEQzNBMjdFNTE0QzgxNjNBNTIxNUI4
RjcyNjI5QTAeFw0yNTEyMjIxMjEyMjVaFw0yNTEyMjgwMDQ1MjVaMDMxMTAvBgNV
BAMTKDYyMThBODE2OEZDNkJBMzA4NjUxRThBODcxNTU5RDE1ODk1OUFBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiTdI+f3SdbH90fKB6yNIQAFq
G+OIZK6Ob/37GNQND3yUsrkhOP/Bm8Ksv41nMlAXm9PS2tZYkKdB9+rRcbJpdIzy
c2OdUKeCmaPrYyee+Q569FXbQtdEyYjlhxuuf0M1HWLNuotpMjPgkkWaR26FlXvT
da3+mClSr5zmS4DLZr1X40e4G0ei2KNDMkAaC3zaYtxrDvUxE4RvVHzAlcnAOdWM
xKcFz7AgBWVDIF0yK2YfibNOFgB2w02AZb80Hr/DIlnjv4wl0fvKm8u4khSeQUy2
FUl+SQokvAFtuuDGLUiWiMFmvRwDSZyZ+T0ejicHsfH6Jy4JL6M49W2pqhtfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUYhioFo/GujCGUeiocVWdFYlZquAwHwYDVR0j
BBgwFoAUKQGglsWdw6J+UUyBY6UhW49yYpowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzMxRDE2MDhERjg0NDYxRDhENjg5MkJGODI0RjQ3MzEx
Q0REM0JEMEM4QkQ4OUE0REZFOEQ2NkI5QzFGOEE0LzAvMjkwMUEwOTZDNTlEQzNB
MjdFNTE0QzgxNjNBNTIxNUI4RjcyNjI5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTAxQTA5NkM1OURDM0EyN0U1
MTRDODE2M0E1MjE1QjhGNzI2MjlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzczMUQxNjA4REY4NDQ2MUQ4RDY4OTJCRjgyNEY0NzMxMUNERDNCRDBD
OEJEODlBNERGRThENjZCOUMxRjhBNC8wLzI5MDFBMDk2QzU5REMzQTI3RTUxNEM4
MTYzQTUyMTVCOEY3MjYyOUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmz+w4URdCuFGZRVgPSAuxTlPy
JGAZt2+Mholo45OgcHuMXtKRRedOe/khfczzGJ7BSc2uEsmSRbXMaf1CBAbOo+Q8
tdRSKr/iy+OgtmiIAA1xAEZFxJ5Y6hPp41xitq+um1nXZBCOI8KOywPehMrdet/d
zVmeHtzOPGULAic84UWnxz8gGa4vJ7+z/cRfHhwvpMPJqoPH8O1XKzBkJj+Dma/a
QHQEAlMF6ikqlwQEuJrdFijo/sHhqheldJ3nvR9LsxAwfAnwATWkPo5unsnHWxl6
P1M5jn5iaIE8icf04onikSJrURjECFqY0MHmccN3WUDo9UJ865pV39jxP4qX
-----END CERTIFICATE-----
Generated at Wed Dec 24 02:22:23 2025 by rpki-client