This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
File:                     5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft (raw, json)
Hash identifier:          fYfbJ22+1/rojIE2bqJ/LRku6gxNMWJdjyXN4nNIifM=
Subject key identifier:   9E:4A:C8:0B:08:CE:59:D3:09:09:BE:6F:69:83:57:73:CA:78:1C:C5
Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A
Certificate issuer:       /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
Certificate serial:       05BB97D7E78EA6E450FD753959B5CDA9A28E90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
Manifest number:          0155
Signing time:             Mon 22 Dec 2025 08:09:58 +0000
Manifest this update:     Mon 22 Dec 2025 08:04:58 +0000
Manifest next update:     Sat 27 Dec 2025 22:13:58 +0000
Files and hashes:         1: 3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa (hash: RXMLQSJlUvdQJjQ+d9jGG4i6809finknMguDa1lKaSY=)
                          2: 5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl (hash: GnplVpJbOnWLmEXYFhgKDsWtnVVaDN650l4daxX+Ajo=)
                          3: 323830333a323334303a3a2f33322d3332203d3e20323634363839.roa (hash: oGEpVKYagiIk9lMEYwwvGuNW7erZW5GelhxgzBo0Lfo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 22:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bb:97:d7:e7:8e:a6:e4:50:fd:75:39:59:b5:cd:a9:a2:8e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
        Validity
            Not Before: Dec 22 08:04:58 2025 GMT
            Not After : Dec 27 22:13:58 2025 GMT
        Subject: CN=9E4AC80B08CE59D30909BE6F69835773CA781CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:b1:d1:92:87:63:cd:cb:fb:7a:72:38:b5:
                    60:78:7e:2b:c8:d0:d1:dd:d7:48:70:ff:9c:54:40:
                    45:70:af:9a:55:53:f6:c6:f9:5b:ff:47:13:d3:2a:
                    99:f1:74:5f:cb:c5:ad:f8:ca:7a:2f:b4:9f:6b:2c:
                    2e:34:7f:62:13:87:55:48:89:47:7a:28:33:af:41:
                    a8:66:68:59:27:c6:b3:90:db:74:36:61:a4:96:91:
                    d2:c0:b1:7b:de:fe:6d:3e:9a:ea:3f:ec:76:c9:e5:
                    a6:f5:47:0f:f5:36:31:47:74:fe:e1:c0:0c:29:37:
                    c2:40:72:85:90:86:88:9a:b0:7c:52:cb:88:6a:d4:
                    a2:1b:bc:ed:2f:a1:45:66:9c:72:b1:cb:c5:84:5f:
                    8d:d5:26:6c:da:70:78:af:f5:90:d0:65:0b:a5:be:
                    a3:d7:c9:f7:dc:34:8c:f3:ac:54:c8:2f:50:65:6e:
                    ce:f8:39:a9:c4:e8:5e:43:85:8c:09:62:28:d3:b1:
                    4a:d5:22:2b:8d:a8:5a:8b:ba:d1:81:f1:1b:92:54:
                    a1:90:11:5a:bd:6b:de:c9:04:1e:66:f1:36:e3:68:
                    49:84:36:5c:0a:f7:75:a5:fc:9b:64:64:32:c4:a2:
                    2f:8e:7f:1d:31:0d:d3:46:e9:58:a7:f5:03:a2:20:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:C8:0B:08:CE:59:D3:09:09:BE:6F:69:83:57:73:CA:78:1C:C5
            X509v3 Authority Key Identifier:
                keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:fe:78:7b:9c:51:80:ea:5a:16:cc:10:d8:99:2e:a9:47:
         8a:33:c1:26:20:aa:d2:ca:62:0b:5f:51:06:d4:b5:86:84:1d:
         72:51:46:fe:cd:c3:8e:16:0f:e9:9a:7f:69:6a:db:3a:bd:52:
         1b:e8:e8:9e:2d:79:b8:b7:ca:b8:1e:da:d9:da:3d:4a:cc:4d:
         ee:bb:5e:cd:97:e4:e4:75:13:d3:16:d3:65:f9:4f:12:ac:06:
         b9:17:6a:18:06:ab:94:fe:8a:a2:00:b6:bf:36:20:b3:be:71:
         54:9f:86:08:c8:f2:f5:9c:00:e9:1a:68:f3:b1:16:44:ea:84:
         02:bb:a7:34:72:61:25:40:7f:57:52:b5:d6:4a:96:05:9c:84:
         1e:5d:68:d7:c8:5a:7f:db:02:bc:3a:3b:e7:94:cf:32:3e:f6:
         54:a0:49:dc:ae:a3:2a:96:1d:d3:1e:c8:06:2c:7d:26:7e:ca:
         e7:bb:c6:1b:b9:64:f2:fe:54:e7:e3:bd:08:8e:bd:08:6b:03:
         57:ff:37:ba:8e:02:bf:f3:84:2f:f6:7a:11:6d:d9:10:a4:e0:
         2c:86:a1:6d:e6:b7:0f:5f:14:21:40:7e:0c:74:59:31:c5:e7:
         ee:2a:0f:04:5e:36:0a:16:56:ef:34:43:dd:16:53:64:c6:91:
         be:dc:f0:0a
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgITBbuX1+eOpuRQ/XU5WbXNqaKOkDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1QTNENDg4REE0NUYxQUZDNkZGQzlDNDQ0NzMyMTM5MjE0
QkZENDdBMB4XDTI1MTIyMjA4MDQ1OFoXDTI1MTIyNzIyMTM1OFowMzExMC8GA1UE
AxMoOUU0QUM4MEIwOENFNTlEMzA5MDlCRTZGNjk4MzU3NzNDQTc4MUNDNTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjLsdGSh2PNy/t6cji1YHh+K8jQ
0d3XSHD/nFRARXCvmlVT9sb5W/9HE9MqmfF0X8vFrfjKei+0n2ssLjR/YhOHVUiJ
R3ooM69BqGZoWSfGs5DbdDZhpJaR0sCxe97+bT6a6j/sdsnlpvVHD/U2MUd0/uHA
DCk3wkByhZCGiJqwfFLLiGrUohu87S+hRWaccrHLxYRfjdUmbNpweK/1kNBlC6W+
o9fJ99w0jPOsVMgvUGVuzvg5qcToXkOFjAliKNOxStUiK42oWou60YHxG5JUoZAR
Wr1r3skEHmbxNuNoSYQ2XAr3daX8m2RkMsSiL45/HTEN00bpWKf1A6IgNO8CAwEA
AaOCAtMwggLPMB0GA1UdDgQWBBSeSsgLCM5Z0wkJvm9pg1dzyngcxTAfBgNVHSME
GDAWgBRaPUiNpF8a/G/8nERHMhOSFL/UejAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljL0NGMTBCNDY1OTIzMEUxN0Y4MkQzQkQzNkI5NTY3MjkzRUI1
QjZGRDBEQjAxMDRFMzgxMkM5NTRDNDBGREQxNUEvMC81QTNENDg4REE0NUYxQUZD
NkZGQzlDNDQ0NzMyMTM5MjE0QkZENDdBLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzVBM0Q0ODhEQTQ1RjFBRkM2RkZD
OUM0NDQ3MzIxMzkyMTRCRkQ0N0EuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI
KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9DRjEwQjQ2NTkyMzBFMTdGODJEM0JEMzZCOTU2NzI5M0VCNUI2RkQwREIw
MTA0RTM4MTJDOTU0QzQwRkREMTVBLzAvNUEzRDQ4OERBNDVGMUFGQzZGRkM5QzQ0
NDczMjEzOTIxNEJGRDQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADyO/nh7nFGA6loWzBDYmS6pR4oz
wSYgqtLKYgtfUQbUtYaEHXJRRv7Nw44WD+maf2lq2zq9Uhvo6J4tebi3yrge2tna
PUrMTe67Xs2X5OR1E9MW02X5TxKsBrkXahgGq5T+iqIAtr82ILO+cVSfhgjI8vWc
AOkaaPOxFkTqhAK7pzRyYSVAf1dStdZKlgWchB5daNfIWn/bArw6O+eUzzI+9lSg
SdyuoyqWHdMeyAYsfSZ+yue7xhu5ZPL+VOfjvQiOvQhrA1f/N7qOAr/zhC/2ehFt
2RCk4CyGoW3mtw9fFCFAfgx0WTHF5+4qDwReNgoWVu80Q90WU2TGkb7c8Ao=
-----END CERTIFICATE-----