This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft
File:                     94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft (raw, json)
Hash identifier:          8YxGG7NeBkOiX7XBtPEhW4BMHmM1xi/3WV9/oR1o38E=
Subject key identifier:   68:F0:F4:B8:5E:31:58:8E:22:F1:56:CA:48:37:DD:AA:41:9A:6A:62
Authority key identifier: 94:EF:4D:E1:BC:BF:24:6C:78:3D:82:0A:FB:AC:01:E7:40:AF:2D:08
Certificate issuer:       /CN=94EF4DE1BCBF246C783D820AFBAC01E740AF2D08
Certificate serial:       53BEBBD96E12211D97E7D79DA32683F4D4B82566
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft
Manifest number:          0148
Signing time:             Mon 08 Dec 2025 14:58:22 +0000
Manifest this update:     Mon 08 Dec 2025 14:53:22 +0000
Manifest next update:     Sat 13 Dec 2025 20:46:22 +0000
Files and hashes:         1: 34352e3138372e342e302f32342d3234203d3e20323639383436.roa (hash: ueUfEMkTtRAD/hXpbAJKnnj5Jzj/NozuMw0sYztjbtc=)
                          2: 94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.crl (hash: 4igPBN2GZ0TC08WgLm44VnSBZChWXV5fknmWI3b6F4I=)
                          3: 323830333a343065303a3a2f33322d3332203d3e20323639383436.roa (hash: ZTRBo0bhjqqRFfzHAYVlx/t9WdY5I9xCgAACruLx1T4=)
                          4: 34352e3138372e352e302f32342d3234203d3e20323639383436.roa (hash: ceqkjVwWBfaWqhrHfJwaEypQuMF4u2PZLl1Wxf8+Tzc=)
                          5: 34352e3138372e372e302f32342d3234203d3e20323639383436.roa (hash: FCeJ2ESF/eEZwbCrTC0jF3vcKT4jJdxgDz2HpgdCO8U=)
                          6: 34352e3138372e362e302f32342d3234203d3e20323639383436.roa (hash: En+7/eSSiAt7LXwgbRZCB+Vxt9JyzM4ETfy20zicEDs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 20:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:bb:d9:6e:12:21:1d:97:e7:d7:9d:a3:26:83:f4:d4:b8:25:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EF4DE1BCBF246C783D820AFBAC01E740AF2D08
        Validity
            Not Before: Dec  8 14:53:22 2025 GMT
            Not After : Dec 13 20:46:22 2025 GMT
        Subject: CN=68F0F4B85E31588E22F156CA4837DDAA419A6A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:48:f9:7d:0b:73:8e:bc:23:c7:a9:93:a7:
                    d5:20:05:32:bf:5e:a2:ed:a7:23:af:ea:08:8f:a1:
                    68:c1:89:10:05:af:e1:f3:a3:c3:cc:ff:ca:d8:0c:
                    fb:0b:d6:73:d9:1f:3d:af:d7:6c:e5:c5:7e:e5:f0:
                    2b:16:3f:f5:e0:98:43:9e:71:e0:12:94:b0:4f:2a:
                    e0:4e:cb:45:11:bf:c5:5f:14:ea:96:cc:ba:68:a6:
                    83:35:84:1a:75:d9:7d:80:af:ee:ff:6b:fc:1b:42:
                    a5:ab:5d:04:09:e3:27:19:b6:4e:d7:c3:20:6e:9d:
                    a2:d7:4b:79:69:92:6f:8d:0b:d6:6c:c5:15:be:e0:
                    15:76:6b:a1:22:de:22:8d:5d:21:68:6d:e2:26:73:
                    3a:30:49:9b:b2:51:0d:40:f7:c6:c9:c4:54:10:00:
                    74:ef:90:6d:12:a1:0f:6b:d0:77:33:93:36:75:ec:
                    13:17:e7:90:b1:00:72:80:96:01:81:20:dd:0f:aa:
                    f4:03:ec:dd:06:1d:57:a4:af:2e:a8:79:11:c8:80:
                    e6:86:52:a7:02:63:75:7c:da:c8:e1:86:0b:c5:23:
                    1e:b9:d0:f3:49:e3:62:c5:5b:77:ed:c0:01:ad:cb:
                    74:43:91:17:80:14:14:a5:6f:18:90:b1:c8:cf:15:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:F4:B8:5E:31:58:8E:22:F1:56:CA:48:37:DD:AA:41:9A:6A:62
            X509v3 Authority Key Identifier:
                keyid:94:EF:4D:E1:BC:BF:24:6C:78:3D:82:0A:FB:AC:01:E7:40:AF:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:31:a7:ab:8a:65:1f:c2:b8:46:c2:f7:a6:c2:56:ff:93:18:
         c6:c6:92:40:da:b2:72:9b:73:64:51:0b:51:23:a9:67:96:1a:
         b4:34:b5:55:71:da:72:6b:b9:37:3d:04:e5:36:1c:c0:cb:bc:
         00:18:80:21:ed:57:79:e0:81:48:97:99:ad:08:ef:b0:41:6e:
         c4:ff:13:62:7f:d1:6f:38:f1:b9:18:d9:ec:47:d7:cd:cf:0c:
         90:e3:31:1a:3d:94:68:4f:f3:1b:00:df:55:2d:96:d2:92:3e:
         75:c7:5e:e9:ac:76:0b:24:1b:af:6c:a6:a9:fa:a3:e1:32:39:
         73:48:91:fb:69:b6:2b:d8:93:94:57:d8:4e:c1:c4:20:a6:bb:
         14:8d:6f:64:51:9f:7d:52:1d:4d:1e:24:39:18:9c:60:1f:03:
         38:01:72:23:81:27:0c:24:d4:88:ad:92:d4:a2:d3:c4:dc:79:
         1c:dd:5d:b7:6a:77:80:e4:34:e3:7c:98:f6:48:17:8e:55:53:
         88:4f:af:17:89:91:fa:b3:47:78:59:ff:30:41:a4:1a:61:a2:
         2d:09:a4:49:10:d9:cd:bd:be:68:f6:71:a2:8d:bb:4e:8b:88:
         59:ab:7d:70:10:65:c0:f5:4a:1c:47:20:5d:cd:29:73:00:8e:
         d3:ab:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----