This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
File:                     DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json)
Hash identifier:          WaYHr7d43vKlNs2rLzLJWWKmfsY53GS2VGHyPEUM4k0=
Subject key identifier:   8E:86:00:E0:78:CE:AE:99:0E:34:EA:C3:EF:36:EB:AB:97:ED:CD:33
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       745C04F7114886EDA71CC38F9DE98D0611D46FD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
Manifest number:          0151
Signing time:             Tue 16 Dec 2025 10:14:31 +0000
Manifest this update:     Tue 16 Dec 2025 10:09:31 +0000
Manifest next update:     Sat 20 Dec 2025 23:27:31 +0000
Files and hashes:         1: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=)
                          2: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=)
                          3: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: OlR2nOQ/p0bYB1KFnk7jwV+ISQYqX0OVwUsnwKhPYnQ=)
                          4: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=)
                          5: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5c:04:f7:11:48:86:ed:a7:1c:c3:8f:9d:e9:8d:06:11:d4:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Dec 16 10:09:31 2025 GMT
            Not After : Dec 20 23:27:31 2025 GMT
        Subject: CN=8E8600E078CEAE990E34EAC3EF36EBAB97EDCD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:06:c7:e4:21:25:49:0c:1b:87:a1:2a:a9:
                    81:19:af:51:e3:cb:0f:ab:7f:b9:7b:55:74:23:a6:
                    29:57:bf:18:74:62:89:7f:34:0f:5c:6a:80:78:2c:
                    0c:5f:7c:e4:6e:15:d8:0a:38:f5:ab:85:c2:26:f8:
                    47:00:7f:26:72:ff:9a:a5:49:1a:cb:e7:f5:b6:7b:
                    d3:69:85:7a:25:a8:99:b9:42:75:c8:16:cc:6f:4a:
                    d6:48:05:45:6d:76:59:2f:d2:1b:3e:77:6f:da:e7:
                    ef:e7:69:be:d3:24:37:d1:de:00:86:13:8c:3d:25:
                    6f:8b:d6:ae:96:97:fb:e1:cd:33:26:d4:bb:6c:19:
                    f6:bf:da:f0:85:25:46:1c:51:a8:8e:2e:5e:9f:d5:
                    51:54:9f:73:79:d8:9f:75:eb:02:d1:2f:d9:49:f4:
                    05:7f:f3:a3:41:84:42:c2:f7:d3:90:7d:69:54:3b:
                    12:35:09:1c:ea:f6:8a:74:e4:42:26:98:3e:77:96:
                    10:0a:eb:5c:62:3a:e2:51:4c:15:f7:7e:51:7d:2c:
                    07:fe:d8:7e:74:4e:d9:9a:61:bb:c7:8a:1d:1a:e2:
                    f6:e3:66:5d:fc:ea:a5:ca:84:49:f8:ea:43:76:01:
                    64:fa:07:d2:8c:d3:bc:17:78:ef:53:c0:d6:1d:5a:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:00:E0:78:CE:AE:99:0E:34:EA:C3:EF:36:EB:AB:97:ED:CD:33
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:31:11:58:7d:d1:e0:71:0d:36:74:0b:bd:af:5d:c6:9e:
         b2:79:20:7b:cd:82:a6:34:e3:5b:92:90:3e:61:f9:51:f3:1a:
         ce:87:3a:53:6f:10:f3:47:05:24:26:72:d5:5f:49:47:36:e4:
         19:ad:55:8f:f5:de:97:56:52:18:7e:ba:97:af:75:e3:ac:70:
         58:b8:fa:c5:3d:a5:e0:5e:1b:16:20:a0:da:4b:3c:c1:84:df:
         1d:ce:29:b4:e4:d9:c2:fe:ad:f5:75:ab:44:66:5a:57:71:f2:
         9f:78:77:12:52:39:14:8a:51:77:cc:fd:b0:a7:d0:ed:ad:13:
         5f:90:b9:41:a5:1f:d2:cb:1a:29:4c:1f:c8:1d:86:6f:20:3c:
         69:7e:3f:e3:df:2a:9e:ea:2b:81:9e:1b:ec:6c:9b:dc:37:50:
         89:6d:1f:c3:de:a6:5f:14:6e:ad:46:b5:76:eb:88:05:31:54:
         c6:24:a2:2b:a9:26:c1:d6:c3:48:b4:30:03:c7:cf:57:52:13:
         e2:0a:00:a5:03:a3:40:36:e7:7a:f9:84:b7:84:d4:61:9e:0e:
         1e:cb:84:54:b8:55:89:76:6d:96:06:61:27:2a:00:c1:81:af:
         12:4b:7e:ca:56:67:b7:c6:27:4f:14:52:1b:50:3f:dc:1e:fc:
         00:ad:96:f5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdFwE9xFIhu2nHMOPnemNBhHUb9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy
NERDRjdGQjAeFw0yNTEyMTYxMDA5MzFaFw0yNTEyMjAyMzI3MzFaMDMxMTAvBgNV
BAMTKDhFODYwMEUwNzhDRUFFOTkwRTM0RUFDM0VGMzZFQkFCOTdFRENEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYgbH5CElSQwbh6EqqYEZr1Hj
yw+rf7l7VXQjpilXvxh0Yol/NA9caoB4LAxffORuFdgKOPWrhcIm+EcAfyZy/5ql
SRrL5/W2e9NphXolqJm5QnXIFsxvStZIBUVtdlkv0hs+d2/a5+/nab7TJDfR3gCG
E4w9JW+L1q6Wl/vhzTMm1LtsGfa/2vCFJUYcUaiOLl6f1VFUn3N52J916wLRL9lJ
9AV/86NBhELC99OQfWlUOxI1CRzq9op05EImmD53lhAK61xiOuJRTBX3flF9LAf+
2H50TtmaYbvHih0a4vbjZl386qXKhEn46kN2AWT6B9KM07wXeO9TwNYdWsLnAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUjoYA4HjOrpkONOrD7zbrq5ftzTMwHwYDVR0j
BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE
QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC
MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz
QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE
MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz
OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR5TERWH3R4HENNnQLva9dxp6y
eSB7zYKmNONbkpA+YflR8xrOhzpTbxDzRwUkJnLVX0lHNuQZrVWP9d6XVlIYfrqX
r3XjrHBYuPrFPaXgXhsWIKDaSzzBhN8dzim05NnC/q31datEZlpXcfKfeHcSUjkU
ilF3zP2wp9DtrRNfkLlBpR/SyxopTB/IHYZvIDxpfj/j3yqe6iuBnhvsbJvcN1CJ
bR/D3qZfFG6tRrV264gFMVTGJKIrqSbB1sNItDADx89XUhPiCgClA6NANud6+YS3
hNRhng4ey4RUuFWJdm2WBmEnKgDBga8SS37KVme3xidPFFIbUD/cHvwArZb1
-----END CERTIFICATE-----