This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
File:                     9E7F2EB76A05A952625CB92EA40D238CA348F718.mft (raw, json)
Hash identifier:          IsKF1CDmCeHOoxNdgjeRmwENO7jg3UNamJwpkP4UKR4=
Subject key identifier:   D3:9E:C3:EC:DB:D8:D9:A6:D8:63:BE:3D:AF:33:17:D7:AC:D5:86:6B
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       255D046A64BD47A63F5F28DA5DE8CE307AD423AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
Manifest number:          014D
Signing time:             Sun 21 Dec 2025 19:36:17 +0000
Manifest this update:     Sun 21 Dec 2025 19:31:17 +0000
Manifest next update:     Fri 26 Dec 2025 19:58:17 +0000
Files and hashes:         1: 3137302e38302e32352e302f32342d3234203d3e203237393831.roa (hash: sllmiP/024PgdI1npYTfAq9H/30TOMS2DwC7oOGtQ+U=)
                          2: 3137302e38302e32362e302f32342d3234203d3e203237393831.roa (hash: 4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=)
                          3: 3230302e302e3138332e302f32342d3234203d3e203237393831.roa (hash: 5TcjF8GjohyAMP6NS+e32QqzvVCjaQtm7FhmtLS3268=)
                          4: 3230302e302e3138322e302f32342d3234203d3e203237393831.roa (hash: 78A+AkIfAJ2wuL+p89b/B9Vc3VixGXY7h/SgvV0D0vA=)
                          5: 9E7F2EB76A05A952625CB92EA40D238CA348F718.crl (hash: 6cnhLgFqPGw8Dclj2OTVprMxKQYCyRt9CxcGHuLP2BA=)
                          6: 3137302e38302e32372e302f32342d3234203d3e203237393831.roa (hash: aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=)
                          7: 3137302e38302e32342e302f32342d3234203d3e203237393831.roa (hash: pIW4RaxERzyb3mabYdUmJuJtuX3eWvenOxc7LKOw9jE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 19:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:04:6a:64:bd:47:a6:3f:5f:28:da:5d:e8:ce:30:7a:d4:23:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Dec 21 19:31:17 2025 GMT
            Not After : Dec 26 19:58:17 2025 GMT
        Subject: CN=D39EC3ECDBD8D9A6D863BE3DAF3317D7ACD5866B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:3a:42:e9:e3:62:3a:65:19:90:a6:8b:fe:
                    a3:bf:e2:df:e8:82:ca:59:e9:42:00:86:1b:c9:ee:
                    99:8a:81:e1:ae:85:5c:aa:61:f2:42:3d:b8:a0:3a:
                    53:7c:32:ef:36:81:30:a4:ff:ce:f3:33:24:fb:9e:
                    09:50:d5:b2:ee:a9:b6:3b:78:09:8c:a6:6c:b4:65:
                    2d:b4:4d:15:7d:b3:4a:33:71:49:84:4a:bc:55:68:
                    4d:e2:ff:2a:81:93:ff:0d:d9:54:58:75:22:01:27:
                    bc:4c:c9:73:e9:95:c8:6f:79:57:62:59:79:1a:4a:
                    20:5d:82:26:98:52:f9:b2:c6:3d:2b:8e:78:3e:63:
                    34:d5:2d:55:55:f6:da:d0:65:c7:29:45:a9:bf:5a:
                    5a:4f:27:ff:f2:99:b8:96:32:7b:3f:35:f8:5d:ea:
                    c5:b0:c4:14:b7:c4:7d:cc:f2:00:d4:d7:e4:d7:49:
                    9a:82:7d:4a:39:24:9c:39:94:d8:1d:1d:c9:84:fc:
                    18:94:77:e3:a5:c5:a0:34:12:cd:a9:f0:83:af:a7:
                    46:81:2f:04:cc:37:38:41:b4:d6:78:4e:9b:df:34:
                    e0:9e:25:f4:0b:ab:a3:f6:f7:f2:b6:34:4f:8f:3b:
                    bd:5d:99:18:80:3e:86:a6:d6:1d:d1:3f:48:2a:52:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:C3:EC:DB:D8:D9:A6:D8:63:BE:3D:AF:33:17:D7:AC:D5:86:6B
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:8f:38:26:6d:26:c2:26:d8:1a:2d:fe:a9:13:d3:04:5c:
         a0:26:2d:ab:1a:80:d1:bf:c1:f2:4d:e7:65:b7:1c:ae:df:23:
         df:19:78:cf:99:f0:19:91:1e:07:d9:17:a4:66:f3:61:ef:36:
         79:de:9a:0c:05:71:88:1c:c8:03:3e:23:3a:be:37:cc:bc:c2:
         7d:42:27:0b:71:a1:3f:b8:c8:6b:3e:de:af:51:42:fb:9b:77:
         1d:c3:be:85:4b:8e:39:88:76:70:05:f0:8f:5d:f7:1f:c6:23:
         62:4e:6a:79:0a:f2:db:89:4d:6a:2a:e5:f9:50:94:87:c7:ca:
         cd:84:a9:a6:a1:72:91:c7:89:12:23:e2:9e:6a:f1:d4:57:10:
         64:b2:9d:90:81:bd:a3:96:8c:4f:6e:84:05:2c:07:8a:09:e0:
         2c:69:94:0c:97:6f:db:a0:0c:c5:36:38:d0:af:49:cf:a8:e3:
         83:b5:02:d7:9f:26:47:98:f8:45:84:e5:3d:25:d8:2d:d8:7c:
         2a:5d:c6:e8:eb:0f:1b:e5:d5:bb:64:e2:9f:c5:c3:99:22:43:
         e6:f4:38:9e:0b:f3:76:b3:03:3e:36:06:e4:50:00:2b:18:02:
         77:78:40:6c:38:d0:d2:1a:d5:a1:a1:0b:36:0a:6a:7d:a5:18:
         e7:b5:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:08:36 2025 by rpki-client