This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft
File:                     834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft (raw, json)
Hash identifier:          SL6odiZvRfiHw2OJhOqpfYF0j8p85kpg3r9fH4lBSNo=
Subject key identifier:   F8:D3:5E:C5:F4:F1:7F:3F:CF:4C:9A:69:15:1D:29:9E:82:21:BE:C6
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Certificate issuer:       /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial:       72C9E0AECF4970870D3746CDC19616D6214A84B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft
Manifest number:          A9
Signing time:             Wed 10 Dec 2025 07:38:24 +0000
Manifest this update:     Wed 10 Dec 2025 07:33:24 +0000
Manifest next update:     Tue 16 Dec 2025 02:45:24 +0000
Files and hashes:         1: 3230312e3133312e32322e302f32342d3234203d3e203238333939.roa (hash: WooyEEIFNPRinxlKlnLKzL923ePXUzkiYnecmET8T4c=)
                          2: 3230312e3133312e32332e302f32342d3234203d3e203238333939.roa (hash: EJwyMOco54Fs+gp11dH+mEXIARmadWIQp9qxh4Q2EWQ=)
                          3: 3230312e3133312e32302e302f32342d3234203d3e203238333939.roa (hash: mYfGIihROR/3DLnEhoIv/zRbUsxdsc1Qfef8B8AgcB8=)
                          4: 3230302e33332e32302e302f32342d3234203d3e203238333939.roa (hash: TRhHLNhGu0IMI/O+ACSQH+Lio7HLcYt64CjwPjd6cr8=)
                          5: 834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl (hash: M6ay1tUnloXSmV1IFvs/ZQqI9FjnwgOBXO3e8h47f90=)
                          6: 3230312e3133312e32312e302f32342d3234203d3e203238333939.roa (hash: yJGc9qP7VledGWCum6FnHCm7gcuD88uzA/aCcgK8eHY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c9:e0:ae:cf:49:70:87:0d:37:46:cd:c1:96:16:d6:21:4a:84:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
        Validity
            Not Before: Dec 10 07:33:24 2025 GMT
            Not After : Dec 16 02:45:24 2025 GMT
        Subject: CN=F8D35EC5F4F17F3FCF4C9A69151D299E8221BEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:85:db:95:74:19:0e:17:ad:c7:b8:14:89:
                    b8:20:f7:fc:57:17:f3:18:e6:c8:d0:2f:47:19:c1:
                    38:06:fe:d2:35:52:23:a6:ce:76:29:97:e3:a1:cf:
                    62:ec:b4:65:38:5f:20:4a:1e:ce:e1:c0:e6:1a:12:
                    16:56:82:b2:a2:42:a4:f0:0a:fd:e9:10:2f:46:c3:
                    d6:9f:23:54:97:34:d3:13:94:74:cd:70:e0:04:f3:
                    a9:67:5d:68:35:b0:69:03:1d:98:5a:7e:4c:99:fe:
                    f5:b7:dd:dd:0c:f0:3a:06:25:99:7e:af:d1:fe:9c:
                    88:e0:86:07:02:92:e9:de:ba:a2:0f:14:a0:0f:2d:
                    9c:e8:51:b4:72:d8:2e:32:c9:b1:f1:0a:c3:95:59:
                    d5:ec:67:a9:c2:3f:0b:8b:b9:bf:eb:61:e5:c6:cf:
                    2f:d6:33:ce:db:c0:19:16:b4:17:df:96:bc:47:ab:
                    dc:2c:1d:00:65:48:e5:70:10:e0:bc:50:ac:fe:97:
                    05:45:14:3a:90:f3:00:28:4c:a7:0d:9d:11:97:85:
                    67:a1:49:0d:c8:54:34:3d:76:16:94:ff:0e:e8:3a:
                    29:0c:75:92:67:e7:fa:d0:7d:31:cb:0e:df:f6:9e:
                    da:94:1c:36:2d:b4:07:30:8e:50:0f:65:bb:67:fb:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:5E:C5:F4:F1:7F:3F:CF:4C:9A:69:15:1D:29:9E:82:21:BE:C6
            X509v3 Authority Key Identifier:
                keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:7b:81:a7:55:e6:e2:94:ca:ce:be:41:10:eb:b1:ab:dd:
         b9:e4:ac:cd:df:96:cc:4b:ee:6c:cb:35:d2:92:de:ba:01:44:
         2c:f5:49:4e:d5:11:44:ac:27:05:3c:c7:23:86:0b:98:b8:2b:
         38:3c:33:62:e9:88:7b:8f:7b:e7:7e:57:73:5d:20:9f:0d:82:
         3f:33:ac:ca:a0:5c:58:72:45:dc:0a:55:b3:f7:2d:1f:51:e2:
         21:1c:0d:62:bb:5c:f9:2e:7b:ed:cb:ec:92:32:4b:d6:47:90:
         a6:80:03:bb:7b:75:db:fd:6b:cf:49:ce:0d:53:80:3f:2c:ee:
         da:f6:f4:a3:24:78:40:6e:6c:31:65:5d:d4:84:da:6c:2f:71:
         05:ea:1a:ff:4c:f4:f0:ea:85:88:d4:75:55:14:cb:59:b8:92:
         1b:6a:2e:da:29:33:32:94:d9:39:52:33:22:07:2e:7c:75:91:
         01:f5:f9:43:58:20:26:e9:36:76:7d:45:5d:86:19:52:89:c3:
         b2:2f:02:7c:4f:c4:9b:1c:28:8d:0f:06:3f:f1:12:74:e1:a9:
         38:3f:0a:81:f7:6f:df:e0:b2:ab:28:de:97:97:8b:b8:df:cc:
         cc:a9:3e:00:5e:fc:cd:20:f2:d3:ac:24:41:82:dc:43:47:96:
         5d:e0:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----