This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft File: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft (raw, json) Hash identifier: ZJt+78bmsOX9uH73G44ecgsoJV9GLbHk9443oqIxfuA= Subject key identifier: BD:46:DD:26:86:F8:98:1E:AE:43:B7:73:65:BD:81:88:43:2F:89:BF Authority key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC Certificate issuer: /CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC Certificate serial: 5E7547F5D830C51EA50974B114322E854C1C0395 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft Manifest number: 0150 Signing time: Thu 25 Dec 2025 14:58:23 +0000 Manifest this update: Thu 25 Dec 2025 14:53:23 +0000 Manifest next update: Tue 30 Dec 2025 07:22:23 +0000 Files and hashes: 1: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl (hash: xof2CC0hUed1YOUdcIkQRp68z5OqTPzfrRltgzhkhLc=) 2: 34352e3232342e35322e302f32322d3234203d3e203532333237.roa (hash: XCpLzTgjUcKT9zJs7aINeWvMrnyJCXpMD2VLmxfPxYg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 29 Dec 2025 23:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:75:47:f5:d8:30:c5:1e:a5:09:74:b1:14:32:2e:85:4c:1c:03:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC Validity Not Before: Dec 25 14:53:23 2025 GMT Not After : Dec 30 07:22:23 2025 GMT Subject: CN=BD46DD2686F8981EAE43B77365BD8188432F89BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:93:20:3d:1f:bb:16:38:c9:b8:1d:d1:f3: 04:56:c1:6f:8f:1a:03:e6:3c:6d:e3:9d:7e:13:f0: 84:ba:e8:c7:b3:5b:3e:2d:34:24:77:f5:62:db:e5: e2:1b:4b:9b:10:d9:2e:c1:66:f9:2e:7a:ca:6e:1a: cf:56:6c:34:27:8c:45:e1:1d:4c:dd:e0:e2:3b:e3: 95:0e:82:9c:c5:23:05:54:fb:3e:23:6e:bb:ab:47: 07:21:42:50:b9:a7:5d:13:57:67:1e:8f:fd:0a:70: e9:5c:ca:04:11:3b:64:b0:07:c4:6a:f2:ff:93:f6: b3:91:07:70:46:37:72:6d:9b:45:c3:49:22:54:46: 27:04:da:c8:09:ba:24:00:b9:cd:58:d2:ae:71:10: c1:fe:2c:71:39:b5:d4:dd:a7:18:26:2c:95:5c:ed: 98:71:98:6e:f4:18:4e:6a:b7:d2:83:80:59:74:b8: 54:f7:61:e1:46:84:95:bb:e6:c3:96:75:8e:19:b2: 2d:e2:c4:2f:d8:63:a4:36:89:98:a1:ec:37:14:d6: 9e:19:63:36:6c:b9:b3:52:ad:aa:e3:52:e6:97:5c: fc:ab:2d:df:42:ed:0b:1f:a0:93:da:c7:a8:a0:d8: 88:35:5b:27:3f:bf:07:5a:e9:4a:87:15:19:47:7e: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:46:DD:26:86:F8:98:1E:AE:43:B7:73:65:BD:81:88:43:2F:89:BF X509v3 Authority Key Identifier: keyid:1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d6:12:ba:dd:9d:ef:4c:73:64:b9:7e:f6:19:54:f3:2f:b7: fb:90:b8:4a:1d:e3:73:fd:6e:67:3d:04:c1:d1:7e:62:77:a8: 18:d8:06:42:24:6f:ec:a3:fa:ae:4d:63:a5:0b:bd:0d:4a:9f: ff:8a:48:28:74:ab:01:99:91:91:c6:49:c2:37:2e:ec:2d:3b: 07:2c:49:83:d8:4a:cf:07:16:2f:92:c9:d3:20:98:f6:74:a2: 4d:10:43:ed:e3:aa:db:9c:cb:12:1a:03:cd:48:17:da:c7:38: 00:89:22:18:8e:ca:75:cf:77:06:80:9f:6a:66:17:1d:ad:e7: bb:a2:27:6f:9a:3f:1d:63:db:33:ec:31:01:51:b3:f9:89:66: ce:3b:bb:28:bc:f0:b8:1a:32:6e:1a:aa:90:19:e4:e7:f0:cd: 77:d5:cc:dc:4b:84:12:78:25:6b:a7:19:cc:7a:e0:27:7d:03: b7:a0:74:62:cf:98:9c:0b:a2:bc:cf:64:70:33:0f:09:b8:f3: a5:14:48:f1:1a:e5:28:68:51:55:8c:16:83:aa:79:99:22:43: e4:4e:79:30:e9:fa:44:1e:2a:6a:ee:8e:5b:50:c6:7c:a8:74: c0:36:44:f8:d3:5d:38:3b:8e:6b:7a:dc:80:85:33:99:0f:8f: ab:84:54:92 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXnVH9dgwxR6lCXSxFDIuhUwcA5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGMjE4NTdFQTI4OEFCQzNENTAxODgxNjI4NEZDNzRF RDFBMUNDQzAeFw0yNTEyMjUxNDUzMjNaFw0yNTEyMzAwNzIyMjNaMDMxMTAvBgNV BAMTKEJENDZERDI2ODZGODk4MUVBRTQzQjc3MzY1QkQ4MTg4NDMyRjg5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4JMgPR+7FjjJuB3R8wRWwW+P GgPmPG3jnX4T8IS66MezWz4tNCR39WLb5eIbS5sQ2S7BZvkuespuGs9WbDQnjEXh HUzd4OI745UOgpzFIwVU+z4jbrurRwchQlC5p10TV2cej/0KcOlcygQRO2SwB8Rq 8v+T9rORB3BGN3Jtm0XDSSJURicE2sgJuiQAuc1Y0q5xEMH+LHE5tdTdpxgmLJVc 7ZhxmG70GE5qt9KDgFl0uFT3YeFGhJW75sOWdY4Zsi3ixC/YY6Q2iZih7DcU1p4Z YzZsubNSrarjUuaXXPyrLd9C7QsfoJPax6ig2Ig1Wyc/vwda6UqHFRlHfnXPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvUbdJob4mB6uQ7dzZb2BiEMvib8wHwYDVR0j BBgwFoAUH/IYV+ooirw9UBiBYoT8dO0aHMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERkU2Q0RDN0U3NjZCOThEODBDMjhGMjUxOTlGMTA5NzBE RDg5ODczMzRGOEVEQjBCOUQyMzJEQzUyMDY4NTRCLzAvMUZGMjE4NTdFQTI4OEFC QzNENTAxODgxNjI4NEZDNzRFRDFBMUNDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkYyMTg1N0VBMjg4QUJDM0Q1 MDE4ODE2Mjg0RkM3NEVEMUExQ0NDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREZFNkNEQzdFNzY2Qjk4RDgwQzI4RjI1MTk5RjEwOTcwREQ4OTg3MzM0 RjhFREIwQjlEMjMyREM1MjA2ODU0Qi8wLzFGRjIxODU3RUEyODhBQkMzRDUwMTg4 MTYyODRGQzc0RUQxQTFDQ0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa1hK63Z3vTHNkuX72GVTzL7f7 kLhKHeNz/W5nPQTB0X5id6gY2AZCJG/so/quTWOlC70NSp//ikgodKsBmZGRxknC Ny7sLTsHLEmD2ErPBxYvksnTIJj2dKJNEEPt46rbnMsSGgPNSBfaxzgAiSIYjsp1 z3cGgJ9qZhcdree7oidvmj8dY9sz7DEBUbP5iWbOO7sovPC4GjJuGqqQGeTn8M13 1czcS4QSeCVrpxnMeuAnfQO3oHRiz5icC6K8z2RwMw8JuPOlFEjxGuUoaFFVjBaD qnmZIkPkTnkw6fpEHipq7o5bUMZ8qHTANkT40104O45retyAhTOZD4+rhFSS -----END CERTIFICATE-----Generated at Fri Dec 26 00:32:16 2025 by rpki-client