This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
File:                     70B51DCC347573651055FC72DB19C170524018CC.mft (raw, json)
Hash identifier:          imA2gUe/56bQ5NYHVyCnIUMsWSmuQ8GaLmJ1XwODvG8=
Subject key identifier:   B0:16:7F:06:72:13:B1:B9:D1:A3:50:83:61:23:00:B1:95:50:CF:DB
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       0A40E0B048AEB2B1A4A60B374F08727F89034F37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
Manifest number:          0147
Signing time:             Thu 27 Nov 2025 14:36:07 +0000
Manifest this update:     Thu 27 Nov 2025 14:31:07 +0000
Manifest next update:     Tue 02 Dec 2025 04:38:07 +0000
Files and hashes:         1: 323830333a613634303a3a2f33322d3536203d3e203436313938.roa (hash: Y7Graa1GkNAS8x/l9kUW3FtTElJHfsqwEL6EK8UOTJ8=)
                          2: 3139302e382e33322e302f32302d3234203d3e203436313938.roa (hash: dFj8MmRuFxrByOsX0k3DGUA66P8N+6Pka2xWe2qMLmE=)
                          3: 323830333a613634303a3a2f33322d3536203d3e203237383936.roa (hash: B+utkw2BCRRGP7WVCnBbBQJkPWUUr3vvKGJPQqOESlI=)
                          4: 3139302e382e33322e302f32302d3234203d3e203237383936.roa (hash: ML9ua8yvbx7O0GpZG3bnnZT3umLAS9p+jaCGJIMX1sY=)
                          5: 70B51DCC347573651055FC72DB19C170524018CC.crl (hash: 5C1bbNx/aGw6vmpdgtu729ucdZm7SS4JLsDtQ2fAx20=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Dec 2025 04:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:e0:b0:48:ae:b2:b1:a4:a6:0b:37:4f:08:72:7f:89:03:4f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Nov 27 14:31:07 2025 GMT
            Not After : Dec  2 04:38:07 2025 GMT
        Subject: CN=B0167F067213B1B9D1A35083612300B19550CFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:f4:83:67:7e:88:65:dd:23:f8:39:5e:a5:
                    bc:4b:13:2a:40:d5:b3:4a:fb:b5:71:d0:4d:e1:3f:
                    30:90:78:6e:18:f2:2d:90:8a:e9:34:89:da:3d:3f:
                    07:13:e9:ba:d4:d7:6f:7f:9d:d0:b1:5f:5d:0e:e1:
                    9c:ea:47:46:11:9e:3a:f5:5a:d4:3f:69:be:27:86:
                    ed:49:fe:89:5d:c4:22:52:8e:a1:ba:0d:85:aa:16:
                    dd:59:c2:3a:f2:1f:cb:d6:74:46:2b:17:5a:85:d6:
                    00:76:92:73:4e:0b:d6:aa:cf:fd:a8:0e:2e:eb:3f:
                    6f:0e:0b:7a:3f:57:f4:67:77:98:e7:c1:d0:1a:8f:
                    9d:3f:23:62:d1:f7:1f:0c:6a:57:c6:c6:3c:79:41:
                    3f:a3:55:57:9b:fa:f7:ab:5d:23:cd:09:a5:d9:8a:
                    3e:de:ec:9b:ed:63:f7:ad:2a:43:e1:2b:b6:68:e2:
                    59:bd:e8:6f:2f:d5:4a:e0:40:1c:05:b7:6c:73:12:
                    ed:6f:fa:4a:d2:a8:d5:44:28:8c:ae:ca:59:e4:f3:
                    9b:87:b9:54:1f:36:a6:36:96:f9:94:58:12:ca:61:
                    1a:5a:16:b3:8a:5f:20:31:e8:6a:ca:b5:98:4b:ff:
                    56:cc:9d:fd:96:6d:c1:ab:8f:e3:8a:a4:18:7b:af:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:16:7F:06:72:13:B1:B9:D1:A3:50:83:61:23:00:B1:95:50:CF:DB
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:2c:8f:e7:02:f6:4c:e6:01:bd:b9:4c:f2:1a:a8:aa:92:
         69:bb:af:89:83:41:d1:12:c1:d6:47:9d:2b:e4:17:81:34:40:
         ce:f7:d1:2e:e8:e8:1d:a5:78:6e:8c:67:31:86:cf:a4:c6:7d:
         33:25:0b:e2:95:cc:36:98:cc:d2:f4:de:c1:a8:75:64:e3:7b:
         5f:6f:67:04:85:63:11:52:10:46:64:4d:5b:ec:51:07:e5:3a:
         b8:f3:d2:62:2b:29:33:6d:98:1e:f2:d1:be:e8:10:7c:c5:41:
         8a:39:d4:80:d6:e1:88:f5:5e:44:38:bc:f4:27:a6:91:5f:03:
         b1:cf:4f:3e:c8:91:57:c4:08:14:d3:09:b0:cf:b4:ac:dc:87:
         f2:5a:04:72:ba:a0:33:9e:ad:2c:80:c4:53:e9:1f:4a:d9:45:
         49:99:a2:fc:49:50:08:78:7e:36:32:c1:9d:07:19:48:79:ab:
         86:3a:8c:2b:c3:ca:10:75:a6:5b:d7:e9:24:21:d1:70:e2:5e:
         cc:3d:ae:6e:85:94:f3:4b:27:cd:b7:58:e0:dd:74:fa:f3:a0:
         81:b3:40:0d:2b:41:ac:5d:bc:72:2c:e5:f4:ec:58:82:5f:d6:
         92:4d:66:e2:c8:c0:f7:f8:95:a2:c3:25:cf:13:5d:31:d3:f6:
         18:5c:98:4b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCkDgsEiusrGkpgs3Twhyf4kDTzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCNTFEQ0MzNDc1NzM2NTEwNTVGQzcyREIxOUMxNzA1
MjQwMThDQzAeFw0yNTExMjcxNDMxMDdaFw0yNTEyMDIwNDM4MDdaMDMxMTAvBgNV
BAMTKEIwMTY3RjA2NzIxM0IxQjlEMUEzNTA4MzYxMjMwMEIxOTU1MENGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUvSDZ36IZd0j+DlepbxLEypA
1bNK+7Vx0E3hPzCQeG4Y8i2Qiuk0ido9PwcT6brU129/ndCxX10O4ZzqR0YRnjr1
WtQ/ab4nhu1J/oldxCJSjqG6DYWqFt1ZwjryH8vWdEYrF1qF1gB2knNOC9aqz/2o
Di7rP28OC3o/V/Rnd5jnwdAaj50/I2LR9x8MalfGxjx5QT+jVVeb+verXSPNCaXZ
ij7e7JvtY/etKkPhK7Zo4lm96G8v1UrgQBwFt2xzEu1v+krSqNVEKIyuylnk85uH
uVQfNqY2lvmUWBLKYRpaFrOKXyAx6GrKtZhL/1bMnf2WbcGrj+OKpBh7r+cVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUsBZ/BnITsbnRo1CDYSMAsZVQz9swHwYDVR0j
BBgwFoAUcLUdzDR1c2UQVfxy2xnBcFJAGMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMENERTcyM0Q4MkZBOTIwQjg4RUFBRkRDQzYxMkExNzI4
QUFFNzZGNkVDQ0JEQUE1MkMzRDY5OUZGNzhEMDY5LzAvNzBCNTFEQ0MzNDc1NzM2
NTEwNTVGQzcyREIxOUMxNzA1MjQwMThDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEI1MURDQzM0NzU3MzY1MTA1
NUZDNzJEQjE5QzE3MDUyNDAxOENDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBDREU3MjNEODJGQTkyMEI4OEVBQUZEQ0M2MTJBMTcyOEFBRTc2RjZF
Q0NCREFBNTJDM0Q2OTlGRjc4RDA2OS8wLzcwQjUxRENDMzQ3NTczNjUxMDU1RkM3
MkRCMTlDMTcwNTI0MDE4Q0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMkiyP5wL2TOYBvblM8hqoqpJp
u6+Jg0HREsHWR50r5BeBNEDO99Eu6OgdpXhujGcxhs+kxn0zJQvilcw2mMzS9N7B
qHVk43tfb2cEhWMRUhBGZE1b7FEH5Tq489JiKykzbZge8tG+6BB8xUGKOdSA1uGI
9V5EOLz0J6aRXwOxz08+yJFXxAgU0wmwz7Ss3IfyWgRyuqAznq0sgMRT6R9K2UVJ
maL8SVAIeH42MsGdBxlIeauGOowrw8oQdaZb1+kkIdFw4l7MPa5uhZTzSyfNt1jg
3XT686CBs0ANK0GsXbxyLOX07FiCX9aSTWbiyMD3+JWiwyXPE10x0/YYXJhL
-----END CERTIFICATE-----