This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
File:                     F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft (raw, json)
Hash identifier:          1v6zVV/VmNQF1jts98CrQ1+LLbZPiIkluNX4R1xR6A4=
Subject key identifier:   AD:D0:87:5C:F7:24:99:EF:AE:4D:1D:37:D7:8A:51:F6:6C:EA:78:4C
Authority key identifier: F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6
Certificate issuer:       /CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
Certificate serial:       54ED67CB9C8B78B6ABA35135E896505C78A52BC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
Manifest number:          4B
Signing time:             Mon 08 Dec 2025 03:21:04 +0000
Manifest this update:     Mon 08 Dec 2025 03:16:04 +0000
Manifest next update:     Sat 13 Dec 2025 22:52:04 +0000
Files and hashes:         1: 3230302e33362e3135322e302f32342d3234203d3e20323733383337.roa (hash: 23ZsR2kXIiSU/y9BEbRnVBBfPmxDLPr+FdMjIdMNNuw=)
                          2: 3230302e33362e3135342e302f32342d3234203d3e20323733383337.roa (hash: 5Q0ysx4Djtw8XEqqbLFzVvaYBENLdNc+cCjtG5OdFWQ=)
                          3: F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl (hash: jP2+IQrrSJYb3m/FFy61WZUZzQRGJhcZs/EUO6Zp30k=)
                          4: 3230302e33362e3135322e302f32322d3232203d3e20323733383337.roa (hash: kRq3EaoXhA+CMs4fWhfR4q/VNnNP+Z2o9zrEqI8kvwc=)
                          5: 3230302e33362e3135332e302f32342d3234203d3e20323733383337.roa (hash: LvnxpUwd066TtlOwIvdiUUSEPPYrJf/3gLb37Ok7700=)
                          6: 3230302e33362e3135352e302f32342d3234203d3e20323733383337.roa (hash: nP4H72kHUL4uuXyXtlhKMmQBHKtZn7wPoybQ2cuUiHM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 22:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ed:67:cb:9c:8b:78:b6:ab:a3:51:35:e8:96:50:5c:78:a5:2b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
        Validity
            Not Before: Dec  8 03:16:04 2025 GMT
            Not After : Dec 13 22:52:04 2025 GMT
        Subject: CN=ADD0875CF72499EFAE4D1D37D78A51F66CEA784C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:6f:0d:1a:84:51:4d:78:42:79:64:18:e7:
                    f6:f5:ff:52:2f:9e:26:bf:9b:ee:a2:e2:2c:c3:b8:
                    ef:1f:70:6a:fa:91:86:27:86:07:02:a5:79:91:41:
                    2f:40:61:da:a7:4c:12:1e:bc:bd:0d:7b:68:58:1c:
                    55:e7:1b:e3:21:5b:24:e5:c5:d5:80:5f:f9:e7:b2:
                    1c:b0:5d:39:9e:db:6a:80:d2:92:5f:3e:25:84:fe:
                    91:97:73:08:66:3a:d3:43:4e:87:7d:b4:7c:9c:02:
                    a6:68:56:89:e1:45:40:4b:e5:94:48:bf:ce:5d:e7:
                    a7:a9:71:b9:67:a9:d6:ae:66:37:2c:d6:a5:81:a1:
                    12:64:eb:22:86:15:c4:04:ac:41:ad:7a:80:c0:57:
                    04:8a:73:e6:81:47:41:26:a6:b6:f0:30:0f:d6:7e:
                    ed:d6:00:a7:12:87:f3:23:b6:e9:43:c6:4c:9e:91:
                    03:14:ba:13:85:10:7b:36:a3:ce:86:64:25:71:4f:
                    6d:51:5f:e8:51:88:1a:01:83:38:ed:81:29:50:fc:
                    75:f8:0c:8d:ce:bf:1a:25:e0:cd:45:67:3b:75:c9:
                    14:d5:51:9b:9d:4f:06:e4:ba:25:00:54:95:0d:6b:
                    42:c9:a3:09:cb:37:ed:08:6e:fe:19:e4:f3:6c:16:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:87:5C:F7:24:99:EF:AE:4D:1D:37:D7:8A:51:F6:6C:EA:78:4C
            X509v3 Authority Key Identifier:
                keyid:F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:1b:29:7f:e9:b7:a0:ab:d4:ad:0c:d7:dd:6a:9d:d3:66:
         e9:ef:9c:6c:16:f6:68:f8:c5:23:65:09:e4:ec:fd:7f:1a:7a:
         88:4b:70:a8:e4:49:d9:24:d2:1a:5a:3e:8b:53:ac:09:87:a5:
         1d:03:d1:c2:98:26:2b:bf:70:61:88:ba:0e:dd:e2:8f:d5:b1:
         d8:94:17:66:fd:ff:8b:b2:89:38:ba:6b:71:5e:59:ca:ba:0d:
         e4:bd:ba:d4:66:8c:4b:a9:15:22:4d:ac:d9:98:5b:1a:a4:3c:
         ae:37:40:f5:2a:5f:ef:63:b7:b9:3b:30:d4:b8:a8:50:c9:3d:
         12:57:8f:36:79:79:0e:49:7d:5b:0a:71:22:e6:0c:bd:64:55:
         a3:87:62:ec:bd:20:17:fc:7f:4b:e1:35:59:d9:91:07:78:e2:
         aa:bb:7a:71:3b:4f:7f:14:3b:85:7b:66:f7:ab:4f:df:3e:6d:
         47:b9:67:91:54:aa:0d:c4:6c:e8:bf:33:d6:00:6e:f1:c3:fe:
         8d:f7:95:b5:ed:af:2c:48:44:40:78:ab:7b:51:6e:12:64:9a:
         fa:aa:c3:2a:fd:0b:7d:28:54:49:3b:54:9d:ae:c0:8e:12:7c:
         5a:f2:66:97:0a:26:a9:e5:a1:c2:51:cc:7e:53:05:68:e1:a9:
         7d:69:c1:25
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVO1ny5yLeLaro1E16JZQXHilK8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFQzIxQUE4RDUxRkI5NzVGNEQyRTJGREVCMDVGM0VE
NEY1RDVGNjAeFw0yNTEyMDgwMzE2MDRaFw0yNTEyMTMyMjUyMDRaMDMxMTAvBgNV
BAMTKEFERDA4NzVDRjcyNDk5RUZBRTREMUQzN0Q3OEE1MUY2NkNFQTc4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0m8NGoRRTXhCeWQY5/b1/1Iv
nia/m+6i4izDuO8fcGr6kYYnhgcCpXmRQS9AYdqnTBIevL0Ne2hYHFXnG+MhWyTl
xdWAX/nnshywXTme22qA0pJfPiWE/pGXcwhmOtNDTod9tHycAqZoVonhRUBL5ZRI
v85d56epcblnqdauZjcs1qWBoRJk6yKGFcQErEGteoDAVwSKc+aBR0EmprbwMA/W
fu3WAKcSh/MjtulDxkyekQMUuhOFEHs2o86GZCVxT21RX+hRiBoBgzjtgSlQ/HX4
DI3Ovxol4M1FZzt1yRTVUZudTwbkuiUAVJUNa0LJownLN+0Ibv4Z5PNsFk0/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUrdCHXPckme+uTR0314pR9mzqeEwwHwYDVR0j
BBgwFoAU8Owhqo1R+5dfTS4v3rBfPtT11fYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMUU0NTVBODg1NkVCRTk4ODY3OEM0MkVENTA3QjdBNTEy
NDcxMjY3RDJCQzU1MzIzQzhBNjNEMDBFQ0MxQjVCLzAvRjBFQzIxQUE4RDUxRkI5
NzVGNEQyRTJGREVCMDVGM0VENEY1RDVGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEVDMjFBQThENTFGQjk3NUY0
RDJFMkZERUIwNUYzRUQ0RjVENUY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjFFNDU1QTg4NTZFQkU5ODg2NzhDNDJFRDUwN0I3QTUxMjQ3MTI2N0Qy
QkM1NTMyM0M4QTYzRDAwRUNDMUI1Qi8wL0YwRUMyMUFBOEQ1MUZCOTc1RjREMkUy
RkRFQjA1RjNFRDRGNUQ1RjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSsxspf+m3oKvUrQzX3Wqd02bp
75xsFvZo+MUjZQnk7P1/GnqIS3Co5EnZJNIaWj6LU6wJh6UdA9HCmCYrv3BhiLoO
3eKP1bHYlBdm/f+Lsok4umtxXlnKug3kvbrUZoxLqRUiTazZmFsapDyuN0D1Kl/v
Y7e5OzDUuKhQyT0SV482eXkOSX1bCnEi5gy9ZFWjh2LsvSAX/H9L4TVZ2ZEHeOKq
u3pxO09/FDuFe2b3q0/fPm1HuWeRVKoNxGzovzPWAG7xw/6N95W17a8sSERAeKt7
UW4SZJr6qsMq/Qt9KFRJO1SdrsCOEnxa8maXCiap5aHCUcx+UwVo4al9acEl
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:16:45 2025 by rpki-client