This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
File:                     D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft (raw, json)
Hash identifier:          v0+NYtDgycJsPp67RDcJkgEIQiObeQN560GFv0vpp1Q=
Subject key identifier:   CF:95:5C:23:FA:60:82:D6:5B:76:FF:80:E8:C5:0C:3F:91:AE:21:2B
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       404C6191225461919D93562AC2A65A265670D8E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
Manifest number:          0145
Signing time:             Thu 04 Dec 2025 13:01:26 +0000
Manifest this update:     Thu 04 Dec 2025 12:56:26 +0000
Manifest next update:     Wed 10 Dec 2025 00:58:26 +0000
Files and hashes:         1: 3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (hash: bDGvSgzXepfqaBjNqpdJ8j8/CE+Aq0NxQh0D//tkdsc=)
                          2: 3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa (hash: 6L0kN/X+iONWYp2Uoh3YSZXTDEQqsdzRjCElRBAJI/g=)
                          3: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl (hash: ZHVtkbwcrz4GSb3HVHnV4VLIKyj7W0hLvuE/Lx5tLnA=)
                          4: 3230302e31302e3135372e302f32342d3234203d3e20323634363930.roa (hash: dS443k0jb6FeJ863iJHXxVN9wcNoJdplU/1MuXz/wpg=)
                          5: 3230302e31302e3135362e302f32342d3234203d3e20323634363930.roa (hash: FZ/51zNLl/FLdreyLVD1pY/OLyIgpCvENTzIyty2FGE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 20:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:61:91:22:54:61:91:9d:93:56:2a:c2:a6:5a:26:56:70:d8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Dec  4 12:56:26 2025 GMT
            Not After : Dec 10 00:58:26 2025 GMT
        Subject: CN=CF955C23FA6082D65B76FF80E8C50C3F91AE212B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:ab:f9:f3:67:7b:ed:73:f7:29:99:e4:9d:
                    40:dd:4e:e6:c4:a8:a1:b9:7d:22:8e:f1:b4:86:64:
                    25:bb:e5:97:11:b6:65:78:58:f2:0e:e0:a8:39:f0:
                    fc:09:63:fc:6d:45:1d:d4:98:f1:61:cc:08:f4:b9:
                    f9:98:66:f0:fb:65:22:67:49:83:c4:82:18:72:0f:
                    a5:13:a5:8d:5f:9d:5d:a5:39:6d:ce:fd:90:7b:fd:
                    1a:58:cd:5a:5e:aa:34:f8:3c:4d:1e:44:1f:c1:dc:
                    c9:63:cd:c1:41:d8:58:3f:ef:b5:1a:cf:16:2d:de:
                    3a:02:f0:9a:df:1b:19:d4:5b:3d:df:e6:40:24:a2:
                    0d:fb:ca:22:b5:5c:54:cb:13:c0:6e:01:b6:4d:6f:
                    fa:c5:a7:a9:93:ee:d0:73:9b:cd:12:f8:8b:61:d7:
                    9c:2e:88:9c:b2:7d:11:ee:4c:ca:06:e3:f3:96:00:
                    41:ef:4a:e6:5a:a7:e1:1f:45:c1:b6:d7:ee:cf:f2:
                    8f:12:4d:39:9c:9d:0c:b2:11:bd:d2:26:70:47:74:
                    ab:31:bc:1a:af:57:52:43:e0:c7:44:46:68:55:cc:
                    08:8f:84:cf:92:44:8c:c8:93:98:9e:bf:e4:53:ae:
                    e8:8d:da:7e:1e:8a:5b:e3:1c:f4:55:d4:22:f0:57:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:5C:23:FA:60:82:D6:5B:76:FF:80:E8:C5:0C:3F:91:AE:21:2B
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:e1:33:ac:54:31:21:4c:73:65:24:ec:a2:95:de:db:94:
         b5:cf:ba:68:d4:89:6c:7b:2e:cf:85:1d:8b:70:c7:51:6c:5d:
         d9:0d:00:72:de:4d:c8:5d:39:a4:fb:52:c8:b0:28:af:94:54:
         52:89:97:9f:e3:5f:02:39:60:07:5c:33:b8:a9:cc:dd:70:ed:
         61:87:3e:56:69:53:84:1c:5d:e3:66:fa:2e:42:b7:1b:24:e7:
         7b:e3:f8:af:c6:bb:9c:58:c7:78:a7:4d:96:8f:40:15:fb:0e:
         10:c6:85:2f:1f:83:15:2e:2a:88:90:f0:a9:ae:01:8a:27:46:
         e5:ae:54:9e:47:2d:91:24:a5:dc:ec:14:e8:03:b7:a4:e4:9a:
         1c:6d:33:49:1c:a5:5c:0e:50:8f:ae:f3:7b:8d:ef:e4:58:0f:
         6b:48:22:9e:87:57:33:4e:09:7e:6c:85:7c:7a:7b:80:a5:f4:
         38:c7:94:eb:d4:be:40:04:83:54:a7:1b:3a:fa:81:bc:99:e6:
         dc:f6:b9:7f:66:33:0d:16:38:65:77:2c:39:22:e8:49:ee:b2:
         c2:3b:6d:d4:fc:5f:87:b7:35:69:5b:72:5d:0e:21:61:7e:8a:
         24:88:55:13:30:9c:78:b4:21:29:9c:40:ed:7d:46:0c:d8:8d:
         d8:4b:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:06:07 2025 by rpki-client