This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
File:                     DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json)
Hash identifier:          CZYMucPTTxu7eqtxGsdcefUE6H+sSXdYL1vtJSDaDkw=
Subject key identifier:   C4:4E:F6:C8:4A:CD:24:9C:43:AE:45:1D:8C:5B:A2:1B:D8:A1:27:0C
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Certificate issuer:       /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial:       6B371DF6051B31F4B945D5982B7E6ED13F306445
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
Manifest number:          0140
Signing time:             Sat 29 Nov 2025 22:12:12 +0000
Manifest this update:     Sat 29 Nov 2025 22:07:12 +0000
Manifest next update:     Fri 05 Dec 2025 00:59:12 +0000
Files and hashes:         1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=)
                          2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: L+PbKd/PpDW/KfGmd77sROHPG2FYVkNmHj56cMvBxhs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Dec 2025 21:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:1d:f6:05:1b:31:f4:b9:45:d5:98:2b:7e:6e:d1:3f:30:64:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
        Validity
            Not Before: Nov 29 22:07:12 2025 GMT
            Not After : Dec  5 00:59:12 2025 GMT
        Subject: CN=C44EF6C84ACD249C43AE451D8C5BA21BD8A1270C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:d3:36:5b:3c:7b:04:d9:45:47:30:35:80:
                    9b:7c:0d:b7:03:d6:4c:5d:41:85:5b:4b:50:0f:51:
                    41:7c:0f:17:0b:c3:8d:13:5c:8a:21:fd:62:bb:cd:
                    df:3f:e0:c0:80:1d:44:14:24:80:87:bf:fe:2d:c1:
                    5a:9b:f2:92:b9:06:1d:e9:3c:13:e2:3e:17:76:01:
                    13:3c:0c:c7:8d:10:69:e9:bd:e2:61:c7:b3:49:40:
                    95:df:18:3e:52:0b:36:e0:8d:78:6b:bf:c8:96:1e:
                    1b:f8:ac:08:b6:9a:e2:ee:81:15:c1:44:c4:e1:3f:
                    f5:fe:82:6b:3a:76:9a:73:22:b3:04:fe:e4:01:cb:
                    9b:3e:88:6f:bf:d9:14:70:0e:c5:76:7c:a3:e3:b5:
                    bd:6b:c7:4f:56:a1:a4:ce:6f:03:5c:ca:9b:fb:25:
                    46:4f:8d:8d:52:a1:53:aa:86:0d:69:b5:3f:66:30:
                    11:8f:18:b7:6e:4a:48:c6:f2:a8:80:f2:af:4b:c6:
                    ab:83:c5:2c:8f:fd:8b:da:96:96:0a:79:17:f3:9d:
                    ce:ec:56:ab:c9:b7:e8:60:17:54:21:11:c2:7c:2b:
                    37:a5:c3:16:b0:05:f9:7f:cf:5c:4a:65:76:ab:e6:
                    be:f3:db:55:d5:8c:36:5e:b1:ec:39:ef:97:f1:0d:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:F6:C8:4A:CD:24:9C:43:AE:45:1D:8C:5B:A2:1B:D8:A1:27:0C
            X509v3 Authority Key Identifier:
                keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:14:f4:b0:f7:8a:e8:c5:9b:7a:30:80:5b:2e:18:94:c3:4e:
         1c:70:23:5c:b8:e6:eb:08:c5:1a:a4:45:01:05:3c:5d:9d:f6:
         63:67:76:65:65:b5:61:34:0c:b9:0c:9f:f5:ca:af:4a:e0:d1:
         0a:40:1c:5c:52:09:dc:31:f1:96:9b:aa:ef:3e:f2:ec:68:f1:
         e6:4e:7b:af:82:1e:e2:6c:a8:9c:d0:6c:57:f0:52:e3:85:ca:
         1f:06:0d:62:3e:2d:6e:c5:d0:48:97:4f:4a:63:02:a8:43:66:
         b3:93:2d:94:6a:a5:a5:08:46:55:be:6c:0f:e8:f3:36:b0:76:
         b8:36:8b:a6:fb:65:29:d5:2c:ee:a8:b0:74:77:a5:5d:8f:2a:
         7c:d8:e3:f1:e8:25:66:36:94:e7:d5:41:c3:20:3d:4b:cb:1e:
         2f:cf:fd:3b:73:73:3d:90:ae:85:00:38:f0:f3:2a:0e:f2:28:
         2e:67:f5:ea:f6:0f:19:a4:40:ec:98:41:de:09:0e:e7:71:a4:
         11:27:be:9a:9b:9b:13:43:6e:eb:32:d4:b8:ff:77:84:9c:a1:
         50:21:bb:43:61:fc:58:cd:53:df:d1:4b:53:85:7f:e0:05:82:
         40:76:52:16:2a:39:71:69:30:b4:2e:c6:a3:11:54:da:91:34:
         d6:4c:c0:41
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUazcd9gUbMfS5RdWYK35u0T8wZEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3
MkI1M0FGODAeFw0yNTExMjkyMjA3MTJaFw0yNTEyMDUwMDU5MTJaMDMxMTAvBgNV
BAMTKEM0NEVGNkM4NEFDRDI0OUM0M0FFNDUxRDhDNUJBMjFCRDhBMTI3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihdM2Wzx7BNlFRzA1gJt8DbcD
1kxdQYVbS1APUUF8DxcLw40TXIoh/WK7zd8/4MCAHUQUJICHv/4twVqb8pK5Bh3p
PBPiPhd2ARM8DMeNEGnpveJhx7NJQJXfGD5SCzbgjXhrv8iWHhv4rAi2muLugRXB
RMThP/X+gms6dppzIrME/uQBy5s+iG+/2RRwDsV2fKPjtb1rx09WoaTObwNcypv7
JUZPjY1SoVOqhg1ptT9mMBGPGLduSkjG8qiA8q9LxquDxSyP/YvalpYKeRfznc7s
VqvJt+hgF1QhEcJ8KzelwxawBfl/z1xKZXar5r7z21XVjDZesew575fxDfUtAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUxE72yErNJJxDrkUdjFuiG9ihJwwwHwYDVR0j
BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2
OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG
QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5
ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC
NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz
RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzFPSw94roxZt6MIBbLhiUw04c
cCNcuObrCMUapEUBBTxdnfZjZ3ZlZbVhNAy5DJ/1yq9K4NEKQBxcUgncMfGWm6rv
PvLsaPHmTnuvgh7ibKic0GxX8FLjhcofBg1iPi1uxdBIl09KYwKoQ2azky2UaqWl
CEZVvmwP6PM2sHa4Noum+2Up1SzuqLB0d6Vdjyp82OPx6CVmNpTn1UHDID1Lyx4v
z/07c3M9kK6FADjw8yoO8iguZ/Xq9g8ZpEDsmEHeCQ7ncaQRJ76am5sTQ27rMtS4
/3eEnKFQIbtDYfxYzVPf0UtThX/gBYJAdlIWKjlxaTC0LsajEVTakTTWTMBB
-----END CERTIFICATE-----