This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
File:                     25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json)
Hash identifier:          KY7a20LQase++jXbHFLkfDBXzl5IlwEU0dlkIxQbExI=
Subject key identifier:   93:19:69:10:25:6A:13:4B:93:08:8B:B7:AF:1E:C2:1A:45:96:27:8E
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       609375127AAE0642059F8A8DF5BC5030E8EE654B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
Manifest number:          0142
Signing time:             Sat 06 Dec 2025 12:08:14 +0000
Manifest this update:     Sat 06 Dec 2025 12:03:14 +0000
Manifest next update:     Wed 10 Dec 2025 22:18:14 +0000
Files and hashes:         1: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=)
                          2: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: o7YQN3kiULpnK5qZEU69+Q0E1udxULLr244gaqKcxOU=)
                          3: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=)
                          4: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=)
                          5: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=)
                          6: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=)
                          7: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:93:75:12:7a:ae:06:42:05:9f:8a:8d:f5:bc:50:30:e8:ee:65:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Dec  6 12:03:14 2025 GMT
            Not After : Dec 10 22:18:14 2025 GMT
        Subject: CN=93196910256A134B93088BB7AF1EC21A4596278E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:fe:f1:8f:1d:d0:7b:78:eb:27:a3:62:43:
                    18:bc:bc:5c:28:f6:15:d5:e7:9d:bf:47:c4:d5:3f:
                    b9:37:67:50:4e:3a:b7:e2:8a:19:4a:19:63:cd:91:
                    b6:d5:50:e2:42:31:68:ad:59:f6:b5:a4:db:8f:50:
                    9f:b0:ba:13:34:d1:e0:a0:73:e5:6d:1c:a9:75:ea:
                    4a:80:31:1b:f6:99:e7:23:89:72:4a:26:4f:2f:9e:
                    56:0a:34:14:88:28:d4:20:93:13:c0:ff:33:57:f4:
                    23:c8:ac:eb:b8:2f:eb:81:34:6f:08:ce:8b:4b:9a:
                    04:a0:7f:96:af:c4:eb:eb:e7:35:2f:c0:84:ad:2e:
                    db:37:4b:7a:06:56:31:0e:9a:6d:ec:4a:aa:09:2f:
                    2b:0e:4b:f4:e4:b0:b7:16:cb:0f:a6:08:f0:41:12:
                    48:ec:66:e7:f1:7d:38:24:93:8c:7a:94:ca:50:fd:
                    b4:28:b7:9f:66:7a:e6:fe:8e:59:db:77:26:af:38:
                    3b:73:e7:2b:1a:83:79:c7:7d:82:af:2e:c5:56:5f:
                    36:d8:76:3b:40:8d:7f:81:fb:03:be:6f:62:dd:95:
                    b8:52:65:11:7f:43:1b:bd:ad:53:a0:26:e4:13:96:
                    5d:a9:e0:1f:92:6e:cc:78:44:b5:86:89:bc:43:9e:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:19:69:10:25:6A:13:4B:93:08:8B:B7:AF:1E:C2:1A:45:96:27:8E
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:ad:59:56:96:2c:e0:2b:1b:9c:39:8e:2c:e9:99:6a:6e:
         28:aa:d4:d8:5d:e6:58:9b:55:3d:eb:2b:20:63:a2:62:fe:18:
         11:76:b8:e3:8f:43:ec:a4:00:95:7e:12:ff:b5:99:6e:82:df:
         4b:8d:f3:77:df:81:a1:72:e6:03:0e:44:01:9a:ce:0f:c7:ca:
         79:c8:1c:94:5d:0b:bb:15:35:00:8a:d1:8e:d3:95:41:16:22:
         8c:c2:61:4c:0f:03:42:c4:cd:f5:50:b3:fe:17:df:e0:9b:39:
         d0:cf:0a:ce:36:10:94:9f:30:a4:c4:d0:19:9a:dc:bb:d0:02:
         1e:7a:eb:d4:aa:92:a1:58:eb:9a:6f:2e:12:13:0f:93:2a:14:
         ec:bf:8d:8f:87:c3:a2:cd:a6:f7:39:f3:d3:37:0e:d0:ac:79:
         2c:15:fe:cc:c0:a4:84:d8:9f:9e:18:1e:87:31:f0:79:2c:c0:
         70:9e:5d:e4:80:44:7e:3c:cc:45:55:7d:7d:ea:b5:8e:db:4e:
         f5:da:a3:f9:3e:91:5e:40:45:b5:82:20:96:aa:20:43:84:61:
         36:5a:03:62:e4:95:94:eb:87:59:7a:66:5b:61:8b:01:48:7b:
         f0:26:ff:65:cd:29:9f:3d:d2:e0:ba:a4:97:20:3c:e3:53:9b:
         f0:50:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:44:31 2025 by rpki-client