This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
File:                     0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft (raw, json)
Hash identifier:          +mh8Xkhs77Udbuh5r+E5lZEU9iT4XoQc31aX4I/LpMU=
Subject key identifier:   6E:F9:2D:9B:38:BF:3A:69:5C:F5:DE:68:FE:DE:F1:FF:BE:AC:81:18
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       12E70FE8E3CF9235E1725F67ECBA211A567C7651
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
Manifest number:          0148
Signing time:             Sat 06 Dec 2025 13:08:49 +0000
Manifest this update:     Sat 06 Dec 2025 13:03:49 +0000
Manifest next update:     Thu 11 Dec 2025 13:59:49 +0000
Files and hashes:         1: 34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa (hash: C3IX2Ld4McOnmmoQVxQacw/eOCRCKY6ZhhRNBqlXkp0=)
                          2: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl (hash: fWDsZ7xcd8UV1Bz9MD7qohpRUF7179JQ1fwNS4b92z0=)
                          3: 34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (hash: 41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=)
                          4: 34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (hash: WIggVM1yi48ELLS46jHgJqM5lqF55JMqa6uoxRasWig=)
                          5: 34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (hash: hAF4R+hD0YTTUSsp8hohgdmpSs18UeLNslce1gQ0WDo=)
                          6: 34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa (hash: QqOAGWp08U34ckYPMhETMjIGHRx7qgeH6jP3fxVt52Y=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e7:0f:e8:e3:cf:92:35:e1:72:5f:67:ec:ba:21:1a:56:7c:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Dec  6 13:03:49 2025 GMT
            Not After : Dec 11 13:59:49 2025 GMT
        Subject: CN=6EF92D9B38BF3A695CF5DE68FEDEF1FFBEAC8118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:62:7a:c3:a2:56:bd:4b:e3:96:d1:37:01:
                    7d:90:72:fd:a5:bc:39:c5:18:7f:2b:bf:10:31:80:
                    74:a9:61:78:61:ce:8c:64:69:df:59:c3:03:09:40:
                    f4:e8:93:70:15:15:45:9b:24:7a:02:25:f7:ef:43:
                    36:46:9e:15:4f:6c:de:e4:20:c5:55:38:a3:e5:31:
                    19:df:f5:66:23:89:a8:a4:25:a5:fb:70:08:09:ee:
                    bc:6f:a5:2f:c5:01:76:91:96:0d:b3:e5:99:d9:7e:
                    c1:d3:5e:ad:78:1d:3b:17:46:3e:c9:0f:92:2d:78:
                    04:c2:4c:45:c1:37:08:0b:45:6e:84:22:38:48:07:
                    03:e7:a8:a0:6c:bf:5d:14:c5:33:64:44:1b:c9:76:
                    cd:3d:3c:cd:ee:90:c4:a9:ce:43:c7:5f:72:d1:bd:
                    84:b4:7c:a1:3d:24:0e:eb:cd:2a:ad:8e:5c:aa:90:
                    f6:08:56:49:d5:1d:d7:dd:d1:9a:9a:ae:c1:da:c9:
                    3e:72:31:20:91:a1:9a:41:d0:20:0c:68:4d:03:c3:
                    db:2c:86:3c:5b:84:46:7b:7a:f6:82:d3:6b:4b:de:
                    44:78:fd:53:a3:4f:13:b9:c6:69:3b:d6:54:e6:ba:
                    5b:bb:11:77:58:fd:d5:ac:53:bc:ad:14:fd:fd:da:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:2D:9B:38:BF:3A:69:5C:F5:DE:68:FE:DE:F1:FF:BE:AC:81:18
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:9c:d7:86:91:dd:13:62:e9:9a:12:48:a0:78:86:37:34:
         d1:e3:c2:f8:cb:99:0d:78:86:79:dc:3a:f3:4f:d2:b4:7a:6d:
         00:13:ef:23:10:b6:8c:ea:13:b5:10:f3:c4:c9:ee:b9:a7:c8:
         83:01:eb:41:5c:70:0e:04:be:dc:65:25:02:d7:a5:6a:67:af:
         3c:d4:38:f7:b1:c8:f7:f4:ee:b2:aa:75:90:7f:e9:8a:a2:ad:
         7d:1f:c5:cd:cc:99:f0:96:54:08:11:54:71:62:1b:c4:a8:23:
         21:c7:85:d2:e2:80:88:c8:27:03:b1:20:75:b2:18:a1:e6:ec:
         da:ee:9a:55:c5:ec:a1:64:82:76:9f:0f:1d:30:f8:d4:f8:7e:
         bf:ce:a5:db:72:04:b7:1b:d6:15:2b:88:20:67:d2:62:30:a1:
         64:52:10:e7:d2:00:a1:de:ae:f7:0f:88:18:43:bf:84:9e:18:
         4c:38:cd:8b:3c:a2:56:6c:48:9e:41:7a:78:16:88:45:56:20:
         f8:3e:e2:ba:6c:fb:03:da:ec:c5:6f:09:9f:ac:11:d7:df:ff:
         f6:d4:0e:a4:f1:9c:a0:61:57:e0:72:79:aa:0c:4f:84:aa:d8:
         d2:a7:ce:b4:97:6e:85:c1:7e:64:56:e2:e1:3b:75:22:18:7d:
         0b:6a:88:b4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEucP6OPPkjXhcl9n7LohGlZ8dlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE5N0I3RDlEQkQyNzBBNTYwNjRCNTYwRTMyQzQ2QTVF
MkJEODU3RDAeFw0yNTEyMDYxMzAzNDlaFw0yNTEyMTExMzU5NDlaMDMxMTAvBgNV
BAMTKDZFRjkyRDlCMzhCRjNBNjk1Q0Y1REU2OEZFREVGMUZGQkVBQzgxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLF2J6w6JWvUvjltE3AX2Qcv2l
vDnFGH8rvxAxgHSpYXhhzoxkad9ZwwMJQPTok3AVFUWbJHoCJffvQzZGnhVPbN7k
IMVVOKPlMRnf9WYjiaikJaX7cAgJ7rxvpS/FAXaRlg2z5ZnZfsHTXq14HTsXRj7J
D5IteATCTEXBNwgLRW6EIjhIBwPnqKBsv10UxTNkRBvJds09PM3ukMSpzkPHX3LR
vYS0fKE9JA7rzSqtjlyqkPYIVknVHdfd0ZqarsHayT5yMSCRoZpB0CAMaE0Dw9ss
hjxbhEZ7evaC02tL3kR4/VOjTxO5xmk71lTmulu7EXdY/dWsU7ytFP392qXzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUbvktmzi/Omlc9d5o/t7x/76sgRgwHwYDVR0j
BBgwFoAUCpe32dvScKVgZLVg4yxGpeK9hX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjg0ODBGMTg1NTA2NzNDQTc0MDQyQTk2MUQ3RjU3MEUz
RTM5NTZBQzhFQjRBRjJCRUIxODgyRjM3NkM5OUUzLzAvMEE5N0I3RDlEQkQyNzBB
NTYwNjRCNTYwRTMyQzQ2QTVFMkJEODU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTk3QjdEOURCRDI3MEE1NjA2
NEI1NjBFMzJDNDZBNUUyQkQ4NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4NDgwRjE4NTUwNjczQ0E3NDA0MkE5NjFEN0Y1NzBFM0UzOTU2QUM4
RUI0QUYyQkVCMTg4MkYzNzZDOTlFMy8wLzBBOTdCN0Q5REJEMjcwQTU2MDY0QjU2
MEUzMkM0NkE1RTJCRDg1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo3ZzXhpHdE2LpmhJIoHiGNzTR
48L4y5kNeIZ53DrzT9K0em0AE+8jELaM6hO1EPPEye65p8iDAetBXHAOBL7cZSUC
16VqZ6881Dj3scj39O6yqnWQf+mKoq19H8XNzJnwllQIEVRxYhvEqCMhx4XS4oCI
yCcDsSB1shih5uza7ppVxeyhZIJ2nw8dMPjU+H6/zqXbcgS3G9YVK4ggZ9JiMKFk
UhDn0gCh3q73D4gYQ7+EnhhMOM2LPKJWbEieQXp4FohFViD4PuK6bPsD2uzFbwmf
rBHX3//21A6k8ZygYVfgcnmqDE+EqtjSp860l26FwX5kVuLhO3UiGH0Laoi0
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:11 2025 by rpki-client