This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json) Hash identifier: ogIyqIyfHBuNx6UW4g+bcJZ3+2nbD9YbQ2rpRXcKTSI= Subject key identifier: 51:89:C1:71:F0:97:48:96:EE:0A:38:4E:EA:D9:6D:20:B2:A7:95:CA Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Certificate serial: 2A57914A5C657085C0EFD76EBC3C53DC93DAD03F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft Manifest number: 0146 Signing time: Sat 06 Dec 2025 16:25:30 +0000 Manifest this update: Sat 06 Dec 2025 16:20:30 +0000 Manifest next update: Wed 10 Dec 2025 16:46:30 +0000 Files and hashes: 1: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: +0qop7Ilf9Isuak762oOoJinzztVUgOiRadVElgbPMc=) 2: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: s+ICVuJyis72yQBMejDpxgzvn2ds2Sk1i1NqCkrSZ/Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 16:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:57:91:4a:5c:65:70:85:c0:ef:d7:6e:bc:3c:53:dc:93:da:d0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B Validity Not Before: Dec 6 16:20:30 2025 GMT Not After : Dec 10 16:46:30 2025 GMT Subject: CN=5189C171F0974896EE0A384EEAD96D20B2A795CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:df:52:01:7c:07:60:86:7f:63:d4:37:34: 73:e9:e3:81:8b:dc:ae:43:e2:d8:1e:99:e6:20:e6: 10:65:7f:f9:ed:1b:21:ba:4e:4d:2e:18:11:26:f8: c2:31:49:b5:35:51:10:5c:7f:a6:65:22:a7:89:f4: 9b:11:8a:08:2d:77:a4:30:0b:89:18:6a:bc:84:2c: ba:9f:0b:0c:b8:2f:ca:ea:18:56:af:6e:fa:11:e1: 54:2b:ae:8e:50:fb:91:ca:14:28:fb:c2:99:47:d1: 8b:fa:84:54:76:59:2c:23:e7:17:29:f6:f2:8c:95: d5:e2:fd:64:a1:a6:eb:7a:a7:41:08:1f:27:a6:cb: 0a:fb:e6:af:c1:fb:31:61:ff:5c:c2:df:af:52:00: 20:e4:47:83:b0:6f:08:1f:17:4f:87:22:f4:d5:5c: c3:e8:48:a4:ac:14:c4:47:96:ed:6b:e9:27:73:c3: 26:7d:89:0d:f6:30:cf:66:b5:38:fc:f9:21:65:00: 11:b6:3d:57:fc:02:9e:79:cb:0d:bd:9c:a4:66:26: 78:4e:b8:ea:6a:da:97:60:31:4b:f1:4f:8f:c7:14: 0c:5b:18:3b:71:c4:06:69:5b:80:87:87:a3:f8:7e: e4:59:68:53:c3:5d:42:28:cd:27:3d:1a:f3:41:b5: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:C1:71:F0:97:48:96:EE:0A:38:4E:EA:D9:6D:20:B2:A7:95:CA X509v3 Authority Key Identifier: keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b1:12:13:4b:3e:c8:a7:8e:dc:4b:6b:72:67:3b:2b:39:24: 42:61:58:68:a8:ad:f0:59:2f:70:62:f0:a9:86:18:a9:51:b9: 88:08:e3:2f:a8:27:62:90:ab:ba:b6:15:cb:83:34:a1:0f:e8: e3:65:06:c3:af:e5:e1:9d:d5:3e:37:59:03:6e:92:35:ff:39: c9:48:39:6e:6c:e6:82:a5:73:c5:a9:35:fc:be:fe:85:cf:d1: e8:f7:06:a1:4a:0f:23:3e:86:b6:6b:4e:b4:da:b0:c4:5f:cc: 04:f6:85:2b:94:6b:d3:b5:40:18:18:fa:67:e1:8a:26:fd:0a: 04:2e:bd:c3:21:11:0f:d6:c3:ab:17:d1:4a:3c:6b:32:2f:43: fb:84:76:cd:aa:37:a5:76:a3:e8:9f:ab:df:6d:a5:b2:0e:6d: a6:fe:1d:9b:f0:3b:57:fb:0c:95:7b:a4:a7:59:f4:68:44:a6: 86:4c:9c:49:58:98:d5:e2:6e:5c:ea:9b:d3:e8:83:d8:3a:c2: 8e:ff:5a:08:45:14:a9:27:0d:ae:7a:0d:12:03:e0:12:77:99: 75:58:14:eb:47:6b:53:4b:c8:f8:73:39:79:4a:97:bb:ef:77: 47:94:b9:36:53:55:1f:0b:4c:7a:c3:33:d5:55:88:a7:eb:ad: 2c:2b:6d:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKleRSlxlcIXA79duvDxT3JPa0D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NTk4RDgzREJDMTQyQTE2NEFENzJGNUREOTAzNkFB RURCMEExQjAeFw0yNTEyMDYxNjIwMzBaFw0yNTEyMTAxNjQ2MzBaMDMxMTAvBgNV BAMTKDUxODlDMTcxRjA5NzQ4OTZFRTBBMzg0RUVBRDk2RDIwQjJBNzk1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXq99SAXwHYIZ/Y9Q3NHPp44GL 3K5D4tgemeYg5hBlf/ntGyG6Tk0uGBEm+MIxSbU1URBcf6ZlIqeJ9JsRiggtd6Qw C4kYaryELLqfCwy4L8rqGFavbvoR4VQrro5Q+5HKFCj7wplH0Yv6hFR2WSwj5xcp 9vKMldXi/WShput6p0EIHyemywr75q/B+zFh/1zC369SACDkR4OwbwgfF0+HIvTV XMPoSKSsFMRHlu1r6SdzwyZ9iQ32MM9mtTj8+SFlABG2PVf8Ap55yw29nKRmJnhO uOpq2pdgMUvxT4/HFAxbGDtxxAZpW4CHh6P4fuRZaFPDXUIozSc9GvNBtU4DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUYnBcfCXSJbuCjhO6tltILKnlcowHwYDVR0j BBgwFoAUqkWY2D28FCoWStcvXdkDaq7bChswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRTM3MjExN0I2MUYzMTcxRTM3OTdBOUY2ODQwREZCNDE1 NTREMTM0NUNDQTgyN0MxNEZFODhCQkY0MkZGNjZDLzAvQUE0NTk4RDgzREJDMTQy QTE2NEFENzJGNUREOTAzNkFBRURCMEExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTQ1OThEODNEQkMxNDJBMTY0 QUQ3MkY1REQ5MDM2QUFFREIwQTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkUzNzIxMTdCNjFGMzE3MUUzNzk3QTlGNjg0MERGQjQxNTU0RDEzNDVD Q0E4MjdDMTRGRTg4QkJGNDJGRjY2Qy8wL0FBNDU5OEQ4M0RCQzE0MkExNjRBRDcy RjVERDkwMzZBQUVEQjBBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCksRITSz7Ip47cS2tyZzsrOSRC YVhoqK3wWS9wYvCphhipUbmICOMvqCdikKu6thXLgzShD+jjZQbDr+XhndU+N1kD bpI1/znJSDlubOaCpXPFqTX8vv6Fz9Ho9wahSg8jPoa2a0602rDEX8wE9oUrlGvT tUAYGPpn4Yom/QoELr3DIREP1sOrF9FKPGsyL0P7hHbNqjeldqPon6vfbaWyDm2m /h2b8DtX+wyVe6SnWfRoRKaGTJxJWJjV4m5c6pvT6IPYOsKO/1oIRRSpJw2ueg0S A+ASd5l1WBTrR2tTS8j4czl5Spe773dHlLk2U1UfC0x6wzPVVYin660sK22X -----END CERTIFICATE-----Generated at Sun Dec 7 10:08:10 2025 by rpki-client