This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
File:                     D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft (raw, json)
Hash identifier:          jTUPZ2aJ2aikAUGEUajB2oydRPn0cps4A1+51d7nGaI=
Subject key identifier:   FD:27:7D:E4:88:85:B7:EB:8A:FF:54:29:70:76:6B:A1:BF:47:9F:AD
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Certificate issuer:       /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial:       02C8C0013366CD2DD0834E332046CBE8D827A2E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
Manifest number:          014C
Signing time:             Sat 06 Dec 2025 14:15:00 +0000
Manifest this update:     Sat 06 Dec 2025 14:10:00 +0000
Manifest next update:     Fri 12 Dec 2025 11:53:00 +0000
Files and hashes:         1: 323830333a373136303a3a2f33322d3438203d3e20323634373635.roa (hash: /zdUwLbxl00Girej4HoyI+eFaLX0wm3b1GX7j4RH5LE=)
                          2: 3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa (hash: vyW9Et2UTg1FbOJKifIYN846XJrNB6y7yuWTTXzX8FU=)
                          3: 34352e3138312e3132382e302f32322d3234203d3e20323634373635.roa (hash: 2zqz2VH93Ey9sYYTLs6i4iwN18S+CclqRIPs/Am5l+U=)
                          4: D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl (hash: d4FCKCgv/PU1DSORdZzelWgx3xnF6DVRdFMGYi/KIAE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:c0:01:33:66:cd:2d:d0:83:4e:33:20:46:cb:e8:d8:27:a2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Validity
            Not Before: Dec  6 14:10:00 2025 GMT
            Not After : Dec 12 11:53:00 2025 GMT
        Subject: CN=FD277DE48885B7EB8AFF542970766BA1BF479FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:8a:82:74:c4:c6:10:a9:e3:e2:ce:bc:fd:
                    68:ac:13:91:2a:37:e6:0a:d1:32:b2:6e:8e:47:76:
                    a3:cc:61:25:80:59:42:93:d5:ea:fb:bf:f2:85:11:
                    2d:b6:af:fd:43:56:4e:b5:75:4e:9b:26:46:01:ab:
                    69:fa:a6:3a:d0:0d:93:b6:7b:b6:61:6b:23:a1:c2:
                    32:9f:f4:80:f1:72:cd:b6:72:38:fb:53:27:2b:af:
                    c1:83:a6:f9:a5:81:96:2d:84:5e:18:d1:c5:42:74:
                    d2:6f:29:ba:b2:ed:38:cf:90:85:31:41:18:86:77:
                    99:22:1a:b2:9f:aa:ea:48:f9:aa:bd:aa:0b:d2:59:
                    3b:43:ab:b7:80:28:1c:f0:19:ff:87:7b:aa:f5:48:
                    44:ea:37:b1:19:a0:f6:10:f7:91:fc:7c:df:ea:f9:
                    4f:a0:35:f4:92:1c:8e:da:90:f1:22:3a:c3:29:c4:
                    17:a0:66:a5:72:72:b4:c4:05:70:43:86:6c:c8:3c:
                    41:9a:ce:fc:d2:bd:4d:fe:47:ab:e5:0a:f8:5b:53:
                    d5:9d:11:c1:c6:1a:fb:fa:7e:a9:c4:de:7c:ab:59:
                    76:22:ce:5c:66:af:f6:1f:61:bc:f2:78:b0:65:71:
                    64:bf:f3:19:fd:3f:96:8b:1d:64:ab:7f:5d:f9:92:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:7D:E4:88:85:B7:EB:8A:FF:54:29:70:76:6B:A1:BF:47:9F:AD
            X509v3 Authority Key Identifier:
                keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:6a:bd:de:5a:72:42:18:74:91:dd:5c:f0:6d:ed:c6:9d:
         df:6f:18:c0:5d:a5:8a:d8:75:6b:25:06:c3:50:05:54:95:8b:
         9c:28:59:ff:0c:ef:6d:59:cf:d5:a0:b8:eb:d6:c3:6e:4f:9c:
         dd:da:a8:8b:08:94:d5:df:e8:2c:13:eb:07:c4:f2:de:f2:67:
         b3:11:4f:6d:fa:c5:f0:f3:b8:9e:49:1a:ff:67:4c:f3:ed:58:
         a6:34:c0:c4:a6:d3:06:79:79:2f:45:17:33:18:94:c0:7b:60:
         6a:f4:35:e3:09:e2:26:1f:d9:0c:83:b9:b4:8f:42:c3:41:8e:
         09:ba:6f:eb:ae:e5:0d:b6:a7:f4:0f:b7:c1:44:4a:2a:c4:74:
         06:9b:1a:3c:87:69:b9:f8:cf:0e:8d:dc:f6:12:52:c0:d6:77:
         2a:df:b3:ef:c8:ab:4d:0c:74:29:e7:54:3c:04:50:ca:84:da:
         77:51:50:b0:a7:d2:ee:33:50:96:61:17:2f:80:de:39:ed:24:
         49:eb:fa:ec:57:2c:eb:07:d9:91:08:32:2c:91:f1:72:11:21:
         29:19:41:de:bf:ac:01:85:04:0d:e8:cb:4f:bf:c2:37:d7:eb:
         f6:e0:04:fc:1b:09:fb:7c:09:bc:75:54:a5:0f:38:f3:4c:5d:
         a3:d6:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:33:13 2025 by rpki-client