This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft
File:                     CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft (raw, json)
Hash identifier:          l1ELWrjDbglWXXty7VA+kdvklyNsUU5txVhBUdSV1yU=
Subject key identifier:   BE:A9:46:3A:28:3D:42:51:BB:48:18:47:B8:0C:67:A5:AE:0E:8F:90
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       0DF04B1936DD83B57DC36A999AF67FCB70BA56D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft
Manifest number:          0152
Signing time:             Sat 06 Dec 2025 01:57:19 +0000
Manifest this update:     Sat 06 Dec 2025 01:52:19 +0000
Manifest next update:     Thu 11 Dec 2025 04:27:19 +0000
Files and hashes:         1: 34352e3138312e3234372e302f32342d3234203d3e20323639373339.roa (hash: 4lXh3ibayo5Zi7kdTmOX1ne3FDtkN83ShXfAptaccdo=)
                          2: 34352e3138312e3234342e302f32342d3234203d3e20323639373339.roa (hash: +i/Mot5gNcLwJVOwWVTbwFr6B3JlJSwzq9Nw6MePvas=)
                          3: 323830333a313936303a3a2f33322d3332203d3e20323639373339.roa (hash: K6483R/r4NG09Na1OcbZfFFjseUu9KWfPxpFUlqunbw=)
                          4: 34352e3138312e3234352e302f32342d3234203d3e20323639373339.roa (hash: ztm3fc+J6QFMgaJC6qZBnLATf7sS4yvWUTZsxQWjIFo=)
                          5: 34352e3138312e3234362e302f32342d3234203d3e20323639373339.roa (hash: sNOaI6puDBQMhjeLoZjxWf9sHdl7AO+OX2bwEcw4i/4=)
                          6: 34352e3138312e3234342e302f32322d3232203d3e20323639373339.roa (hash: crn7XpzM5rzZSHcOo0MvTI6lgLZMqOEYFsCxBpQwHgM=)
                          7: CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl (hash: ZXwAUS/rYfTbUJd/EbJxg9BDreMScKPXKsHriufC9VU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:4b:19:36:dd:83:b5:7d:c3:6a:99:9a:f6:7f:cb:70:ba:56:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Dec  6 01:52:19 2025 GMT
            Not After : Dec 11 04:27:19 2025 GMT
        Subject: CN=BEA9463A283D4251BB481847B80C67A5AE0E8F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:c8:a4:e3:d9:12:e5:21:38:e6:17:a6:b6:
                    9e:86:d6:64:a0:5b:71:f6:1c:fa:1d:56:fd:0d:99:
                    ea:e7:75:d7:a8:b8:f9:58:c3:b0:46:c6:71:46:51:
                    a4:c0:04:df:9d:0f:bb:4f:fd:2f:d5:12:dd:8a:45:
                    dc:6a:18:2f:f0:f2:56:0e:39:86:48:f8:6c:ae:0a:
                    c9:63:7a:43:90:0b:db:e9:b4:73:d7:6f:c3:ca:be:
                    c6:68:d5:90:bc:36:fc:f3:04:a8:1d:87:7d:6d:80:
                    71:0c:f9:d5:4f:7d:f5:08:fc:eb:ed:94:31:b3:f6:
                    76:8a:8c:69:41:34:1e:91:8f:d4:c6:53:07:df:34:
                    d0:8d:aa:fb:c7:29:da:ca:d9:76:12:87:9c:00:86:
                    0d:50:58:78:de:39:75:ea:87:6d:33:08:49:61:74:
                    38:e8:2c:00:69:d5:f1:13:0e:1b:cd:84:75:ab:65:
                    57:e6:93:b4:9a:c6:41:05:c8:e7:23:7b:cc:1b:89:
                    09:db:f7:c9:d5:6b:22:0f:8f:d0:8b:9a:21:91:42:
                    1b:3b:98:06:9f:e3:e4:ae:b7:0d:29:a3:ab:5c:c6:
                    19:f8:3d:67:9a:8b:89:13:2e:b0:5e:43:d6:14:0c:
                    28:a6:29:5a:21:18:4b:70:98:6f:18:22:45:75:d8:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:46:3A:28:3D:42:51:BB:48:18:47:B8:0C:67:A5:AE:0E:8F:90
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:75:c4:43:4f:fe:62:06:e1:9f:68:c0:ee:b5:70:fd:f4:
         76:dd:4e:ed:2a:9b:94:39:d2:97:42:90:c8:17:23:4b:f4:eb:
         3f:f7:04:d7:08:31:0b:79:14:88:af:e0:6a:33:42:11:aa:3d:
         41:d3:d1:92:26:61:af:fe:05:43:70:09:2f:af:7c:32:41:6c:
         d7:5b:8a:96:41:0d:7e:54:38:c4:a3:ea:cd:be:0b:61:78:c1:
         6b:7b:8b:c3:ac:f3:e4:81:74:fe:11:b8:d1:c2:7f:73:bb:ba:
         d6:88:2e:07:5d:c6:4c:2b:4c:f5:42:61:4c:47:d5:40:1c:98:
         fe:c7:49:59:30:d0:1e:ac:a6:44:d9:15:af:07:48:0f:dc:95:
         b9:cf:bc:11:35:36:5b:23:a7:82:ce:a3:4a:00:8d:33:50:0a:
         4d:64:6e:4c:a7:7a:91:d9:46:18:4d:60:04:cb:49:3d:2b:90:
         a6:b9:67:ee:9d:04:4c:e3:c4:75:af:82:53:ad:05:1e:3e:fc:
         34:11:ed:f9:15:c6:74:29:95:0e:bf:dd:8f:44:c4:05:34:ca:
         40:02:ac:27:2c:f9:e0:96:36:ac:6a:65:f1:53:45:33:fa:97:
         02:09:a4:d7:fa:7b:5e:8e:e7:07:b9:7e:5f:b7:91:3b:05:7d:
         6a:75:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:18:07 2025 by rpki-client