This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: oQqc5tcHmPVmnt0s2lZarnvXFykIy1kIQy+M0Wgs6VY= Subject key identifier: 42:CB:E3:0A:66:88:C3:F3:62:10:AE:2B:98:F8:0F:7C:A3:4A:0B:FB Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 08D63CA7C5934F439825D8A10D46F12A40815BDD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: 0143 Signing time: Fri 05 Dec 2025 15:16:28 +0000 Manifest this update: Fri 05 Dec 2025 15:11:28 +0000 Manifest next update: Thu 11 Dec 2025 11:46:28 +0000 Files and hashes: 1: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: qBU56uQYCyvjbJcNP1qlys8oEBtLTkBzXO+IMSyJWlw=) 2: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=) 3: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d6:3c:a7:c5:93:4f:43:98:25:d8:a1:0d:46:f1:2a:40:81:5b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Dec 5 15:11:28 2025 GMT Not After : Dec 11 11:46:28 2025 GMT Subject: CN=42CBE30A6688C3F36210AE2B98F80F7CA34A0BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:6e:8e:d9:18:e0:ec:56:28:a6:d1:a4:6e: 04:20:c2:e0:98:2d:63:d3:1d:97:15:cb:81:43:58: 0c:a7:ff:c6:f7:81:db:06:7d:35:2d:05:96:92:23: 13:2f:81:df:81:7e:0e:20:44:b5:78:87:83:2d:78: 35:ee:23:df:ee:5e:a8:1c:9c:f4:92:51:a8:c6:2c: f1:96:6a:39:45:dc:ad:c0:c1:39:82:47:d4:61:48: ee:b8:a2:66:32:c4:e9:f0:e2:f0:ad:d4:fa:33:c6: 96:be:26:0c:79:da:ee:1d:dc:3f:14:3b:75:ae:5a: 15:b4:35:c2:9c:77:bc:e6:bd:04:b8:19:1b:a5:d7: 10:cc:eb:75:e7:9c:12:7d:5e:42:3a:05:83:8e:98: 51:45:2f:36:aa:cb:81:e5:36:d1:f2:d5:ea:5a:66: cf:e5:88:8f:a1:40:7b:e8:e5:e8:a2:8c:b3:ea:0a: 43:d7:0a:4f:62:ff:57:51:83:2d:f0:50:a0:a1:54: 6a:ac:de:51:25:f6:d5:e2:1e:e9:7a:be:f6:35:85: 89:8a:0d:39:5c:15:5d:95:7a:0d:5c:9e:e4:3f:33: 8b:0d:fe:fc:f6:31:94:67:28:17:a7:2f:a4:04:6e: 45:c9:17:09:f4:af:5c:04:7d:fe:6d:d7:ee:63:8b: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:E3:0A:66:88:C3:F3:62:10:AE:2B:98:F8:0F:7C:A3:4A:0B:FB X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9e:d9:97:04:ad:4c:98:72:c3:3b:7e:fb:e2:0b:93:a8:4f: e7:9a:b1:60:92:66:83:44:c4:be:85:ee:17:35:9e:71:f2:66: 2d:5c:d4:cb:bd:51:fb:a5:30:45:a1:b8:a4:6b:1b:2f:d6:09: b5:6d:f6:9a:0d:be:2f:f0:d2:a6:4c:5a:ab:66:41:24:9b:d0: 65:67:3a:2e:6e:2f:6b:6f:fe:48:b3:29:93:0f:15:b4:61:16: 02:36:b1:2f:98:e6:70:59:ac:80:e3:0d:4d:f6:67:aa:28:40: cb:2f:7a:b6:8a:8b:3d:fb:2b:91:f7:f3:a3:25:7c:ca:5c:a5: 42:ae:f9:24:f0:22:97:bd:e1:aa:ab:2a:4d:a5:d7:23:51:1f: 1d:bd:ba:9e:34:8e:09:5b:3f:0a:9f:35:4b:ba:88:2e:91:54: 2e:c3:89:6d:52:9a:99:7e:7d:f0:e1:f6:b3:ba:ac:3d:e2:74: 4a:aa:b6:25:22:b6:87:f8:e1:e9:86:fd:75:2e:b0:6f:79:f7: 0f:51:ac:98:b9:52:55:ee:5e:fc:ae:d1:01:7c:71:ba:66:94: 76:6f:86:55:e6:35:5f:63:56:6c:22:d9:48:e7:49:e3:7f:21: 4b:1c:8f:27:6a:f8:28:4b:2c:e7:f5:90:1a:1d:09:30:90:69: 20:d5:ee:2f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCNY8p8WTT0OYJdihDUbxKkCBW90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNTEyMDUxNTExMjhaFw0yNTEyMTExMTQ2MjhaMDMxMTAvBgNV BAMTKDQyQ0JFMzBBNjY4OEMzRjM2MjEwQUUyQjk4RjgwRjdDQTM0QTBCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw826O2Rjg7FYoptGkbgQgwuCY LWPTHZcVy4FDWAyn/8b3gdsGfTUtBZaSIxMvgd+Bfg4gRLV4h4MteDXuI9/uXqgc nPSSUajGLPGWajlF3K3AwTmCR9RhSO64omYyxOnw4vCt1Pozxpa+Jgx52u4d3D8U O3WuWhW0NcKcd7zmvQS4GRul1xDM63XnnBJ9XkI6BYOOmFFFLzaqy4HlNtHy1epa Zs/liI+hQHvo5eiijLPqCkPXCk9i/1dRgy3wUKChVGqs3lEl9tXiHul6vvY1hYmK DTlcFV2Veg1cnuQ/M4sN/vz2MZRnKBenL6QEbkXJFwn0r1wEff5t1+5ji3KHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQsvjCmaIw/NiEK4rmPgPfKNKC/swHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkntmXBK1MmHLDO3774guTqE/n mrFgkmaDRMS+he4XNZ5x8mYtXNTLvVH7pTBFobikaxsv1gm1bfaaDb4v8NKmTFqr ZkEkm9BlZzoubi9rb/5IsymTDxW0YRYCNrEvmOZwWayA4w1N9meqKEDLL3q2ios9 +yuR9/OjJXzKXKVCrvkk8CKXveGqqypNpdcjUR8dvbqeNI4JWz8KnzVLuogukVQu w4ltUpqZfn3w4fazuqw94nRKqrYlIraH+OHphv11LrBvefcPUayYuVJV7l78rtEB fHG6ZpR2b4ZV5jVfY1ZsItlI50njfyFLHI8navgoSyzn9ZAaHQkwkGkg1e4v -----END CERTIFICATE-----Generated at Sun Dec 7 11:16:39 2025 by rpki-client