This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
File:                     25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft (raw, json)
Hash identifier:          /8q0BOJ8Fiyd9n4qSCb47cpWzaA3jvQSgooJ8wYYuFQ=
Subject key identifier:   2A:64:0D:17:22:C7:D4:32:74:FF:DD:91:98:47:E9:36:83:98:16:34
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       155E6D0FE8A25C9AA32A54C04C2E84A03F077543
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
Manifest number:          014B
Signing time:             Sat 06 Dec 2025 14:24:26 +0000
Manifest this update:     Sat 06 Dec 2025 14:19:26 +0000
Manifest next update:     Thu 11 Dec 2025 17:13:26 +0000
Files and hashes:         1: 3137392e34392e3230322e302f32332d3233203d3e20323732313132.roa (hash: TTfzQeM7sACbae1K0qymSKdv7Q3nycpnXjNuF+VQ0Y0=)
                          2: 323830333a6631303a3a2f33322d3634203d3e20323732313132.roa (hash: PRGFiGJMFdR6iGdAHJG+NNP+BaTnKmRJUX4my8JNi+4=)
                          3: 3137392e34392e3230322e302f32342d3234203d3e20323732313132.roa (hash: tRMCg+iI9m2XcnD3nb+2jCFwV6gAeACK3/AL6ZfRyxQ=)
                          4: 25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl (hash: TzkymOHF4BPu1UDk46U7WCRO5VmD5VlrkNhCrGksSyQ=)
                          5: 3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa (hash: A6Yhxbwaq4ZHMwEuqLvfRBzcErvLe4EWmPhACWWPAms=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 17:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5e:6d:0f:e8:a2:5c:9a:a3:2a:54:c0:4c:2e:84:a0:3f:07:75:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Dec  6 14:19:26 2025 GMT
            Not After : Dec 11 17:13:26 2025 GMT
        Subject: CN=2A640D1722C7D43274FFDD919847E93683981634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:2c:ff:0f:fe:97:b2:f4:f8:06:3d:0e:7f:
                    97:4c:ef:bd:6f:5a:56:a5:ab:3e:22:08:1d:1e:9b:
                    30:f3:37:a5:b5:1c:13:71:ec:54:09:4d:2f:eb:7e:
                    e9:5c:a5:87:58:87:84:73:67:5f:92:72:7b:d9:0f:
                    37:3c:39:89:70:a3:48:f8:28:96:f6:a8:bd:48:b7:
                    59:86:e7:ff:b0:ac:4f:40:92:96:78:94:51:8f:b5:
                    a2:e9:10:6e:8e:79:43:91:4b:d7:b6:d4:14:68:e4:
                    ab:fe:05:21:b0:3c:cc:c6:28:fe:84:d5:40:16:39:
                    0f:0c:45:b9:0e:e6:14:3b:e2:15:2d:e7:d8:69:23:
                    02:20:9c:3c:b3:56:74:0d:49:25:30:24:24:fa:ee:
                    70:d7:02:38:1c:74:43:f2:46:87:b2:58:e6:90:97:
                    fd:85:c0:c0:63:c0:10:4a:0e:ee:26:23:16:5d:9c:
                    4d:c6:a7:1f:b9:c1:46:91:e4:d4:18:49:ec:f0:5a:
                    3d:2e:a1:55:21:b6:78:75:ef:45:94:cd:ad:e4:15:
                    5c:ce:06:e9:0d:03:7e:e9:f2:5e:a4:ae:f7:59:57:
                    13:bf:dc:0f:3e:15:f7:f6:2a:27:25:22:18:9c:e9:
                    8c:dd:c1:98:9f:8d:24:f8:41:a9:7a:fe:18:50:07:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:0D:17:22:C7:D4:32:74:FF:DD:91:98:47:E9:36:83:98:16:34
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:4b:69:2b:3d:5a:d8:37:b8:92:46:e0:c8:ae:b8:62:15:
         f4:b2:07:7b:ba:35:60:ef:70:9c:1c:0f:c8:50:3c:36:ad:01:
         6c:54:60:b7:52:8f:a3:37:bf:0c:ca:5a:49:18:a4:63:21:b7:
         02:73:8c:0e:c0:99:64:a2:69:8e:a1:00:d3:8b:b1:bd:28:5c:
         15:eb:c6:8e:5e:8e:4d:a4:02:b9:b2:6a:e1:1c:e0:a5:38:74:
         18:b8:58:ff:27:9e:08:0e:a5:94:aa:00:a4:83:09:86:3d:18:
         a1:fb:67:9f:3e:d3:af:8a:a0:0f:55:0d:f1:b7:76:0c:98:92:
         e2:5b:9e:06:93:59:af:15:84:b0:b0:ed:d3:fb:6e:87:b9:48:
         15:35:cd:be:43:d8:93:84:15:6a:2a:43:d6:15:10:a8:c8:c6:
         65:41:52:19:02:ce:d5:9b:2d:34:ef:9a:5c:d2:f9:85:6c:31:
         d2:e0:79:a9:29:0c:6d:56:ae:d6:9f:2a:b3:ef:86:e7:68:0a:
         f2:3c:b5:c8:9d:32:55:d3:76:38:46:2e:e0:cb:71:1b:6f:a4:
         fb:5c:63:fd:fc:96:47:f5:d3:2d:c6:9e:17:b2:cd:a6:75:7e:
         7d:c5:9f:21:88:fc:fc:ce:f2:84:93:2d:72:82:1a:57:99:52:
         67:1f:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:15:04 2025 by rpki-client