This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
File:                     BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft (raw, json)
Hash identifier:          WEp/yYYL+bk6KNmaoc9GMCzQZCVFaTkvhy2sFHtOHco=
Subject key identifier:   99:BE:2B:E7:35:E3:18:58:36:7D:E9:9F:19:B5:46:19:D9:64:32:CF
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       3670BB4971356E1942FB1AE1B827AC4D6FFAD622
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
Manifest number:          0134
Signing time:             Sat 06 Dec 2025 04:18:43 +0000
Manifest this update:     Sat 06 Dec 2025 04:13:43 +0000
Manifest next update:     Thu 11 Dec 2025 23:28:43 +0000
Files and hashes:         1: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (hash: nPvm3kzjbUmYOtzUojc17lqgCTEOSCYg7LLW7Gc1DQs=)
                          2: 34352e3232392e3139312e302f32342d3234203d3e20323636373036.roa (hash: sz3S0CVsq3kkBNYyjWtCUza1fFwzCmkYBidmyMc7Aak=)
                          3: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (hash: 7y3IFM3NwuLfRDKqbCtjdZ5YY02akKWgfUvsoylFEKE=)
                          4: BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl (hash: fJzwOEz1pjQZkMUKguVCfrjaAlysV0nfRv9NkgUpciw=)
                          5: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (hash: qDZpwSvgwr35B4Q5Ep3KsiY0eTX8KljaiVEi2IaGUfw=)
                          6: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (hash: +gp+nVFgHvlbQDwBw8l90JcbDYFqIVwQN8Q6fIVq9g4=)
                          7: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (hash: TDo9I8HOIXVWiAwuFd8E4AxQPm1JNcpGri/yELkIs+A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:70:bb:49:71:35:6e:19:42:fb:1a:e1:b8:27:ac:4d:6f:fa:d6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Dec  6 04:13:43 2025 GMT
            Not After : Dec 11 23:28:43 2025 GMT
        Subject: CN=99BE2BE735E31858367DE99F19B54619D96432CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:81:35:b5:bc:57:04:e8:91:51:48:0f:2f:
                    0d:2c:bb:ed:10:70:16:38:02:39:f0:9d:76:11:8e:
                    a7:28:43:b0:a1:fd:84:23:ea:ac:ef:2d:cc:64:45:
                    f8:e7:7e:06:d7:c8:bc:5f:25:79:a2:0f:f7:c2:09:
                    4b:b7:5b:1c:e9:77:5f:09:fc:71:b6:1e:41:31:7f:
                    25:51:78:34:86:be:cf:ec:85:6c:d3:55:50:74:29:
                    42:31:6f:78:5d:e8:b6:96:33:f5:f2:22:64:10:fe:
                    34:7a:72:39:0a:2c:dc:b7:04:88:0d:f2:d7:98:1b:
                    03:d9:cc:57:9b:89:90:c6:34:43:ad:3c:73:a1:a1:
                    af:c1:b2:a4:60:f7:97:58:3a:01:68:7e:9b:44:ea:
                    9d:4e:cf:e1:92:25:20:0a:1e:50:0b:8b:37:1b:b2:
                    92:0f:5b:a3:6a:3d:82:11:01:6e:b9:dd:7e:e1:6b:
                    d1:70:a0:9c:60:8f:0d:15:06:5e:2d:aa:ee:67:4e:
                    a5:99:a3:66:9e:44:2d:14:17:20:82:76:c3:70:b2:
                    7d:1f:a1:81:95:b6:38:b1:65:a1:23:19:ac:ea:d5:
                    88:19:4c:7d:89:99:d3:62:90:64:16:08:19:48:70:
                    ad:5a:a2:86:41:cd:8a:81:46:51:b4:09:31:3a:30:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:2B:E7:35:E3:18:58:36:7D:E9:9F:19:B5:46:19:D9:64:32:CF
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:df:6b:41:43:82:1b:fa:2a:58:92:85:ce:0d:50:2a:35:ea:
         d7:13:16:e6:66:a9:6e:c7:ed:61:94:33:2a:f4:1a:b4:f9:09:
         69:be:2e:c6:0c:26:bc:3a:8c:5b:d4:bb:f6:0e:52:6b:02:ee:
         86:a6:a0:dc:da:6a:7c:f0:5f:20:d5:d6:a8:ed:ed:89:6e:0c:
         aa:57:a7:f4:24:f8:ad:14:77:ef:e1:77:22:aa:4b:0e:9f:86:
         cf:f5:27:11:ce:51:7b:c5:9e:d9:55:42:3d:46:13:7f:c2:cc:
         8a:85:a4:89:54:b3:bc:79:c0:8a:fc:1b:d4:29:d3:9a:f9:24:
         03:29:ad:a7:77:ba:1a:a7:78:7f:41:27:13:19:b1:3b:4f:91:
         4c:ea:f6:bd:a2:e4:66:64:57:32:ae:7f:f9:da:2b:85:17:9d:
         e9:b9:1b:24:ce:16:46:a3:c7:31:32:f5:61:35:99:20:9c:1e:
         5e:b2:da:7b:96:b6:10:b8:74:d0:82:f2:c5:2e:70:06:9c:b2:
         89:67:79:30:fe:fb:bd:07:74:ec:6d:d7:05:a2:3a:7f:cc:ee:
         57:7a:c1:dd:77:dd:fb:9c:42:b0:dc:a5:49:37:01:a0:14:f8:
         87:14:4e:26:3b:07:e1:2b:e6:20:23:c2:1d:da:d4:26:9d:be:
         25:53:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:03:10 2025 by rpki-client