This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
File:                     CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft (raw, json)
Hash identifier:          IYHg4vq+OvG8LXtYPLJWLHMb9CgtE5bjj1GWZG80pYU=
Subject key identifier:   DC:45:21:FB:E4:E4:4D:F9:DF:76:99:BF:12:2B:73:11:F4:A5:B7:E2
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       77627B9703A6B44F590C905954B3E9E6A820CF1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
Manifest number:          0144
Signing time:             Sat 06 Dec 2025 15:04:50 +0000
Manifest this update:     Sat 06 Dec 2025 14:59:50 +0000
Manifest next update:     Fri 12 Dec 2025 03:00:50 +0000
Files and hashes:         1: 323830333a643034303a3a2f33322d3438203d3e203631343937.roa (hash: KPCzcyChvyPeehaWnhvSTDPTdKfFfKuYkiILeOULoU8=)
                          2: CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl (hash: BX7rrfZT1Y7rDe3gVObIBaHNV+fwWqpzBy9zXd++J3U=)
                          3: 323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (hash: C3W/w2y6r/ZFYMQY4Ut83wrH6Dgf7/0VGr9hKowpp2Y=)
                          4: 3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (hash: Lp8itGX8i8BvTiHNYK6IyXru0xDfdNKADzCredWO6SM=)
                          5: 3133382e39392e3133362e302f32322d3234203d3e203631343937.roa (hash: w6YQeVzBbdGX4ZtqxOWuTiF9w7pymQdvj42qCjcXegM=)
                          6: 3133382e39392e3133362e302f32342d3234203d3e203631343937.roa (hash: RK0nikVIaqyMaMoCsLHM0XvVg3ZPgIO9Hx7uNumFi3A=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:7b:97:03:a6:b4:4f:59:0c:90:59:54:b3:e9:e6:a8:20:cf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Dec  6 14:59:50 2025 GMT
            Not After : Dec 12 03:00:50 2025 GMT
        Subject: CN=DC4521FBE4E44DF9DF7699BF122B7311F4A5B7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:9f:f5:60:07:81:27:32:aa:6b:de:c6:c9:
                    d8:b0:b3:6c:7a:99:f6:2a:2c:40:ca:ed:c5:4e:0f:
                    f6:84:c7:2e:9d:b3:9d:90:38:01:e7:89:23:9b:68:
                    3c:b6:a6:9c:b7:2e:cc:20:8d:34:f1:a4:78:ba:63:
                    f7:af:48:68:a2:0c:f5:ca:3f:9c:a0:3d:3d:c3:d9:
                    24:4a:36:55:1b:68:23:ae:5c:4e:2e:d6:9f:90:ab:
                    1d:d7:1f:d2:71:0a:b1:f7:85:ee:c0:b4:6c:4b:9d:
                    5b:ba:a7:62:f1:2b:46:c5:a9:b7:59:75:3a:e5:ac:
                    d0:bd:31:f1:23:87:1e:01:cf:1c:0e:94:01:cc:38:
                    ff:f8:8d:03:6e:e1:ec:a5:0a:04:9b:b4:72:6f:11:
                    15:23:5c:47:92:a2:a4:5f:3b:38:62:29:84:10:6f:
                    ae:56:5d:63:f8:e3:1a:59:6d:04:50:46:28:b3:77:
                    14:5e:d8:1e:b1:14:b7:78:b0:7c:95:59:93:2a:e4:
                    b6:f8:a3:0e:fd:f5:d8:8f:03:b4:5a:2d:2e:a6:aa:
                    6d:ce:83:c9:4e:5f:ff:4c:e9:6b:4f:7b:a8:91:42:
                    b8:c1:41:76:4e:f4:89:6b:e0:69:aa:38:9b:a2:c6:
                    38:5a:c4:40:34:55:e9:2b:7f:e0:77:92:27:37:a5:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:21:FB:E4:E4:4D:F9:DF:76:99:BF:12:2B:73:11:F4:A5:B7:E2
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:19:9b:e1:46:dd:53:bb:e0:20:8a:a2:5f:3b:a5:e4:d6:
         95:45:ec:1b:9e:40:98:a5:9a:48:71:5e:ef:07:f8:e1:27:c5:
         c6:d1:bb:02:26:bd:99:4b:15:77:fc:e8:cb:52:25:4e:b5:c4:
         f4:e5:b0:e6:d7:27:0e:4f:39:29:94:00:9b:ca:50:a0:cb:59:
         ae:e1:87:41:76:c9:c1:a8:e1:f3:e2:2e:d9:93:8c:71:d7:8d:
         6f:a2:af:82:23:e9:30:f6:60:7f:d9:e5:77:95:49:09:99:8f:
         01:82:f8:14:48:56:94:36:9a:43:35:f1:47:ff:52:47:3a:dd:
         b9:7e:97:83:48:55:67:e1:6f:0b:50:77:b3:d9:f1:32:e0:f7:
         0d:05:17:6b:9e:3a:bb:df:c3:ad:56:5a:62:92:c4:3c:b8:db:
         29:34:d6:22:fe:9c:74:35:c0:94:79:77:33:05:8e:f1:31:19:
         aa:40:f5:8d:6b:bf:07:83:7f:e7:8d:74:52:01:0c:9b:c8:ed:
         41:45:6d:6b:e8:f0:6e:5d:68:15:b2:5c:f1:06:ff:0b:99:b7:
         8e:29:c2:02:14:04:e6:4c:55:1f:b0:3a:3e:e5:56:b4:d3:e5:
         56:99:a6:bb:09:be:8f:31:4f:e6:26:dc:4c:8f:03:07:be:82:
         e9:7f:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:18:03 2025 by rpki-client