This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
File:                     DECCD2773167F746E0E146E321731A3F7D19EEEC.mft (raw, json)
Hash identifier:          ED6yiMZNBil54CdPIO0bDXYc770/0nOHNtF2jY3CX60=
Subject key identifier:   42:AF:13:16:F3:9D:64:88:24:A1:91:2A:53:E6:E5:61:78:FF:6F:C3
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       3282EC207C1862997F39E0BF253C8C25E6909D70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
Manifest number:          CA
Signing time:             Thu 04 Dec 2025 20:00:31 +0000
Manifest this update:     Thu 04 Dec 2025 19:55:31 +0000
Manifest next update:     Wed 10 Dec 2025 15:17:31 +0000
Files and hashes:         1: 323830333a653031303a3a2f33322d3332203d3e203237383831.roa (hash: g4UPMBlCzMxnEgxHuVsVtp3jjQNKzK3POMvXxIYZ9O4=)
                          2: 3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa (hash: c1MXdJf6Z7ygP+RN8WtiipiX46h5ieBLcXx2hl0Rldw=)
                          3: 3139302e31352e3232342e302f31392d3234203d3e203237383831.roa (hash: AEdu41V/wmwVJ+Molo6DNtR12FoHpLpgGxMTbapgHMc=)
                          4: DECCD2773167F746E0E146E321731A3F7D19EEEC.crl (hash: 6V/8wM30H/83xj5U0R3yHKnGlL/4BkYyEvDgCch9J/k=)
                          5: 3139302e372e3232342e302f31392d3234203d3e203237383831.roa (hash: IV1FMiyz55bmI2rrartzNFoxAfITX+gDH1uBgiC3Cfg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 15:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:82:ec:20:7c:18:62:99:7f:39:e0:bf:25:3c:8c:25:e6:90:9d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Dec  4 19:55:31 2025 GMT
            Not After : Dec 10 15:17:31 2025 GMT
        Subject: CN=42AF1316F39D648824A1912A53E6E56178FF6FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:26:be:23:af:62:ec:f5:77:02:25:4b:4d:
                    cc:73:7f:0d:31:ca:9d:6f:1e:36:a4:b0:0e:d7:2b:
                    97:d3:49:67:d1:ff:31:3b:9f:e7:94:f6:08:b3:e9:
                    17:31:7c:4a:f0:e3:9e:b5:9a:a7:f8:55:78:dd:32:
                    fa:dd:21:db:11:b1:70:bb:69:d7:84:6b:96:85:fa:
                    67:ef:95:05:e6:d1:ef:94:89:4a:8c:88:7f:89:26:
                    72:e7:38:e3:18:9c:6c:2e:a4:44:11:85:fb:f3:71:
                    cd:44:2a:13:88:63:d8:11:fc:2a:84:de:e0:1b:c2:
                    95:e2:71:49:de:b5:86:ae:8c:71:b0:75:c6:e3:63:
                    e6:70:3e:4c:77:03:02:cd:8a:c4:27:b3:61:37:b9:
                    f2:8e:50:bc:cb:82:a6:18:5f:85:88:da:f3:f2:37:
                    3b:f1:91:fe:02:8e:a2:1f:cb:c6:fd:92:e7:04:6b:
                    fb:d5:4d:89:ec:0f:8d:f7:be:b7:66:db:ab:8a:c0:
                    c7:43:71:8f:32:b0:a7:8e:c8:59:94:8b:6f:fa:71:
                    0a:ea:af:61:ca:0a:48:79:59:7b:f3:94:f4:cc:1c:
                    83:ca:47:42:35:26:27:5b:41:b8:5f:5d:63:91:b0:
                    47:45:cb:be:9e:27:bf:40:c1:0f:5c:0d:f2:33:c1:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:13:16:F3:9D:64:88:24:A1:91:2A:53:E6:E5:61:78:FF:6F:C3
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:e1:e8:04:3f:01:53:84:09:80:3b:01:ec:13:12:6c:c0:
         c1:fd:a2:25:e2:9b:a9:31:83:8d:a7:0d:09:dd:23:eb:68:f4:
         11:93:b5:8b:9c:b1:fc:b9:f0:24:27:66:ee:59:a1:59:41:2f:
         21:1d:a9:88:73:73:51:a7:e5:cd:52:91:cd:6d:93:46:5c:35:
         c6:06:e6:92:2f:d0:b8:4b:2a:f5:51:55:8f:fa:c2:31:99:5d:
         48:60:9c:3d:8a:82:ea:e6:ee:3c:f9:b8:18:88:16:b9:0c:b7:
         88:06:e2:fb:b0:5c:4d:33:64:82:82:60:7e:19:2e:4e:1a:89:
         6a:34:66:c5:8d:ce:32:3f:ad:3e:70:f0:ea:11:28:f2:ea:3e:
         86:ba:11:92:d0:a2:2a:7e:d2:ce:f1:77:1b:1f:d5:0a:8d:7a:
         b7:58:31:c2:0e:c2:a3:95:c4:8e:6d:fe:e8:f8:6c:2f:59:36:
         47:9b:96:dd:1d:c5:7c:7f:f1:89:cd:52:3a:d7:bd:45:9b:8f:
         a6:2a:60:f3:70:9f:04:12:a6:cf:af:27:a0:e2:36:8d:3a:ec:
         46:f1:53:28:b8:8d:3d:ab:b9:56:ca:0f:4a:e1:62:d9:72:a9:
         36:4e:c4:5a:d0:53:64:90:5d:f6:e5:ff:08:0d:39:6d:3a:de:
         22:d8:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----