This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
File:                     24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft (raw, json)
Hash identifier:          Q1hXZiQe3WKopRhPVSKaPDp5SH03KGPLbM3xfb5691Q=
Subject key identifier:   7A:9B:6C:5D:81:B0:FC:6B:E6:DD:D1:04:8C:E9:03:A2:9F:A3:E7:43
Authority key identifier: 24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B
Certificate issuer:       /CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
Certificate serial:       3AF5D41ABA1FBB750C282C7A7F313D1FD17FF037
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
Manifest number:          0140
Signing time:             Sat 06 Dec 2025 16:55:52 +0000
Manifest this update:     Sat 06 Dec 2025 16:50:52 +0000
Manifest next update:     Fri 12 Dec 2025 07:27:52 +0000
Files and hashes:         1: 323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa (hash: 3mU2REkxW4FF4YjwJgNC1Ge/I6TEilvcEWmZL1AaFnk=)
                          2: 24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl (hash: iRXJ/835HyIwYiZzLykj4b0fuCrbS6EMAaFTNwzgols=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f5:d4:1a:ba:1f:bb:75:0c:28:2c:7a:7f:31:3d:1f:d1:7f:f0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
        Validity
            Not Before: Dec  6 16:50:52 2025 GMT
            Not After : Dec 12 07:27:52 2025 GMT
        Subject: CN=7A9B6C5D81B0FC6BE6DDD1048CE903A29FA3E743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:b7:d8:09:40:c6:64:cf:76:16:f9:54:52:
                    52:d9:ee:45:e9:2a:e3:ee:1a:ca:33:b9:88:a6:e6:
                    35:d2:a4:f5:fa:50:af:d9:64:de:d1:2d:f5:44:47:
                    d3:ec:3a:94:7b:4b:15:d7:13:6a:01:91:d3:d9:c2:
                    e2:e7:e3:50:a0:6d:3c:39:22:9f:0a:ad:a1:87:b7:
                    3e:23:a8:74:ce:38:a8:d9:da:f7:88:88:25:39:2b:
                    f1:0a:6d:26:0c:13:40:af:02:60:f3:3c:ff:02:01:
                    58:c6:a2:8d:60:95:b2:e1:1b:1a:3e:d7:7a:6d:dd:
                    14:b7:00:39:64:52:bf:95:ee:ea:6e:8c:5e:cf:d8:
                    65:b8:71:a3:28:20:d6:cf:4f:0e:16:e7:67:06:ec:
                    2a:6c:fc:c3:90:79:98:34:e7:ed:7d:a4:1a:98:ae:
                    31:2e:4c:08:99:06:54:d9:04:ad:87:a5:14:e7:c5:
                    3e:6e:8a:4c:00:1d:60:be:f4:c8:9e:a0:f3:ad:f5:
                    e4:2a:75:e1:5b:b2:0a:45:a0:6d:ab:90:e3:45:61:
                    b0:bd:d4:3b:18:0d:61:f2:56:0f:56:9d:ee:20:76:
                    f0:7f:ce:03:6d:c4:28:66:c2:e2:ba:c7:98:85:7b:
                    57:9a:ad:06:33:19:9b:a2:8c:23:78:ae:88:fa:a9:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:6C:5D:81:B0:FC:6B:E6:DD:D1:04:8C:E9:03:A2:9F:A3:E7:43
            X509v3 Authority Key Identifier:
                keyid:24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0e:d5:5b:cd:e7:32:57:13:c8:74:82:18:cc:48:4d:69:db:
         e4:a0:2b:a6:c2:6e:1c:22:df:84:ec:43:82:30:e9:b1:69:65:
         7f:37:a8:e4:8f:40:f8:d1:f0:df:c3:41:93:b5:11:46:37:49:
         1a:d6:3e:51:9b:52:45:da:0e:66:aa:62:22:4e:7a:4f:46:78:
         4f:a8:73:0f:ae:6a:75:65:36:0e:4e:ef:61:17:f2:ec:d5:39:
         ec:8d:7a:49:c4:f1:8a:6e:28:c2:e3:0f:ed:c7:b0:3a:d3:a2:
         88:1a:8f:03:cf:12:dd:84:c4:00:b6:78:b3:7e:38:34:01:a5:
         8c:4c:b1:c7:30:a4:27:2f:43:e2:67:c8:06:f9:34:6c:e6:a0:
         57:1e:32:a2:c8:f5:73:01:71:c0:a9:9f:e5:f2:da:99:52:71:
         17:bb:c4:1b:06:ba:1e:0d:5b:4c:26:bf:20:20:76:c5:75:f6:
         fc:05:d7:7a:f8:23:3e:f2:a7:be:07:58:35:b5:ed:bc:3c:ac:
         a5:ec:68:09:f8:4e:eb:af:42:23:bc:f5:05:fe:32:18:34:8d:
         ed:ad:7b:9f:b4:40:b7:b8:ed:22:6f:7b:57:42:33:cd:04:81:
         d9:5c:a8:c8:e1:21:8c:7c:fb:08:79:59:fb:f9:7c:62:64:21:
         2e:7b:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----