This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
File:                     D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft (raw, json)
Hash identifier:          HF1X1Qg7OUeUmU+fdsN0bXWYrgSV/KNINY6bDLRd/Co=
Subject key identifier:   78:4D:1A:85:0F:59:47:35:84:34:6D:5E:00:4F:DD:40:2D:8E:C2:6B
Authority key identifier: D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
Certificate issuer:       /CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Certificate serial:       28A8C31DFE565538A699FBE6441F36C482336637
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
Manifest number:          0149
Signing time:             Sun 21 Dec 2025 21:22:19 +0000
Manifest this update:     Sun 21 Dec 2025 21:17:19 +0000
Manifest next update:     Sat 27 Dec 2025 17:34:19 +0000
Files and hashes:         1: 3230312e3133312e33372e302f32342d3234203d3e20333936393938.roa (hash: f5Rml0E9jdDqwV7C0/Ky1IPfWHX3Bct3qRGk6mCdcM8=)
                          2: 3230312e3133312e33372e302f32342d3234203d3e203631343634.roa (hash: A6mvBNbhUVYSYMCIreo1GQjtn1/V/mnhXfoQTh/q1zo=)
                          3: D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl (hash: 8CThinWh5hsQ0ZHAjHGJpkHPZOfWPmpA9u6yYhLmb5o=)
                          4: 323830313a31363a613030303a3a2f34382d3438203d3e203631343634.roa (hash: 32OtE/feRWrHoGfE7Wy41Pcalkon0dCyNgIoJ/JHTdM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 02:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a8:c3:1d:fe:56:55:38:a6:99:fb:e6:44:1f:36:c4:82:33:66:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
        Validity
            Not Before: Dec 21 21:17:19 2025 GMT
            Not After : Dec 27 17:34:19 2025 GMT
        Subject: CN=784D1A850F59473584346D5E004FDD402D8EC26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:b8:e9:87:1c:9b:5d:82:ae:a9:1e:a3:b5:
                    d3:d7:7b:b7:88:5e:3a:05:48:b0:86:fb:73:e2:d1:
                    fc:24:72:a4:4a:90:ca:de:bd:76:4b:ff:66:a8:07:
                    1d:c8:e4:cf:88:e5:c1:9e:20:af:a6:21:45:63:a8:
                    1a:ba:1e:ab:2f:a0:06:72:c1:86:bf:e4:0c:d0:ab:
                    93:83:3b:31:79:a6:e9:29:c8:8d:bf:7b:6c:f2:46:
                    89:40:22:7d:c4:f0:86:83:24:ba:79:8b:f7:97:43:
                    6e:3a:19:e4:c9:48:85:ea:c7:5c:0c:cf:e9:f7:7d:
                    29:af:4d:17:9e:36:42:de:7f:c4:dc:c8:a1:b3:88:
                    2b:f8:dc:b1:2a:bc:34:69:69:51:72:de:23:59:38:
                    80:ba:19:0c:d3:4d:95:33:18:58:84:d4:96:cf:47:
                    a3:a9:0d:a9:22:d9:f2:bd:19:48:a8:51:49:19:04:
                    0a:6a:7c:d1:48:da:ba:75:0f:6c:c2:bb:7d:1e:77:
                    87:91:50:64:65:71:6c:aa:3d:32:35:d2:be:7a:b1:
                    38:58:f6:f7:d7:87:fc:96:87:eb:78:08:96:58:95:
                    ed:3d:76:5a:ff:7c:41:bb:72:4a:ac:1c:1e:73:6a:
                    5b:d3:d5:ab:2d:49:ea:79:d5:96:28:8a:84:ef:a5:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:1A:85:0F:59:47:35:84:34:6D:5E:00:4F:DD:40:2D:8E:C2:6B
            X509v3 Authority Key Identifier:
                keyid:D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:cf:ca:c5:38:1b:7b:dd:ea:c3:6c:43:69:39:58:5d:8c:
         90:a5:3f:1a:a0:00:e9:30:bb:81:68:0c:4f:bb:c1:61:4d:e1:
         19:40:a7:d1:9d:4e:aa:b2:7d:a9:69:2e:1d:11:dd:d2:89:3e:
         83:32:27:f1:dd:0f:e2:cf:8f:a0:98:a5:f2:13:71:7f:ad:66:
         4f:92:a5:04:65:d3:78:c4:db:fe:21:8a:22:56:ba:e7:94:f7:
         77:a5:dc:66:4f:12:ae:1b:2f:4c:84:df:d0:f3:43:5e:1a:99:
         83:f5:c7:9c:5e:c2:7c:35:2a:ff:2a:45:7f:2f:d7:4b:91:b1:
         41:4b:26:2c:0d:ac:85:f1:90:47:a4:ec:bd:fd:22:06:6b:ef:
         36:02:dd:fc:ce:39:f1:25:f0:fd:55:72:57:ee:b1:dd:fb:8b:
         e3:d3:96:a4:2c:d9:73:c9:b4:63:6a:fc:9d:7c:ad:42:d7:74:
         eb:13:9e:7a:ac:21:0a:ab:ea:cd:29:18:5d:5b:6b:32:ab:d7:
         a8:c5:8f:86:e3:94:ca:ee:c1:2f:41:46:36:28:07:12:3f:7b:
         c2:5b:fe:ee:e5:ac:2e:3c:07:1e:44:5e:16:55:16:37:92:dd:
         6e:88:24:57:34:91:9d:83:9e:52:13:8e:60:8e:79:b0:8b:48:
         7d:d7:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----