This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          cc9M+CrxD6YTtQBdPkFZUhGhimHpg8Pfm0Rf7XTNT7Q=
Subject key identifier:   AE:76:70:BC:87:0D:11:1D:85:22:6C:1C:F0:35:79:87:EA:0F:B1:D6
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       4977C70B5BB469723B617330EBB2E9ECFBECAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          0146
Signing time:             Thu 04 Dec 2025 17:29:03 +0000
Manifest this update:     Thu 04 Dec 2025 17:24:03 +0000
Manifest next update:     Wed 10 Dec 2025 11:52:03 +0000
Files and hashes:         1: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
                          2: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: l4Jx734awB6q++zt4yuuQs6QtfSrV51cP9wPz5GLhCQ=)
                          3: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: XPcqVZ/X24TRK+lkZvS0CoKe4/iNi2gSGFtC+tND4Yw=)
                          4: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
                          5: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 11:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:77:c7:0b:5b:b4:69:72:3b:61:73:30:eb:b2:e9:ec:fb:ec:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Dec  4 17:24:03 2025 GMT
            Not After : Dec 10 11:52:03 2025 GMT
        Subject: CN=AE7670BC870D111D85226C1CF0357987EA0FB1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:c3:16:c4:38:04:f2:1b:93:cb:9b:c1:0b:
                    79:10:80:30:eb:ae:f0:34:d2:0f:94:11:8f:77:b0:
                    e8:98:70:a3:29:7f:33:3a:fd:5b:66:72:64:e0:99:
                    eb:9b:95:60:35:e6:59:76:a2:68:7a:e8:9c:da:71:
                    75:a9:b1:cf:d3:76:99:0d:38:dc:93:62:dc:b6:c6:
                    2d:4a:82:91:ca:17:ac:53:fc:85:61:c7:74:95:f4:
                    5e:12:7f:7d:18:84:29:6d:42:15:48:bb:c1:c5:7f:
                    14:79:50:65:c7:ff:ce:40:2d:53:1c:f9:18:3d:fb:
                    bc:5c:67:30:4d:1c:bb:f8:6e:92:c7:0d:a2:ff:3b:
                    28:c3:1a:c5:b2:7f:fe:e4:6e:0d:85:58:cc:71:a2:
                    b2:42:98:9f:57:35:9a:e7:78:dd:5a:92:f0:4c:c9:
                    81:c5:ce:42:d3:ad:f4:b4:83:01:7b:3c:26:38:75:
                    5b:e8:bd:95:5c:52:e0:47:92:ca:db:fd:ee:22:27:
                    14:e0:2e:6d:60:46:d0:9d:a4:c8:95:43:5d:f5:13:
                    23:16:29:d3:eb:da:ec:7d:7f:e7:fe:49:02:46:36:
                    f9:8c:95:a3:62:7f:5d:c8:b0:fa:fb:11:a3:d0:5d:
                    7a:62:4f:02:b5:db:99:4d:9d:d6:f3:ea:9a:a6:2d:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:76:70:BC:87:0D:11:1D:85:22:6C:1C:F0:35:79:87:EA:0F:B1:D6
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:b0:11:90:a1:f5:d4:8e:4e:57:03:b4:fe:d5:98:78:9b:
         ad:b3:09:b3:23:48:da:06:98:30:77:98:19:33:7e:c7:7c:8f:
         f1:e0:52:78:8c:50:dc:85:02:56:94:82:f9:aa:4f:e0:e4:6a:
         ab:e7:22:8a:c4:49:25:74:ca:d4:1b:7f:f1:69:59:92:5c:c3:
         e3:c9:10:85:d1:8c:24:7f:8d:92:cf:73:1a:e2:30:86:b8:e3:
         71:1a:ce:4e:3e:2a:67:4b:7b:99:1f:e2:15:50:8d:6b:ab:e0:
         c6:39:0d:b7:17:1a:83:29:35:e7:d7:a0:78:e5:2b:03:e9:49:
         de:41:eb:10:51:ac:0d:df:de:01:7d:e4:61:cc:91:da:38:7e:
         7e:b1:9f:c9:b6:be:65:d7:2e:d6:8e:49:da:a7:5b:f4:01:cb:
         6e:45:63:94:72:1e:7d:16:2d:34:6d:62:2b:f6:73:fc:2b:e0:
         be:96:14:e6:bd:04:ef:63:b0:79:bf:2e:3e:37:d5:10:ef:f0:
         5b:6a:d8:66:76:c9:0d:1c:93:ed:2f:20:39:b8:fd:3e:1b:b6:
         f9:91:0d:e6:35:ec:d5:77:56:b2:ec:e7:82:51:0e:71:bf:18:
         98:77:42:f1:33:f9:04:f5:74:bc:d3:48:0f:af:b4:e0:f6:11:
         2c:d9:ba:36
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgITSXfHC1u0aXI7YXMw67Lp7PvsrDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDRUZGNTg1MDdBRjFBMDZBRUZEQTY3REQ4RDY1MTI1QzM2
NEE0REVDMB4XDTI1MTIwNDE3MjQwM1oXDTI1MTIxMDExNTIwM1owMzExMC8GA1UE
AxMoQUU3NjcwQkM4NzBEMTExRDg1MjI2QzFDRjAzNTc5ODdFQTBGQjFENjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJO0wxbEOATyG5PLm8ELeRCAMOuu
8DTSD5QRj3ew6Jhwoyl/Mzr9W2ZyZOCZ65uVYDXmWXaiaHronNpxdamxz9N2mQ04
3JNi3LbGLUqCkcoXrFP8hWHHdJX0XhJ/fRiEKW1CFUi7wcV/FHlQZcf/zkAtUxz5
GD37vFxnME0cu/hukscNov87KMMaxbJ//uRuDYVYzHGiskKYn1c1mud43VqS8EzJ
gcXOQtOt9LSDAXs8Jjh1W+i9lVxS4EeSytv97iInFOAubWBG0J2kyJVDXfUTIxYp
0+va7H1/5/5JAkY2+YyVo2J/Xciw+vsRo9BdemJPArXbmU2d1vPqmqYtBwkCAwEA
AaOCAtMwggLPMB0GA1UdDgQWBBSudnC8hw0RHYUibBzwNXmH6g+x1jAfBgNVHSME
GDAWgBTO/1hQevGgau/aZ92NZRJcNkpN7DAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljL0I1REM5NzY4RUEwQUFDRjQ2REM5MTFFODFEMEQ5RDA0OTky
N0QyNEFBQ0FGMDY4NUNCMzY3RDU0Q0VFMkJEOTUvMC9DRUZGNTg1MDdBRjFBMDZB
RUZEQTY3REQ4RDY1MTI1QzM2NEE0REVDLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0NFRkY1ODUwN0FGMUEwNkFFRkRB
NjdERDhENjUxMjVDMzY0QTRERUMuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI
KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5MjdEMjRBQUNB
RjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0RE
OEQ2NTEyNUMzNjRBNERFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAArpsBGQofXUjk5XA7T+1Zh4m62z
CbMjSNoGmDB3mBkzfsd8j/HgUniMUNyFAlaUgvmqT+DkaqvnIorESSV0ytQbf/Fp
WZJcw+PJEIXRjCR/jZLPcxriMIa443Eazk4+KmdLe5kf4hVQjWur4MY5DbcXGoMp
NefXoHjlKwPpSd5B6xBRrA3f3gF95GHMkdo4fn6xn8m2vmXXLtaOSdqnW/QBy25F
Y5RyHn0WLTRtYiv2c/wr4L6WFOa9BO9jsHm/Lj431RDv8Ftq2GZ2yQ0ck+0vIDm4
/T4btvmRDeY17NV3VrLs54JRDnG/GJh3QvEz+QT1dLzTSA+vtOD2ESzZujY=
-----END CERTIFICATE-----