This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
File:                     4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json)
Hash identifier:          oyDhJ5poEccn1kdbVd2qHzJ1KSW7z64L9+LpDaow0XU=
Subject key identifier:   DD:34:41:D8:61:0D:78:1F:BF:14:86:CB:97:79:C3:13:CC:84:0F:2F
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       179D63EEB6651EA370D020083AF0D00C036E9725
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
Manifest number:          014A
Signing time:             Sun 07 Dec 2025 02:00:56 +0000
Manifest this update:     Sun 07 Dec 2025 01:55:56 +0000
Manifest next update:     Fri 12 Dec 2025 08:35:56 +0000
Files and hashes:         1: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=)
                          2: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=)
                          3: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: 8KD7x6p8I5Mh1vJo1mHpNfz3nv0iLV+Ryt4Iui8T1HY=)
                          4: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=)
                          5: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:63:ee:b6:65:1e:a3:70:d0:20:08:3a:f0:d0:0c:03:6e:97:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Dec  7 01:55:56 2025 GMT
            Not After : Dec 12 08:35:56 2025 GMT
        Subject: CN=DD3441D8610D781FBF1486CB9779C313CC840F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:91:ba:b1:79:a6:26:f7:aa:f3:4c:e4:54:
                    b4:5b:e5:fd:1b:53:9e:80:66:b7:d3:7a:e7:10:e8:
                    e0:43:1c:16:68:08:f2:f1:43:58:b0:08:fd:9d:be:
                    08:5e:b5:76:d4:3d:89:72:d0:62:08:85:0f:40:52:
                    6c:fa:7c:9f:0e:9e:81:c9:0b:5c:3c:59:04:41:54:
                    8f:2e:28:d6:bd:ff:ff:18:58:3d:53:bd:23:61:c6:
                    70:f7:5c:f7:eb:64:bd:69:e2:08:7d:55:9a:a6:35:
                    1e:b3:1e:23:6d:f9:3c:74:0b:e1:10:78:2b:c6:1b:
                    98:a7:27:c9:c2:5e:48:59:c0:4a:1f:77:79:09:76:
                    e4:76:47:9f:fd:a2:20:f2:ad:c4:73:1f:cf:39:3e:
                    fc:16:bc:73:ae:ec:be:db:ff:b3:cd:fd:19:1b:51:
                    73:60:6b:2b:c0:32:f7:24:17:58:eb:67:e8:27:39:
                    d2:cf:d9:0e:97:a7:b6:cf:f8:82:bf:c1:ac:47:8d:
                    ec:90:12:50:f0:50:b4:c1:72:45:36:74:02:fb:de:
                    19:d4:7e:0b:a3:32:25:9d:51:ee:09:09:40:c3:32:
                    5d:e8:83:d2:dd:89:93:45:d2:43:82:e0:24:d0:88:
                    5a:1e:e4:2f:f1:e7:5e:84:80:0c:6c:cc:21:bc:9f:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:41:D8:61:0D:78:1F:BF:14:86:CB:97:79:C3:13:CC:84:0F:2F
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:86:95:36:91:6f:1f:58:b1:76:35:c9:10:b4:5b:f1:dc:3b:
         60:8b:9f:93:8e:6a:dd:1b:e1:e4:8a:65:56:95:40:6b:47:a9:
         42:f1:95:c1:8c:56:de:07:07:7f:41:54:87:2b:0f:6c:b9:0d:
         0d:58:56:4c:81:3a:6a:76:f4:98:b6:bf:73:2b:61:af:35:ae:
         60:ae:b1:11:77:35:dc:f8:b9:fd:8e:c1:89:1d:e7:f6:96:ac:
         fd:3f:2e:7e:f8:ec:64:22:ca:71:5f:b6:36:51:87:65:f4:91:
         b7:9b:54:36:13:1b:72:33:17:a9:6a:23:7a:e4:81:21:0e:02:
         b3:ca:c3:ea:60:f1:8b:8d:cd:17:4a:cf:c9:f7:b3:bd:9e:5e:
         3c:5e:39:e0:ee:7f:47:dc:a3:20:8e:e7:97:25:d7:20:d8:3a:
         d8:59:80:48:23:20:cb:db:d4:d2:2b:74:e0:cc:7f:05:54:ed:
         5f:c2:8c:aa:73:03:fe:81:79:40:f7:d2:61:95:bc:ad:0e:7e:
         32:83:7e:fa:92:f5:01:dc:61:d5:18:19:c2:8a:40:b7:de:b9:
         70:2a:fe:1b:0f:32:0d:70:b6:c4:90:de:f6:23:ec:09:26:b5:
         d3:c5:d9:e7:1a:e3:2f:e9:2c:a5:22:44:21:69:26:64:5f:28:
         20:5e:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----