This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft File: CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft (raw, json) Hash identifier: 6oSWdtXrN/4oZ9vJP2Jr5B9BEM3vV1wDVIw9u84ZCJw= Subject key identifier: 64:A2:E7:B4:E0:6F:C9:42:8D:4F:32:4C:16:72:2D:E5:C7:7F:02:70 Authority key identifier: CA:7B:F9:7A:5E:16:EE:FA:00:A5:E2:77:FF:4A:C5:AB:E3:08:6E:EF Certificate issuer: /CN=CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF Certificate serial: 37E6751FC3AE975551D81FC3DC069C287801A8FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft Manifest number: 38 Signing time: Sat 06 Dec 2025 02:22:29 +0000 Manifest this update: Sat 06 Dec 2025 02:17:29 +0000 Manifest next update: Thu 11 Dec 2025 15:15:29 +0000 Files and hashes: 1: 323830363a3434643a3a2f33322d3438203d3e20323732333330.roa (hash: XigWSFr7AAFm3F7T60/7ZLlycFdTx2hwLiIv5FBo7zM=) 2: CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl (hash: 1Lrv2EZS0FMiSII6QKA0QwYl1a0JlmUOcbM9L6ADfRg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 15:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e6:75:1f:c3:ae:97:55:51:d8:1f:c3:dc:06:9c:28:78:01:a8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF Validity Not Before: Dec 6 02:17:29 2025 GMT Not After : Dec 11 15:15:29 2025 GMT Subject: CN=64A2E7B4E06FC9428D4F324C16722DE5C77F0270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:5b:a8:73:ec:25:8e:d5:80:e0:99:25:dc: f1:fc:0f:02:f5:bb:73:93:b8:d7:53:b2:2e:1f:5e: 52:0c:52:6e:df:bb:a0:62:84:f1:b9:01:d8:b8:41: c6:02:1a:12:d0:4a:4f:6a:a8:7e:12:1a:62:1e:44: ee:7f:48:90:75:96:e4:13:c7:30:37:87:16:77:99: 8a:d5:4c:37:1c:94:5d:9e:d1:26:54:2c:d2:12:de: ce:c8:79:bc:1b:dc:1b:94:c4:d0:f8:06:59:5c:a6: 73:55:a2:41:6b:a7:19:ab:d0:21:c2:94:c9:34:f8: 11:b6:1a:2c:42:fb:14:25:d1:75:20:fb:ea:eb:9a: 85:39:b2:24:cc:88:d5:78:90:4b:99:9d:07:fe:65: d0:b3:6f:4f:99:04:73:3d:8b:c7:63:80:c4:07:dd: 86:f4:76:55:9b:85:ff:c2:84:08:7b:b2:30:7e:e7: 76:e7:eb:92:3b:27:40:78:98:0c:21:a5:1d:4f:1e: 85:e0:1e:ab:e0:d0:c4:af:2d:91:46:80:b1:ec:20: c8:98:07:c0:cb:49:a6:f1:a3:f0:78:12:8b:16:1a: e9:73:8f:ab:97:1a:ac:1f:2d:8e:1e:15:4c:9b:08: b7:42:24:2d:c6:b3:98:89:27:0a:f8:76:bc:31:c0: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:E7:B4:E0:6F:C9:42:8D:4F:32:4C:16:72:2D:E5:C7:7F:02:70 X509v3 Authority Key Identifier: keyid:CA:7B:F9:7A:5E:16:EE:FA:00:A5:E2:77:FF:4A:C5:AB:E3:08:6E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f9:c7:5d:07:3d:2a:0e:47:99:45:68:07:12:7a:16:43:14: 2f:be:38:3f:ed:bc:a5:70:bd:fb:c3:b3:01:d4:7f:d4:1f:c2: 81:b7:c4:9e:61:90:5d:b2:bd:2a:f5:8e:ce:d6:a8:53:0b:bf: 54:0c:bf:b8:10:d3:64:0d:82:88:d9:fe:1a:08:57:06:bc:0f: 4d:ac:87:74:0a:b3:a7:79:3c:a7:ad:3e:84:ce:31:4c:6a:67: 40:c8:30:5d:d7:7f:67:95:51:5c:23:75:3a:79:d5:89:33:4e: 80:6d:48:1f:4f:5d:51:73:b1:b5:8a:c9:e7:bf:5c:28:33:c5: dc:f1:dc:61:cf:4c:4c:8e:00:d9:31:38:a5:66:b0:3a:63:41: 66:e5:41:70:51:2b:62:da:96:be:6c:7a:29:5e:42:91:53:25: d8:bf:6d:85:41:41:e5:1c:20:2f:bc:19:bc:73:14:10:28:23: 1a:84:64:43:ba:27:77:1e:75:eb:dc:46:bf:9b:83:55:ce:ed: 50:23:35:66:08:10:18:d1:f1:bf:b0:54:7e:46:84:eb:1c:3d: 5f:ce:ec:fa:ea:79:34:b2:40:f9:0e:c3:25:c1:01:67:d1:3c: 55:46:06:73:d1:a1:07:24:7b:b0:54:97:b9:6f:00:1e:94:0c: f4:ea:d6:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN+Z1H8Oul1VR2B/D3AacKHgBqPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3QkY5N0E1RTE2RUVGQTAwQTVFMjc3RkY0QUM1QUJF MzA4NkVFRjAeFw0yNTEyMDYwMjE3MjlaFw0yNTEyMTExNTE1MjlaMDMxMTAvBgNV BAMTKDY0QTJFN0I0RTA2RkM5NDI4RDRGMzI0QzE2NzIyREU1Qzc3RjAyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlf1uoc+wljtWA4Jkl3PH8DwL1 u3OTuNdTsi4fXlIMUm7fu6BihPG5Adi4QcYCGhLQSk9qqH4SGmIeRO5/SJB1luQT xzA3hxZ3mYrVTDcclF2e0SZULNIS3s7Iebwb3BuUxND4BllcpnNVokFrpxmr0CHC lMk0+BG2GixC+xQl0XUg++rrmoU5siTMiNV4kEuZnQf+ZdCzb0+ZBHM9i8djgMQH 3Yb0dlWbhf/ChAh7sjB+53bn65I7J0B4mAwhpR1PHoXgHqvg0MSvLZFGgLHsIMiY B8DLSabxo/B4EosWGulzj6uXGqwfLY4eFUybCLdCJC3Gs5iJJwr4drwxwBH9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZKLntOBvyUKNTzJMFnIt5cd/AnAwHwYDVR0j BBgwFoAUynv5el4W7voApeJ3/0rFq+MIbu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOEQ4MTA2RUU3RjgzNkMzRjVERUYwNUVBREE0MTVENUVC NjBFMDQ3OUNFNkEwQzE1NUQwNTA2QzFFQzE2N0QzLzAvQ0E3QkY5N0E1RTE2RUVG QTAwQTVFMjc3RkY0QUM1QUJFMzA4NkVFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTdCRjk3QTVFMTZFRUZBMDBB NUUyNzdGRjRBQzVBQkUzMDg2RUVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzhEODEwNkVFN0Y4MzZDM0Y1REVGMDVFQURBNDE1RDVFQjYwRTA0NzlD RTZBMEMxNTVEMDUwNkMxRUMxNjdEMy8wL0NBN0JGOTdBNUUxNkVFRkEwMEE1RTI3 N0ZGNEFDNUFCRTMwODZFRUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6+cddBz0qDkeZRWgHEnoWQxQv vjg/7bylcL37w7MB1H/UH8KBt8SeYZBdsr0q9Y7O1qhTC79UDL+4ENNkDYKI2f4a CFcGvA9NrId0CrOneTynrT6EzjFMamdAyDBd139nlVFcI3U6edWJM06AbUgfT11R c7G1isnnv1woM8Xc8dxhz0xMjgDZMTilZrA6Y0Fm5UFwUSti2pa+bHopXkKRUyXY v22FQUHlHCAvvBm8cxQQKCMahGRDuid3HnXr3Ea/m4NVzu1QIzVmCBAY0fG/sFR+ RoTrHD1fzuz66nk0skD5DsMlwQFn0TxVRgZz0aEHJHuwVJe5bwAelAz06ta7 -----END CERTIFICATE-----Generated at Sun Dec 7 06:44:12 2025 by rpki-client