This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
File:                     15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft (raw, json)
Hash identifier:          mg8JW36kmOfGZ1gAgDIcW5eTzBKIH+bWYbYjkjcyZF8=
Subject key identifier:   CA:EB:74:B2:F5:D0:77:31:0E:FE:2D:AF:2A:17:AC:2D:EC:FE:96:30
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       36502295D9BE9A472CBBAF319FB5826BD6172EEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
Manifest number:          0145
Signing time:             Fri 05 Dec 2025 23:10:50 +0000
Manifest this update:     Fri 05 Dec 2025 23:05:50 +0000
Manifest next update:     Thu 11 Dec 2025 15:06:50 +0000
Files and hashes:         1: 3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa (hash: CDp5xaoU/q63GdwIRwvuw878zSd4OZanMReypV96lx4=)
                          2: 3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa (hash: ILaibNP0M8ygvh7u0AXH8DwmpeZoTENxQYmShQFjbtg=)
                          3: 3136382e3233322e3235302e302f32342d3234203d3e20323634373031.roa (hash: S0PSp6oJeLBIqJ/O6ANoycmGBygWIxodD+Fz7Wi85RQ=)
                          4: 3136382e3233322e3234382e302f32322d3234203d3e20323634373031.roa (hash: sckT/cWtg7GnonUshx1cAcy6wbQenewCd7CKz7EGKYM=)
                          5: 15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl (hash: BmK6S3+KjK5xybtG5IPs3curJJhW5B9XS5tIuzQcMmM=)
                          6: 3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa (hash: CrTsjJUvfjkKT3RKwgt99A95otnJfYjwByi5+B0d+o4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:50:22:95:d9:be:9a:47:2c:bb:af:31:9f:b5:82:6b:d6:17:2e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Dec  5 23:05:50 2025 GMT
            Not After : Dec 11 15:06:50 2025 GMT
        Subject: CN=CAEB74B2F5D077310EFE2DAF2A17AC2DECFE9630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:47:a4:d1:23:88:51:13:f3:9b:ca:71:ae:
                    e8:56:e8:cc:d5:df:ec:13:79:b1:a3:b1:45:26:6c:
                    71:73:8a:93:d8:57:af:a7:58:74:4c:9e:2a:4b:78:
                    c5:8d:83:a9:52:30:a4:de:1b:ac:24:20:6f:27:25:
                    16:e2:c8:5c:5b:93:64:4c:47:a5:12:ad:2f:e8:50:
                    f7:86:89:b0:0a:30:5c:4c:22:3c:07:4e:1f:6d:5a:
                    43:e5:30:d9:f1:a2:a0:6e:54:69:19:cf:1b:76:6c:
                    7a:a7:aa:64:cc:dd:ff:00:e0:6f:23:5e:24:4e:59:
                    a0:65:e8:f1:8f:65:fe:57:c2:5e:41:da:97:81:d5:
                    ba:e3:a7:f8:d8:44:4e:a8:4d:e3:32:d8:fd:bb:fe:
                    ae:ab:b9:9c:5e:9c:55:55:3a:8c:65:85:5c:91:99:
                    fe:38:7c:e6:02:45:8c:2e:49:c2:82:7f:53:a0:96:
                    8d:81:d6:b0:d4:1c:91:b6:11:63:b7:d1:c6:3e:18:
                    37:97:44:57:3e:2f:e8:31:d5:fd:6c:d4:b4:93:7a:
                    58:7c:60:c3:86:a9:ca:13:be:70:84:e7:a8:a0:cd:
                    44:ca:7d:0b:ef:2f:40:37:28:1f:4a:e6:62:65:72:
                    cc:0d:6b:49:5e:dc:09:ba:f4:67:88:39:86:61:d9:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:74:B2:F5:D0:77:31:0E:FE:2D:AF:2A:17:AC:2D:EC:FE:96:30
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:d5:a5:31:9a:21:81:94:c9:44:e5:5a:3c:07:ed:f4:7a:
         98:54:e2:95:9a:f0:f0:d9:ce:48:93:15:66:4f:58:43:a7:e2:
         b4:23:32:df:c6:20:ca:14:7e:43:ba:b0:18:bf:9a:d0:a7:11:
         92:9b:4e:71:43:b3:1d:db:c5:b6:97:2f:e3:a2:6e:af:70:d9:
         e2:81:48:e9:cc:a0:40:c4:34:b3:4b:7e:b8:2c:0a:5d:6c:d6:
         e3:eb:30:26:2b:8d:8d:7b:57:3c:9f:e1:43:3a:27:b9:4a:0d:
         09:c9:5c:96:b9:bf:58:25:05:65:78:d3:e2:5c:e4:3e:68:54:
         df:f3:f1:ad:3b:3d:11:26:51:1f:3c:77:f4:a5:f0:7d:ce:7b:
         eb:2a:cc:98:91:72:87:65:20:cf:2f:e0:0a:b3:81:82:b9:b8:
         5c:40:10:d5:4e:f5:3e:9d:27:88:5d:a3:d6:b7:99:fa:17:bd:
         d5:9b:4e:52:8c:85:66:0c:72:37:69:5f:ef:bc:88:27:06:90:
         21:96:f4:9d:c9:8b:81:c7:10:f6:bd:83:bd:ae:e0:6d:da:99:
         9f:e5:07:65:09:e3:45:3d:f7:31:70:85:8c:06:c9:77:3b:be:
         e6:88:45:39:33:4e:81:66:e3:11:8f:c6:44:d2:d8:cd:f8:78:
         8b:5a:10:0d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNlAildm+mkcsu68xn7WCa9YXLuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVDMzQ0OTI5M0FFOTFCNjUyNDRFODlBMUI0QUVFQzdE
QzAxOTM1RDAeFw0yNTEyMDUyMzA1NTBaFw0yNTEyMTExNTA2NTBaMDMxMTAvBgNV
BAMTKENBRUI3NEIyRjVEMDc3MzEwRUZFMkRBRjJBMTdBQzJERUNGRTk2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCEek0SOIURPzm8pxruhW6MzV
3+wTebGjsUUmbHFzipPYV6+nWHRMnipLeMWNg6lSMKTeG6wkIG8nJRbiyFxbk2RM
R6USrS/oUPeGibAKMFxMIjwHTh9tWkPlMNnxoqBuVGkZzxt2bHqnqmTM3f8A4G8j
XiROWaBl6PGPZf5Xwl5B2peB1brjp/jYRE6oTeMy2P27/q6ruZxenFVVOoxlhVyR
mf44fOYCRYwuScKCf1Oglo2B1rDUHJG2EWO30cY+GDeXRFc+L+gx1f1s1LSTelh8
YMOGqcoTvnCE56igzUTKfQvvL0A3KB9K5mJlcswNa0le3Am69GeIOYZh2Z/RAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyut0svXQdzEO/i2vKhesLez+ljAwHwYDVR0j
BBgwFoAUFcNEkpOukbZSROiaG0rux9wBk10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjEyOTA3RTAyN0FGNDBFMUM2REI2NDFFNUE2MjgwM0U4
MzQwODNGMTdFNTE3NUY0QzlFNENFMEZDMDNDRDU0LzAvMTVDMzQ0OTI5M0FFOTFC
NjUyNDRFODlBMUI0QUVFQzdEQzAxOTM1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUMzNDQ5MjkzQUU5MUI2NTI0
NEU4OUExQjRBRUVDN0RDMDE5MzVELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREIxMjkwN0UwMjdBRjQwRTFDNkRCNjQxRTVBNjI4MDNFODM0MDgzRjE3
RTUxNzVGNEM5RTRDRTBGQzAzQ0Q1NC8wLzE1QzM0NDkyOTNBRTkxQjY1MjQ0RTg5
QTFCNEFFRUM3REMwMTkzNUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU69WlMZohgZTJROVaPAft9HqY
VOKVmvDw2c5IkxVmT1hDp+K0IzLfxiDKFH5DurAYv5rQpxGSm05xQ7Md28W2ly/j
om6vcNnigUjpzKBAxDSzS364LApdbNbj6zAmK42Ne1c8n+FDOie5Sg0JyVyWub9Y
JQVleNPiXOQ+aFTf8/GtOz0RJlEfPHf0pfB9znvrKsyYkXKHZSDPL+AKs4GCubhc
QBDVTvU+nSeIXaPWt5n6F73Vm05SjIVmDHI3aV/vvIgnBpAhlvSdyYuBxxD2vYO9
ruBt2pmf5QdlCeNFPfcxcIWMBsl3O77miEU5M06BZuMRj8ZE0tjN+HiLWhAN
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:32:24 2025 by rpki-client