This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
File:                     8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft (raw, json)
Hash identifier:          4oSoLM8i+Pw37nNjszwM9ca9RCGIsIWpkC2wfaDt2Lw=
Subject key identifier:   44:E8:14:F6:A0:5A:2D:93:D2:89:F1:F3:9F:AE:E3:F0:03:05:33:4E
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       0EE3675404FEFDBC78DD3998CFD8CD82595229A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
Manifest number:          0149
Signing time:             Fri 05 Dec 2025 22:45:37 +0000
Manifest this update:     Fri 05 Dec 2025 22:40:37 +0000
Manifest next update:     Thu 11 Dec 2025 12:16:37 +0000
Files and hashes:         1: 323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa (hash: RLESdOQbC9BxE8DKXmwjJPjKIS7EeuAPSTMMWAM/SRs=)
                          2: 34352e3232392e3234372e302f32342d3234203d3e203237393031.roa (hash: Jp2WBtRqZzTYkTyTx/f7noZ8XoV8iDrnudRxl96JhhY=)
                          3: 34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa (hash: jemKRG8iZNsVYKaY8qxvKHvAyBw7PsIUmklgmrOVPMo=)
                          4: 34352e3232392e3234372e302f32342d3234203d3e2036343731.roa (hash: 7MNz6ZQRUApPlL3vGmUgQ0EbVdigBXYWoWSmyMVAczA=)
                          5: 8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl (hash: ZpmIXGy8TLK2zH5mNdUlV9hazXYJuxgcXdM6ocL9O4Q=)
                          6: 34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa (hash: xhMa/0XQbaXYDntWXZVrzgy/P5ScIed9/zhAvMn/cZg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e3:67:54:04:fe:fd:bc:78:dd:39:98:cf:d8:cd:82:59:52:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Dec  5 22:40:37 2025 GMT
            Not After : Dec 11 12:16:37 2025 GMT
        Subject: CN=44E814F6A05A2D93D289F1F39FAEE3F00305334E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:c4:04:c7:17:fc:b6:80:71:5b:49:03:a8:
                    81:54:20:c1:66:63:d5:b8:85:53:2c:16:b2:34:61:
                    55:91:a9:e6:7e:95:bc:32:20:77:fa:87:f0:ae:d3:
                    73:79:b3:04:0b:36:5c:5c:cc:68:fc:81:f1:4c:86:
                    69:81:1f:f6:0e:ca:e0:cc:eb:e4:cd:12:53:a8:ed:
                    30:a6:01:e7:99:35:fe:4d:2e:ee:48:e5:07:f0:ae:
                    56:94:f3:f4:09:99:d3:58:e5:24:59:63:96:48:ee:
                    91:7e:6d:4e:94:b8:0f:4c:88:cb:c6:ef:26:e8:f6:
                    4a:a3:81:c7:3c:4c:b3:2a:5c:5f:32:59:51:64:26:
                    31:62:e4:e9:60:69:4b:9d:48:bb:fd:65:43:c3:46:
                    f1:66:11:ae:09:27:ad:d5:8b:c9:e6:d8:f8:77:a1:
                    6a:a3:8a:91:b6:62:7a:da:97:c7:1f:12:fe:23:44:
                    e3:c8:bb:8b:d3:86:29:3a:69:f2:d9:4b:60:3a:5f:
                    a8:f3:8a:13:53:67:e0:aa:ac:d3:60:72:8d:8d:e4:
                    04:be:8f:9d:7a:4c:2b:74:a2:4d:63:10:66:d4:94:
                    05:7a:be:27:de:d7:97:5c:f2:9f:1d:fd:0d:a3:74:
                    c4:6e:14:15:b1:17:72:30:d7:92:90:4f:56:a5:08:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:14:F6:A0:5A:2D:93:D2:89:F1:F3:9F:AE:E3:F0:03:05:33:4E
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:90:a0:04:fd:95:9a:d3:b7:53:4a:2e:90:6b:31:1a:40:
         6b:30:af:25:6d:36:40:64:a7:33:69:84:e6:d3:b7:52:e1:43:
         4c:aa:de:ef:d8:33:3e:1a:36:f8:47:51:7a:68:5d:61:82:3b:
         58:f0:74:48:68:7c:28:01:40:2b:a2:28:5e:a5:4b:56:33:ad:
         0e:93:da:9b:5e:a4:a3:b3:a9:bf:8f:d6:b1:b4:11:7c:e5:3b:
         32:65:62:3d:69:e0:55:21:6f:2c:b7:ae:03:10:92:5f:3f:88:
         95:17:9d:42:76:6b:b5:71:b7:e1:77:4b:bd:af:16:e0:30:08:
         f5:e1:39:04:df:0a:c8:8f:a4:7e:9c:e0:2e:b0:b6:37:ac:3d:
         b1:94:b7:4d:c9:cc:14:dd:28:6f:a1:06:3a:e7:e4:82:7d:66:
         59:0a:bd:d4:83:b6:49:d8:bd:3a:b0:0a:6c:c9:8c:28:f7:aa:
         1c:c3:2b:4b:20:74:df:91:38:a9:f3:2d:a6:ec:48:cc:26:09:
         38:00:f2:e6:0f:f3:e2:a4:7e:71:a7:df:41:72:ae:e8:69:5b:
         14:59:53:29:11:f4:2f:c5:4c:06:64:e7:95:ed:fd:d0:28:57:
         e1:82:45:7f:f1:a9:0b:c3:ec:83:7d:ed:64:d5:b8:bf:70:bd:
         f9:6f:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:07:48 2025 by rpki-client