This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
File:                     28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft (raw, json)
Hash identifier:          KMk+3J5NNqJPwrYEakxFCnzCfFcyUK0YuZ5cdrwALhw=
Subject key identifier:   53:B4:37:C6:0D:78:DF:18:2C:23:F6:33:AC:48:20:CB:51:DF:71:D4
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       418D1597D8D4D2112CF1FCFA886D07B64D26B9BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
Manifest number:          0139
Signing time:             Sat 06 Dec 2025 17:10:59 +0000
Manifest this update:     Sat 06 Dec 2025 17:05:59 +0000
Manifest next update:     Thu 11 Dec 2025 00:02:59 +0000
Files and hashes:         1: 3139302e38332e382e302f32322d3332203d3e20323639393236.roa (hash: AurYXLpwzS6Y/EXqaVjoAY7RKYMGjJK1F7eqUolf1cA=)
                          2: 3139302e38332e392e302f32342d3332203d3e20323639393236.roa (hash: Kml8riKL9jYpwnNWTP51UEl8io682Zx/3LxvIZjzeFg=)
                          3: 3139302e38332e31312e302f32342d3332203d3e20323639393236.roa (hash: z8iZcukzxvSkgvzq6egLUaTU+8yHPykJenng2/6oz9c=)
                          4: 323830333a353265303a3a2f33322d313238203d3e20323639393236.roa (hash: Z2itUpq/HU7LnrWXIE79xnLMWsmUVUQSeVC6onRevds=)
                          5: 3139302e38332e382e302f32342d3332203d3e20323639393236.roa (hash: x3oeRQHvE2WLiYASSHfl3VCeV0KFQbcEcmmRsW842Ro=)
                          6: 3139302e38332e31302e302f32342d3332203d3e20323639393236.roa (hash: V5vvswLXZYG1cgPgu5Exz/5BCNv1bJjf/XmeWdLVquw=)
                          7: 28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl (hash: viunSD8heB+rMDhRKghuN/TzThKCcz9Z58OcIp34J88=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 00:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:15:97:d8:d4:d2:11:2c:f1:fc:fa:88:6d:07:b6:4d:26:b9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Dec  6 17:05:59 2025 GMT
            Not After : Dec 11 00:02:59 2025 GMT
        Subject: CN=53B437C60D78DF182C23F633AC4820CB51DF71D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:65:1c:14:cd:f9:fb:ee:8a:55:19:6a:74:
                    b4:8d:b9:a6:02:c6:92:62:ed:cf:b9:20:c2:7a:cb:
                    60:66:d0:5f:c7:84:6f:ef:bb:3f:50:ff:0c:76:b0:
                    cb:76:aa:a6:57:24:29:67:4d:02:f5:4e:aa:2d:3f:
                    9a:74:d7:8d:48:2f:f7:9c:5a:08:50:d7:3a:be:ee:
                    28:91:b5:d9:fe:a7:4d:ef:44:2e:ed:ed:70:c0:7e:
                    6e:45:05:69:d5:3f:e8:79:4a:42:1b:11:f5:e5:23:
                    8d:1f:38:71:f5:9d:71:0d:63:43:66:5d:d3:e1:3c:
                    26:69:93:ee:6f:c5:5d:dd:ba:c1:b3:b2:0a:30:e9:
                    54:58:ef:79:82:39:1c:7d:85:3b:52:1f:23:b7:14:
                    57:0c:87:74:d3:43:06:68:59:8c:33:72:69:80:07:
                    7c:5c:ca:13:2c:f6:a3:a6:2f:10:d1:30:15:1e:5e:
                    95:99:ff:dc:82:5f:de:fb:67:a5:2f:3d:2c:3a:8b:
                    0b:29:6f:93:28:ad:63:ba:48:3c:a1:f4:51:27:1f:
                    d6:c8:72:f7:79:7a:f3:f5:f6:7c:22:0b:04:fc:4b:
                    37:ca:49:43:51:63:d4:29:df:cf:c4:f2:7f:ae:98:
                    63:4a:98:af:d4:5f:99:a1:b0:35:bd:32:ea:f7:99:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B4:37:C6:0D:78:DF:18:2C:23:F6:33:AC:48:20:CB:51:DF:71:D4
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:43:f8:67:17:0e:61:03:ff:f6:b9:3d:2a:e4:a7:c8:77:ff:
         b7:13:53:f7:b6:67:2d:0f:c6:11:76:ae:98:af:0c:9f:0f:f0:
         c5:12:28:22:e0:31:15:f4:3b:aa:a6:28:9b:28:4d:f0:04:c1:
         a1:9a:0a:8e:9a:d7:c6:54:a9:4a:0a:f1:30:66:b6:31:85:1f:
         93:76:de:bb:17:48:88:7a:9e:35:cc:15:49:13:a0:5d:ae:93:
         49:fa:c8:ef:bc:1a:91:0f:ac:8d:7a:1c:3f:14:61:ad:f3:cd:
         17:c8:9c:2b:f9:15:a4:6b:52:4b:29:5b:65:92:41:5e:a6:17:
         df:f3:3f:7c:73:44:39:ac:f8:3f:a1:2a:6e:e6:3c:66:4f:0f:
         e0:36:f7:59:d8:46:7a:56:58:4f:17:c8:93:cc:b0:f8:a9:9e:
         6c:27:b6:7d:57:b8:7a:6c:3f:16:ce:a4:28:0e:b2:39:14:aa:
         84:ce:8a:5b:4d:b4:da:9b:1e:15:58:63:1c:86:f3:9b:9c:45:
         0b:74:c0:3e:05:a8:a0:52:3a:13:f9:c9:ca:18:41:be:be:e1:
         e1:a0:8d:3a:ed:8d:70:1a:7e:66:a3:28:43:6c:42:18:36:a2:
         84:be:cf:27:8b:f5:bb:00:38:3f:db:da:02:98:b4:02:49:9a:
         ba:9d:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:34:37 2025 by rpki-client