This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: TC/JTOn5HC6yFGl4ViSq9clx2x0tZE9+/Ah8mHjhWL8= Subject key identifier: D0:1B:1F:39:4C:20:43:14:28:8F:FB:CE:16:A9:23:8B:61:72:92:7F Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 09368E426697DD883A3C843743C39AF6E21BFC7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 93 Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Wed 10 Dec 2025 00:00:36 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: 9nyP7+JJv9dsQVSDnGOqt4X7mFIy70A6ElsR/8TWEnM=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 083EbNIPLx/FZlgKIk8j1vrc55JmKY8yDiaMatQXzSw=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: V4/qMeetoT9rDxBlCqFVWKbYJ2HocQF+vx8e89DoxCM=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 09 Dec 2025 19:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:36:8e:42:66:97:dd:88:3a:3c:84:37:43:c3:9a:f6:e2:1b:fc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 10 00:00:36 2025 GMT Subject: serialNumber=a3efc0f78bf45b965c4c72b9fb80c8ce2e147e4bfdee1a25c3b7d552ca17ba40, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:2d:76:4d:99:5a:9d:59:91:f3:cc:fe:6d: 5a:a6:91:77:cc:12:ab:43:77:be:2d:10:51:83:3d: 1d:c7:08:52:41:e9:ba:65:d6:9f:36:8e:09:bf:6a: d7:30:ab:64:b2:a7:5d:1a:5b:80:19:fd:d5:ef:94: 93:97:ba:cc:f4:12:82:71:ee:9e:c9:2d:2f:55:4d: d4:13:df:0e:c6:8b:20:a9:04:ee:3a:11:1d:eb:cd: 3d:34:78:f5:54:93:e0:18:8c:e8:e6:ef:c9:15:15: 98:b0:25:59:0a:00:b8:5f:1b:39:0b:96:a0:8a:4d: ac:36:06:16:5e:ae:50:d7:b1:8d:d6:86:8d:92:3e: 31:db:86:63:3c:aa:3a:5c:a3:c3:74:88:fe:6e:2a: 6e:ea:9c:13:0e:6d:0e:98:de:14:a5:53:f0:4c:16: cf:e7:dd:5b:de:c9:d4:db:e9:c7:8e:dc:c6:b2:69: 67:3f:2f:f9:e1:e2:e9:ab:ed:61:7b:44:34:a0:ab: 55:13:74:64:bf:7b:6e:a2:72:ff:b6:2a:13:fb:b0: 62:73:58:39:e5:a3:3d:40:5e:97:85:cb:68:fe:f2: 87:ab:de:39:55:46:bb:93:0b:c9:3c:67:9a:46:93: da:a2:7b:d7:23:f2:6e:b1:3a:27:d6:3b:78:16:3d: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1B:1F:39:4C:20:43:14:28:8F:FB:CE:16:A9:23:8B:61:72:92:7F X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:84:36:c6:bd:d3:72:3a:50:fc:24:16:b2:01:41:eb:15:ae: a1:bc:e3:a5:34:d5:f0:35:0d:13:6f:a3:8b:4b:30:aa:1d:b9: 3d:c1:9d:ca:13:ce:8a:e3:34:7c:52:8d:41:1b:a6:03:c3:5b: 70:a5:bb:15:05:40:ed:dd:3e:ca:ba:63:b6:19:92:1d:f6:25: 42:99:d3:e4:92:bf:b1:cd:26:01:bd:d9:d8:e0:ab:73:fe:f0: e0:d6:e1:3b:87:02:e3:b6:72:c5:e7:f3:a5:7e:e9:dc:f7:ea: 2f:06:18:51:08:5f:9a:81:a7:da:90:5d:27:42:6a:f9:68:aa: bc:cb:ba:04:91:52:62:5f:6b:b7:27:36:bf:54:a6:22:93:37: b1:00:7b:68:3d:b4:99:2a:60:0e:5e:41:33:8b:fb:9e:0d:fb: ad:37:b0:1c:88:f4:02:d7:6b:f2:ef:6b:97:15:19:0b:34:c0: 2e:c3:97:44:63:33:3b:66:95:09:27:77:fb:e0:a2:c7:cb:5b: 25:c4:f5:59:09:c2:a6:ec:c3:c8:c7:7d:43:9b:d5:e4:42:e0: 7c:1e:e8:db:8c:bd:2e:89:a5:7d:c3:64:cf:f7:bc:51:71:18: 5e:78:e7:b4:95:26:7f:5a:67:c2:24:64:a0:18:a9:94:5e:aa: 71:bb:d2:f2 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUCTaOQmaX3Yg6PIQ3Q8Oa9uIb/HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTEyMDYwMDAwMzZaFw0yNTEyMTAwMDAwMzZaMHoxSTBHBgNV BAUTQGEzZWZjMGY3OGJmNDViOTY1YzRjNzJiOWZiODBjOGNlMmUxNDdlNGJmZGVl MWEyNWMzYjdkNTUyY2ExN2JhNDAxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyQLXZNmVqdWZHzzP5tWqaRd8wSq0N3vi0QUYM9HccIUkHpumXWnzaOCb9q 1zCrZLKnXRpbgBn91e+Uk5e6zPQSgnHunsktL1VN1BPfDsaLIKkE7joRHevNPTR4 9VST4BiM6ObvyRUVmLAlWQoAuF8bOQuWoIpNrDYGFl6uUNexjdaGjZI+MduGYzyq Olyjw3SI/m4qbuqcEw5tDpjeFKVT8EwWz+fdW97J1Nvpx47cxrJpZz8v+eHi6avt YXtENKCrVRN0ZL97bqJy/7YqE/uwYnNYOeWjPUBel4XLaP7yh6veOVVGu5MLyTxn mkaT2qJ71yPybrE6J9Y7eBY9HsECAwEAAaOCAocwggKDMB0GA1UdDgQWBBTQGx85 TCBDFCiP+84WqSOLYXKSfzAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYQ2xr3TcjpQ/CQWsgFB6xWuobzjpTTV 8DUNE2+ji0swqh25PcGdyhPOiuM0fFKNQRumA8NbcKW7FQVA7d0+yrpjthmSHfYl QpnT5JK/sc0mAb3Z2OCrc/7w4NbhO4cC47ZyxefzpX7p3PfqLwYYUQhfmoGn2pBd J0Jq+WiqvMu6BJFSYl9rtyc2v1SmIpM3sQB7aD20mSpgDl5BM4v7ng37rTewHIj0 Atdr8u9rlxUZCzTALsOXRGMzO2aVCSd3++Cix8tbJcT1WQnCpuzDyMd9Q5vV5ELg fB7o24y9LomlfcNkz/e8UXEYXnjntJUmf1pnwiRkoBiplF6qcbvS8g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:17:12 2025 by rpki-client