This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
File:                     402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft (raw, json)
Hash identifier:          BnAD1wgvG/w4K4KF8q6f5WUVrmGgWFoy0CKL3rpEtlk=
Subject key identifier:   24:1B:C1:7B:57:A1:2E:06:7D:CB:C9:B5:70:B5:49:3F:2D:C9:5A:CE
Authority key identifier: 40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Certificate issuer:       /CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
Certificate serial:       2BAB6C052CC4C51AC9271B6DE6C5D1EE68776E6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
Manifest number:          0144
Signing time:             Sat 20 Dec 2025 21:57:32 +0000
Manifest this update:     Sat 20 Dec 2025 21:52:32 +0000
Manifest next update:     Fri 26 Dec 2025 11:27:32 +0000
Files and hashes:         1: 323830333a3963303a3a2f34302d3438203d3e20323037303336.roa (hash: QoRysAPbDhFJfMwwzoq9/fHrGlBy9D3BN8nteb8Iga0=)
                          2: 323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa (hash: zVmdblhYU4O6+PV8Mdm4+BgY+hHIgZUQBxIAEHtNmNE=)
                          3: 402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl (hash: K18gnyf7EmBvRliYeiAY9lWZNM1hf98WsvwOhWQOAxM=)
                          4: 323830333a3963303a66653a3a2f34382d3438203d3e20323732303430.roa (hash: 97AlW0nWKVbq9bXHl7UcvK8azjrMJ3SUwhHlFnBSCJs=)
                          5: 34352e352e382e302f32322d3234203d3e20323635363935.roa (hash: aSIz3ZJn66Pv+7GxC3/MZK5m5xbuezDNojo8iqbolbk=)
                          6: 323830333a3963303a66633a3a2f34372d3438203d3e20323734303335.roa (hash: qMDU91UPOkI41s24Y28dDpFox4RSZu/4jAHjZpwEyQ0=)
                          7: 323830333a3963303a3a2f33322d3438203d3e20323635363935.roa (hash: 7wYewWcGTAj2pf4Ar6eocPYA7pKleO0qRf9wLWQAReo=)
                          8: 323830333a3963303a66663a3a2f34382d3438203d3e20323732303430.roa (hash: eyytQiqUHi0jud3VGBL5qNGOwGTs8WgZTzzc485XXOA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 11:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ab:6c:05:2c:c4:c5:1a:c9:27:1b:6d:e6:c5:d1:ee:68:77:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Validity
            Not Before: Dec 20 21:52:32 2025 GMT
            Not After : Dec 26 11:27:32 2025 GMT
        Subject: CN=241BC17B57A12E067DCBC9B570B5493F2DC95ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:01:8e:0f:e6:77:12:47:03:82:99:38:22:
                    d6:9e:68:e6:78:60:43:37:68:ea:95:99:a4:d0:90:
                    d6:5a:74:2f:a4:d2:35:5b:b8:4d:30:10:7f:72:38:
                    51:37:67:a1:c0:28:a4:78:72:e0:11:85:fa:2d:83:
                    d5:61:e4:d7:7e:0a:c0:ff:32:84:fa:40:2a:db:7a:
                    ec:55:9b:bd:4d:d6:fb:6f:fc:b9:08:a6:c4:a8:2a:
                    bc:c9:45:73:7f:3e:f6:2c:5a:d7:5b:1c:66:36:5f:
                    4c:53:73:75:13:ab:e0:2b:41:d9:e5:0d:d6:9e:9c:
                    e5:e3:96:45:ff:20:03:2d:bc:ea:74:c6:54:f2:ee:
                    fa:77:55:06:53:e6:ee:85:d8:c1:f6:3e:0a:6c:46:
                    ee:b0:07:6a:85:68:d4:5f:c7:0d:9f:ae:ca:d6:8e:
                    50:1d:6d:4e:61:13:d9:78:d8:58:7a:38:3c:57:ca:
                    48:5a:72:62:a5:e6:c9:db:e8:64:1f:4d:07:dd:2b:
                    a1:8e:87:58:6f:da:9c:91:5c:47:31:60:78:1e:20:
                    31:57:f4:f9:e1:82:7d:a1:e0:d6:35:d7:c0:41:6d:
                    1d:af:59:9c:17:c2:08:8b:3f:a5:fa:ac:2d:50:ad:
                    f4:a6:4c:09:79:88:c7:bb:6f:26:56:13:10:b2:7c:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:C1:7B:57:A1:2E:06:7D:CB:C9:B5:70:B5:49:3F:2D:C9:5A:CE
            X509v3 Authority Key Identifier:
                keyid:40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:83:23:87:8d:3a:87:57:2a:06:f2:a4:f9:dc:68:e1:7a:
         79:24:ac:a6:0c:eb:8f:c7:77:a0:70:20:19:34:3f:6d:1a:1a:
         1d:d1:49:71:71:6f:41:7d:75:d7:10:03:2d:b2:cb:49:14:40:
         b9:c3:85:67:2b:a4:3e:4e:08:f7:2c:bc:a0:04:88:6d:43:e9:
         86:45:6d:cb:16:f8:e3:51:06:e4:a0:36:36:6c:ca:32:3e:77:
         92:be:4e:a5:21:94:3d:43:92:da:10:87:0e:c7:78:d2:59:91:
         ac:0c:ff:bc:74:1c:e5:c8:28:b8:fe:5a:a8:30:1c:1f:5c:d7:
         0c:3f:2e:c3:b3:df:b0:fe:a8:49:9e:12:7c:8b:89:72:c5:69:
         3e:54:25:7a:c3:54:4b:5c:31:8b:73:47:3d:64:c4:10:6d:7a:
         3a:fc:45:b2:7c:64:67:c4:31:1d:10:3c:78:36:f9:6b:ee:b3:
         92:bc:09:63:bc:72:17:2a:ee:a2:06:9c:2f:1c:58:11:4f:40:
         3f:d5:7f:00:a0:d2:58:1f:e6:fb:2b:c3:16:b2:0d:db:20:43:
         2b:fd:a6:63:ea:6b:1d:83:93:4b:0f:25:41:c5:ed:7b:70:25:
         1b:eb:64:52:8a:25:fd:9c:42:35:b3:f6:d9:ed:89:14:c5:db:
         9b:bf:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:16:58 2025 by rpki-client