This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
File:                     30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft (raw, json)
Hash identifier:          ofQ0aesV2Q7ycHBB24+HDW/BFkDhTcR9BwFB46MtsJQ=
Subject key identifier:   7E:A9:F3:84:BD:4C:4F:2E:CA:8E:CE:96:44:6E:F9:CA:64:F9:9A:8B
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Certificate issuer:       /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial:       1814927F4A418A808452C6C9474457CB1B915646
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
Manifest number:          014C
Signing time:             Sun 28 Dec 2025 17:20:41 +0000
Manifest this update:     Sun 28 Dec 2025 17:15:41 +0000
Manifest next update:     Fri 02 Jan 2026 02:18:41 +0000
Files and hashes:         1: 34352e3233322e39362e302f32322d3234203d3e20323636373533.roa (hash: i4mTcsa9PfB2XUK9ciOX0wuhJDSWT4yXMpK+ildHeHw=)
                          2: 323830333a376232303a3a2f33322d3634203d3e20323636373533.roa (hash: fIhZthSeXfNTXsDCQE/laHD8KBLvWEsEx+9bwwivXJg=)
                          3: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl (hash: yn3OhviD7u3bCoVfsQdBpNTd8cIDmDDYPChvbcEZDNQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 02:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:14:92:7f:4a:41:8a:80:84:52:c6:c9:47:44:57:cb:1b:91:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
        Validity
            Not Before: Dec 28 17:15:41 2025 GMT
            Not After : Jan  2 02:18:41 2026 GMT
        Subject: CN=7EA9F384BD4C4F2ECA8ECE96446EF9CA64F99A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:37:f2:97:e2:3a:b0:9f:70:13:e8:d9:53:
                    5e:2f:17:2b:28:e6:85:f6:5e:ed:ef:50:c3:28:c0:
                    b0:ea:ae:0c:ea:30:36:91:cf:bb:c9:e5:af:18:a0:
                    c1:25:a8:a3:8b:59:4e:2a:b3:af:fe:77:cc:8c:53:
                    2c:ce:a1:d3:5a:65:64:08:a1:8c:84:ba:84:bc:b8:
                    f1:f5:77:8c:9c:26:83:0d:2d:6a:21:68:4c:90:27:
                    e7:e1:55:de:8e:23:05:55:e6:4c:cb:4d:b6:2b:a2:
                    0c:7e:4c:80:12:8a:0f:69:ac:12:7b:52:8f:4c:85:
                    c8:2d:1d:bb:01:17:b3:d5:bc:a8:e0:b2:f5:36:62:
                    34:ff:a6:2b:95:d4:b5:22:d4:96:1d:c6:17:50:64:
                    ee:60:00:60:c9:4b:d8:b9:24:81:55:f8:dc:7b:03:
                    da:db:f1:7f:dc:a2:2f:1d:66:e1:e1:a1:d3:bf:04:
                    71:3e:23:c4:dd:92:7c:ea:58:cc:56:7e:f3:09:5b:
                    49:77:ab:7b:67:f6:9f:5f:03:f1:58:a7:9b:95:52:
                    e3:02:17:5e:81:9d:cb:46:0d:a6:eb:88:e6:09:17:
                    83:7a:8b:6c:93:f5:1d:fc:00:86:32:c8:13:07:8e:
                    10:3d:ae:7d:9a:0d:5a:23:dd:15:b9:08:de:ed:78:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:F3:84:BD:4C:4F:2E:CA:8E:CE:96:44:6E:F9:CA:64:F9:9A:8B
            X509v3 Authority Key Identifier:
                keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:35:e6:20:69:76:d7:fa:95:97:80:8b:50:d4:5c:cd:89:
         8e:dd:3b:60:23:19:06:5d:33:3a:d5:a8:e1:b4:75:6b:a2:c4:
         72:c9:55:2f:79:3d:66:b5:81:6c:ac:35:95:a8:de:e2:03:5b:
         49:4b:d7:cb:cf:aa:16:05:46:89:16:18:35:21:10:8c:55:54:
         9c:9f:46:86:14:63:67:ad:10:39:65:bd:c0:bc:cc:27:79:24:
         46:ff:09:df:fd:ad:4b:9a:c8:61:11:68:41:fa:5b:c6:4a:1b:
         7d:62:38:9a:bb:a7:ad:74:c0:aa:20:36:5d:c1:33:33:b3:09:
         ee:68:66:fb:5d:82:0f:22:96:38:92:da:d1:c0:05:13:9d:4f:
         62:9d:db:03:5a:87:a4:99:5d:91:3e:36:05:aa:f9:69:0a:b1:
         99:13:af:7a:c6:55:0d:61:8a:37:c9:c2:2c:3a:2d:01:3d:50:
         43:88:ed:7c:fe:40:c7:76:2b:23:16:b8:59:44:3e:30:54:35:
         d9:f5:15:a4:8b:af:5d:12:08:31:8b:ae:c8:42:38:bd:6e:66:
         f5:de:9d:88:cb:ac:ff:21:df:d9:b8:66:65:13:30:c3:a5:b0:
         e4:79:56:7a:c4:39:2f:66:c8:c3:05:c3:bd:8e:11:dd:66:a6:
         47:85:c0:a7
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGBSSf0pBioCEUsbJR0RXyxuRVkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCODlDNUFFODVBNDg2RTQ1MUE5QTA0NTQwREJEQTQ1
RDUyQTVENTAeFw0yNTEyMjgxNzE1NDFaFw0yNjAxMDIwMjE4NDFaMDMxMTAvBgNV
BAMTKDdFQTlGMzg0QkQ0QzRGMkVDQThFQ0U5NjQ0NkVGOUNBNjRGOTlBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgzfyl+I6sJ9wE+jZU14vFyso
5oX2Xu3vUMMowLDqrgzqMDaRz7vJ5a8YoMElqKOLWU4qs6/+d8yMUyzOodNaZWQI
oYyEuoS8uPH1d4ycJoMNLWohaEyQJ+fhVd6OIwVV5kzLTbYrogx+TIASig9prBJ7
Uo9MhcgtHbsBF7PVvKjgsvU2YjT/piuV1LUi1JYdxhdQZO5gAGDJS9i5JIFV+Nx7
A9rb8X/coi8dZuHhodO/BHE+I8TdknzqWMxWfvMJW0l3q3tn9p9fA/FYp5uVUuMC
F16BnctGDabriOYJF4N6i2yT9R38AIYyyBMHjhA9rn2aDVoj3RW5CN7teJUBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUfqnzhL1MTy7Kjs6WRG75ymT5moswHwYDVR0j
BBgwFoAUMLicWuhaSG5FGpoEVA29pF1SpdUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTRCRUQyN0Q0NzQwRTE0RTk3QzI0MUI1QzlEODlDMDQ0
OEI2OTM0N0I0NTY4QTYwM0RGRkQ1QjVGNzJBNjc3LzAvMzBCODlDNUFFODVBNDg2
RTQ1MUE5QTA0NTQwREJEQTQ1RDUyQTVENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEI4OUM1QUU4NUE0ODZFNDUx
QTlBMDQ1NDBEQkRBNDVENTJBNUQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUE0QkVEMjdENDc0MEUxNEU5N0MyNDFCNUM5RDg5QzA0NDhCNjkzNDdC
NDU2OEE2MDNERkZENUI1RjcyQTY3Ny8wLzMwQjg5QzVBRTg1QTQ4NkU0NTFBOUEw
NDU0MERCREE0NUQ1MkE1RDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiTzXmIGl21/qVl4CLUNRczYmO
3TtgIxkGXTM61ajhtHVrosRyyVUveT1mtYFsrDWVqN7iA1tJS9fLz6oWBUaJFhg1
IRCMVVScn0aGFGNnrRA5Zb3AvMwneSRG/wnf/a1LmshhEWhB+lvGSht9Yjiau6et
dMCqIDZdwTMzswnuaGb7XYIPIpY4ktrRwAUTnU9indsDWoekmV2RPjYFqvlpCrGZ
E696xlUNYYo3ycIsOi0BPVBDiO18/kDHdisjFrhZRD4wVDXZ9RWki69dEggxi67I
Qji9bmb13p2Iy6z/Id/ZuGZlEzDDpbDkeVZ6xDkvZsjDBcO9jhHdZqZHhcCn
-----END CERTIFICATE-----