This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
File:                     AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft (raw, json)
Hash identifier:          lqX1eeobz3XlUc9uoHjBq5x71yy/fRKLneZIaJQWZug=
Subject key identifier:   4A:20:22:0B:6A:25:F3:8B:8D:7B:B9:42:1C:76:71:BA:74:0F:47:7D
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       4AC195E7C80EBE2F4DD61B24279DE8F475675357
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
Manifest number:          0159
Signing time:             Sat 20 Dec 2025 14:48:05 +0000
Manifest this update:     Sat 20 Dec 2025 14:43:05 +0000
Manifest next update:     Wed 24 Dec 2025 18:13:05 +0000
Files and hashes:         1: 3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa (hash: CT5Hj5Y4kRNO5ZxKt1UlHIGeZSvonJwBCnJdnH69gAc=)
                          2: 3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa (hash: 9NP/qLXn94xeePSynUXEHf5lLCpdv3lTav9I8/hYi9g=)
                          3: 3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa (hash: uOHcKNXg5QJhaKC/+6pMfoV+Rm0Je7sIfFJVGMOaL9A=)
                          4: 3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa (hash: 2euAAzGz+0ZKL6NaVmZgZSK2mnR0wyCNhrKZOcrK7bM=)
                          5: 3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa (hash: D86Zi6VV+nBB/x3W83/Z27fVwfS5jBRLXipcCWEvREM=)
                          6: 3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa (hash: Fo0urELH1hdsqSIPunOplK/MHsj//tefkcuifoqECWE=)
                          7: 3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa (hash: GOUgeB9qbPsRESgmQKzHpbByuUIFItUpa5VvGphIk4U=)
                          8: 3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (hash: HA0gPdWmlQ8NT29R5jO2MUUeo21fkCMBVrbV80IO4Gs=)
                          9: AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl (hash: 20X14LMDdoi4UZkkjmDSorVIlm8s8hGo7LEkyNXRpqg=)
                          10: 3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa (hash: zjrkY5FH/PeUZG5AdMWZCLOjAvMkOl4ci/uEH8GqzEc=)
                          11: 3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa (hash: dUDEvYgqIStjcsBq3FTPdHt3r73uVqW2HXbPjP3qj9w=)
                          12: 3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa (hash: Cn7RbvHKERkpW2NPWoc4JvBzMa5n3N2bFGFH0TFJTX4=)
                          13: 3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa (hash: khexnd4MI2gNNwoPnPHS47zLooGn1gc3mrfeKvKfmzQ=)
                          14: 3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa (hash: Ypso3ys1PVwGgrCj3GTjYZuaUxaaL9woGSWtyKDdLW0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:95:e7:c8:0e:be:2f:4d:d6:1b:24:27:9d:e8:f4:75:67:53:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Dec 20 14:43:05 2025 GMT
            Not After : Dec 24 18:13:05 2025 GMT
        Subject: CN=4A20220B6A25F38B8D7BB9421C7671BA740F477D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:df:10:d7:5d:fa:4a:5c:23:1f:5f:fe:73:
                    44:db:46:c3:2b:4a:67:4d:20:41:4c:a3:85:30:9c:
                    7d:b9:37:34:56:c9:ba:55:e4:fb:ba:1a:95:ce:8d:
                    6a:18:04:c6:61:c4:8f:69:20:b1:95:83:51:55:3a:
                    ad:3e:bc:f1:cd:cb:c5:04:fd:bc:a3:91:63:d8:90:
                    a1:f0:41:07:55:40:ef:5d:b5:46:7d:53:65:43:93:
                    5f:9c:e5:c3:7e:8d:ba:37:db:40:ad:d1:32:76:2a:
                    4b:fb:94:62:b1:b2:d1:f4:d5:2f:fc:a7:ba:ad:37:
                    13:5b:5a:06:af:9b:03:89:64:af:bd:a8:88:4c:41:
                    76:05:6c:de:ab:62:8c:38:7a:73:02:29:65:15:dd:
                    f0:2f:b1:ec:a0:0f:f8:bd:96:3b:20:69:0e:0b:9c:
                    9a:9a:51:85:f2:23:d7:47:dd:80:8d:8e:33:67:de:
                    2e:4b:64:a3:64:f7:02:7e:d9:b7:a8:68:d3:ce:c4:
                    5a:ab:5d:ea:0e:dd:cf:1c:9b:0a:f7:7d:ff:84:5e:
                    f4:97:d5:de:92:be:ec:c6:d4:34:b9:b6:c3:04:57:
                    dc:5d:d3:23:24:21:87:00:f1:bc:0f:3c:d2:69:bc:
                    43:51:27:06:de:df:db:43:b0:38:18:e6:29:e1:31:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:20:22:0B:6A:25:F3:8B:8D:7B:B9:42:1C:76:71:BA:74:0F:47:7D
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:f8:43:42:e6:e9:5a:8d:bb:fa:e1:c0:52:33:8c:10:c6:
         ae:dd:0f:c1:8f:a2:41:3d:cd:b5:dd:d2:8a:2b:5f:89:a0:37:
         c7:a5:7d:af:c6:56:c2:f3:ba:cb:5f:02:72:cf:13:9c:ce:cd:
         45:c8:3a:a0:cc:41:e2:52:bb:9f:c1:9f:9d:d8:9b:1d:23:5a:
         3a:19:07:b7:6e:95:73:08:76:04:86:dd:0a:bc:ff:c1:28:b7:
         3d:c0:82:fa:5e:11:bc:be:e8:ce:b5:db:9a:a5:a8:83:62:c3:
         fe:20:f7:7a:00:d1:2a:39:6a:ee:3b:26:79:fb:a9:e0:18:ad:
         f9:07:7b:db:2e:b2:cf:8f:01:61:54:62:3b:83:71:5b:ef:b0:
         bf:dc:ad:30:ee:9e:86:4f:92:a0:8a:d8:b7:80:de:39:3b:0c:
         cb:5d:39:45:7b:0e:be:7b:ee:04:9d:ac:c4:13:c8:f2:e5:22:
         14:04:27:98:76:aa:09:b6:de:e2:2b:9d:cb:e9:e8:b9:b6:b7:
         e4:4f:01:67:7b:f6:ef:7a:9e:1f:a4:60:75:2c:eb:5a:07:65:
         19:b7:56:70:a3:a9:0d:b0:5a:e4:0f:48:51:55:91:01:23:0e:
         25:7b:bd:f2:df:d6:01:86:04:a8:8b:f8:69:19:95:bc:c8:bd:
         ec:9f:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:38:10 2025 by rpki-client