This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
File:                     BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft (raw, json)
Hash identifier:          5sECLSfmvdOWsBXiPT8ORU4W0khDx3Ez5Hc6RjK7zG4=
Subject key identifier:   D8:54:70:99:4E:07:B1:AB:84:36:E4:88:CE:17:23:83:89:6B:05:11
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       11819B8D059A35FC072385D51225874D5CDBB97A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
Manifest number:          0149
Signing time:             Thu 18 Dec 2025 22:57:50 +0000
Manifest this update:     Thu 18 Dec 2025 22:52:50 +0000
Manifest next update:     Wed 24 Dec 2025 16:24:50 +0000
Files and hashes:         1: BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl (hash: glGBMJ866YS1Kqjo4lZfN0XatuJ3KvKGh4268HnKR8s=)
                          2: 3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (hash: e7+CXpay+EWuoUgmXjhSxAKj4Dqkj4EKhInAk5DTdHg=)
                          3: 3133382e3138352e33302e302f32342d3234203d3e20323633383137.roa (hash: VmZKYpVcWB4Fvp1ftaTOVK8V7OgOeViush1FUlGxR5k=)
                          4: 3133382e3138352e33312e302f32342d3234203d3e20323633383137.roa (hash: SmkpiIg0zZyBAsQ+if+UTKOc0IkT7mpHDaNOQdLljRM=)
                          5: 323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (hash: XWNi85D6pU10hEJTHjZn+WiGf73bs2QkJLnS19kOcn0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:81:9b:8d:05:9a:35:fc:07:23:85:d5:12:25:87:4d:5c:db:b9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Dec 18 22:52:50 2025 GMT
            Not After : Dec 24 16:24:50 2025 GMT
        Subject: CN=D85470994E07B1AB8436E488CE172383896B0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:66:c1:1d:17:5b:2a:0f:49:de:46:06:7f:
                    e3:4d:d2:c0:61:4f:7f:99:d1:8d:65:f3:c0:37:70:
                    f9:ce:ec:6f:87:54:27:2f:be:6d:77:bd:f6:50:2c:
                    6d:6a:a9:87:d5:72:d0:82:a2:32:c4:56:51:3e:68:
                    2b:56:63:57:a2:51:b7:4f:69:de:37:3d:32:b2:e4:
                    b6:eb:40:bb:ef:29:5f:bd:0f:96:e8:7d:81:eb:ce:
                    de:43:df:5b:8e:45:f7:b4:53:a1:a3:66:ee:7c:32:
                    20:a4:51:e0:5d:21:bb:90:ec:7c:00:5e:9d:44:39:
                    de:9b:6c:de:f3:27:17:3e:8f:bf:1b:4d:e3:72:51:
                    0e:e2:76:20:db:94:52:b2:be:f1:43:0b:3b:33:63:
                    30:eb:85:ce:0a:1e:aa:62:0d:ee:b1:36:42:2c:b5:
                    c0:fe:c9:99:43:c8:f2:14:7a:f8:57:79:92:02:e9:
                    2f:9a:41:0a:82:24:ab:07:03:37:37:10:75:d2:66:
                    c3:04:46:28:04:6d:7e:00:8c:8f:ac:91:d5:4d:31:
                    34:ec:58:5e:f9:12:bf:56:5b:24:eb:d4:be:aa:91:
                    84:a5:30:44:5a:bf:d5:c1:12:4e:ef:a0:52:7c:9f:
                    c6:1a:44:ba:36:b5:43:e6:aa:a3:0a:b9:cb:6f:c4:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:70:99:4E:07:B1:AB:84:36:E4:88:CE:17:23:83:89:6B:05:11
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:25:f7:05:30:78:a8:b5:8e:ee:73:e1:73:5a:3a:c8:70:
         84:2b:c6:01:8d:e9:bd:78:c9:6b:ae:82:8e:6a:3d:92:6d:7c:
         ee:00:98:dc:70:82:08:24:b4:f1:82:09:17:c5:e5:a5:70:a0:
         9d:89:4e:dd:ad:0a:ce:35:38:c1:9e:5d:44:85:05:32:b7:05:
         35:ce:16:01:5b:5a:ef:d9:b9:5e:cb:50:a6:7f:9b:90:3e:a3:
         8d:0a:0d:33:64:fa:cd:a1:46:32:75:4f:21:63:8f:fb:91:a9:
         3c:30:66:1d:79:b6:22:45:29:29:c4:a8:c5:5c:aa:74:75:84:
         dc:bb:6d:27:9a:a7:4f:06:bb:b2:4b:b5:b5:cf:20:f2:c0:47:
         78:22:f7:2b:82:61:55:5b:bb:6b:81:1d:66:c7:67:f0:ae:a7:
         89:a3:37:6e:8d:ed:b8:7e:c6:36:23:76:25:17:21:b5:b2:18:
         ba:1a:89:f9:a9:4f:6e:6c:1b:4f:51:a7:31:5f:05:44:7d:51:
         1a:a9:81:89:ba:48:6c:80:28:93:8f:4c:33:c6:ef:d4:21:33:
         92:d9:78:dc:05:81:2e:7d:8d:02:54:64:5d:62:f4:1d:77:ec:
         08:54:0f:e9:a0:0f:d0:2f:9c:7e:ea:49:d4:79:f0:74:8a:f1:
         67:a4:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----