This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
File:                     2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft (raw, json)
Hash identifier:          zovYlJiz9Nb2GR9arrIFdqMljjr9U2wtR+m5PSPHWXs=
Subject key identifier:   6C:67:35:5D:D7:CB:98:C2:B6:31:96:34:5D:97:C2:C0:72:73:F1:51
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       1DEDDC6F34319F3A96A4EA3E5B72A537F401D691
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
Manifest number:          0153
Signing time:             Sat 20 Dec 2025 14:53:09 +0000
Manifest this update:     Sat 20 Dec 2025 14:48:09 +0000
Manifest next update:     Thu 25 Dec 2025 16:58:09 +0000
Files and hashes:         1: 34352e3136362e3131302e302f32342d3234203d3e203135303833.roa (hash: fSGoki3IjeHh6oCERa9UOVdQ+RhiKpYUUyBuCOXoPUg=)
                          2: 34352e3136362e3131302e302f32342d3234203d3e203238343233.roa (hash: 7vMpIpYhEyLorXepm6R6AD2Jf9CNgDYfKUZnPylfhr4=)
                          3: 2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl (hash: bqjqEobIA3rDWTmPB2MunKeV+EJh4RJrBrpoQnk0x7M=)
                          4: 323830363a3330653a3a2f33322d3332203d3e203238343233.roa (hash: WvKkT8cR2eWlS1KhbQVSwgRnba84Z7wXczAMoBKXWyI=)
                          5: 34352e3136362e3131312e302f32342d3234203d3e203238343233.roa (hash: KzO907GtijtiXVV7M9QO1b2PGtzTrUGxBdxttM6ECRQ=)
                          6: 34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa (hash: wuvtuFTXPW6JI5dvLWtcO6CBL4dz3URHXoT6m34USFo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:dc:6f:34:31:9f:3a:96:a4:ea:3e:5b:72:a5:37:f4:01:d6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Dec 20 14:48:09 2025 GMT
            Not After : Dec 25 16:58:09 2025 GMT
        Subject: CN=6C67355DD7CB98C2B63196345D97C2C07273F151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:c1:25:90:7e:68:36:c3:1d:6e:b0:e3:6c:
                    8e:c0:b4:ed:94:c3:e9:98:8e:cb:94:95:49:e0:d4:
                    fc:26:32:d9:69:1b:a9:0e:7f:e0:d1:40:32:d4:27:
                    9d:6b:df:6f:80:d6:e6:b2:a5:0c:8b:d4:a0:43:52:
                    04:80:35:19:81:21:28:27:9a:d1:49:21:6c:2d:3e:
                    4b:5f:56:3e:54:46:72:ad:90:81:b9:8f:37:57:c9:
                    9f:d7:a1:a2:b8:c1:4e:26:8b:56:54:dc:ea:23:0c:
                    1a:8a:85:27:15:1a:c6:12:88:49:76:75:03:04:e1:
                    d2:db:8e:e0:5d:51:55:94:bc:14:c5:b2:4f:90:86:
                    78:b0:c8:2b:4d:f0:db:8b:c1:97:2c:60:21:ce:f8:
                    91:00:02:a0:8a:a5:49:b5:33:2b:43:73:4c:b6:5d:
                    25:94:3c:97:b9:83:52:25:e2:28:36:44:8a:90:0d:
                    d5:ac:49:6f:e8:2c:ec:ad:d6:2c:f6:27:04:76:5d:
                    2d:a3:c4:08:9a:79:fa:09:2e:a0:f2:a4:1d:59:1f:
                    72:f6:1d:05:ae:36:b2:ed:4c:fd:94:2e:9a:b0:91:
                    38:72:66:4d:ae:66:d2:09:51:49:ae:cc:48:6f:23:
                    ba:6b:d2:25:cf:38:3b:25:8c:5c:15:87:c0:bc:7f:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:35:5D:D7:CB:98:C2:B6:31:96:34:5D:97:C2:C0:72:73:F1:51
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:04:06:0c:fe:bc:34:80:99:d7:76:4d:1b:80:3b:73:1a:
         82:a3:35:9b:e7:75:d1:9e:8b:d8:7d:f4:b8:fe:7b:b7:86:c8:
         39:2a:b7:1e:9c:f3:18:fe:a1:cf:31:13:0c:57:6b:86:4a:20:
         f5:ff:81:68:f9:04:72:75:93:65:17:01:d8:b9:3b:b8:26:f8:
         94:25:78:b3:65:d1:43:74:77:0a:c3:76:75:51:a0:38:0c:7c:
         16:6b:d8:8b:49:fb:a1:45:62:20:27:98:83:6f:f2:90:93:c1:
         42:74:16:ec:26:83:3a:b2:46:89:e0:67:b1:94:e0:69:41:6e:
         b3:a3:7c:93:66:49:e6:85:42:8c:3c:3a:8c:29:d3:3f:2a:f5:
         eb:6b:44:dc:e1:5d:cd:9e:d4:c6:90:32:bf:a3:18:96:55:a4:
         5d:d2:c1:05:15:5a:db:f2:f7:b6:ab:4c:f5:d6:0a:13:a8:41:
         49:12:6a:76:bf:d1:bb:5d:06:0c:11:1c:bd:66:e3:ae:cb:ae:
         43:93:8f:48:5c:7f:22:15:d2:be:43:6e:f2:58:3a:53:72:99:
         df:d1:6b:93:97:eb:89:8d:13:47:3e:d4:85:c8:3a:f4:5d:d0:
         f3:10:1f:d8:c0:9f:f3:df:7d:84:6e:96:f0:e6:70:df:90:a0:
         0c:dd:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----