This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft
File:                     649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft (raw, json)
Hash identifier:          SZbWuWe8uiXH8N7N1FW+wfyk3giFvQg/OYyo5EhWC+U=
Subject key identifier:   94:08:64:F5:11:80:18:EC:C5:38:B7:DD:31:8C:DE:35:7D:C8:06:8E
Authority key identifier: 64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1
Certificate issuer:       /CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1
Certificate serial:       78EE309BE8707FAA2660BE1D3EF618F6BEC6E1E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft
Manifest number:          78
Signing time:             Thu 11 Dec 2025 10:39:24 +0000
Manifest this update:     Thu 11 Dec 2025 10:34:24 +0000
Manifest next update:     Tue 16 Dec 2025 07:50:24 +0000
Files and hashes:         1: 649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl (hash: u0uNfhpLY13PGOQ8Jd8R8pwCZaloDdlA7afbs7QYv4Y=)
                          2: 34352e3138302e3131322e302f32342d3234203d3e20323632313836.roa (hash: Og5J+rpPp4Vp87XQG3NQD9vZQTPUEhPnlQ/hAPJJ438=)
                          3: 323830333a666536303a3a2f33322d3332203d3e20323632313836.roa (hash: G6lA26EesVdz3xusZzUuvRd7KjZBVyoxDf6DJnxUL6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ee:30:9b:e8:70:7f:aa:26:60:be:1d:3e:f6:18:f6:be:c6:e1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1
        Validity
            Not Before: Dec 11 10:34:24 2025 GMT
            Not After : Dec 16 07:50:24 2025 GMT
        Subject: CN=940864F5118018ECC538B7DD318CDE357DC8068E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:40:8e:4f:ec:9a:10:f6:37:ed:d8:00:66:
                    81:c5:18:79:17:fa:2c:3d:33:85:87:c7:f3:34:a7:
                    90:51:2b:cc:8a:6e:7b:e2:f4:b6:5e:83:05:05:e5:
                    e4:86:d7:ff:37:8a:01:e9:d0:c6:31:02:0d:20:ed:
                    c2:b7:3a:71:75:12:e6:9b:07:ae:f2:29:39:6d:5e:
                    b8:e9:6d:cc:e7:58:de:fe:7f:f0:24:cf:f0:29:b1:
                    73:d6:d3:3c:76:1c:a5:fa:1d:d1:ff:fe:c6:d1:21:
                    f7:8c:00:69:ec:b9:33:b5:bd:d8:28:73:e6:04:99:
                    d3:7e:0a:21:0d:39:15:4c:09:bb:b6:71:d8:6a:37:
                    7f:5b:ce:8c:76:d7:25:b2:f9:35:b3:93:de:fd:3b:
                    e4:03:76:7d:42:e5:77:cd:ad:40:1e:48:6a:39:32:
                    e7:5b:63:b1:ec:7b:79:24:a7:32:11:c4:55:1f:1e:
                    62:be:30:98:e1:8b:6a:8a:f1:be:33:4d:82:0a:7a:
                    a5:f1:27:56:d1:85:06:97:89:a9:03:bb:11:6e:95:
                    18:a9:eb:db:79:e8:14:b0:c5:4d:fc:60:7f:4c:cc:
                    08:6f:ee:2f:79:e1:0f:4a:f3:95:18:e8:72:19:ad:
                    01:71:b2:e1:f4:bf:a4:76:f7:6b:02:6f:3e:0b:c4:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:64:F5:11:80:18:EC:C5:38:B7:DD:31:8C:DE:35:7D:C8:06:8E
            X509v3 Authority Key Identifier:
                keyid:64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:eb:30:5b:97:08:e9:01:55:90:9e:46:42:3e:f6:9d:3f:
         1b:b8:7d:5f:32:fc:8b:2c:35:9b:b2:bb:b0:f3:fc:8e:0c:f3:
         14:7a:79:d8:55:18:21:7e:12:a9:05:02:21:8e:0e:ab:ae:45:
         4c:91:9b:a1:07:f9:4d:d7:13:76:d4:c1:99:67:5d:6b:b1:2b:
         7e:c4:e6:63:0d:17:c3:67:53:ec:4f:51:cd:51:95:76:b3:53:
         86:84:0d:1a:84:79:5a:a9:12:68:73:52:b6:0f:5c:53:c1:40:
         31:c6:2a:4f:9c:20:b3:47:51:eb:ff:1c:28:5e:5c:4a:5b:f9:
         08:c9:45:27:d1:ea:0a:05:95:e1:d5:44:16:da:10:58:40:7d:
         c7:2f:cd:ed:4a:ad:0d:6d:3a:a9:d4:00:44:c1:8d:e7:32:ee:
         1a:61:62:36:65:5b:7b:49:85:0f:09:2f:6b:03:f7:58:bd:13:
         73:26:13:f5:1d:4c:2e:46:ff:6a:fa:bc:d1:42:55:8d:11:1d:
         9d:69:69:cc:39:e9:6f:97:ef:e4:22:68:1c:f8:1e:77:1e:cd:
         bc:44:55:b2:40:cb:b5:bb:dd:31:5e:26:73:0d:e0:0e:1d:ed:
         0e:a1:a3:4f:5c:c0:34:97:a2:90:70:58:75:cc:cd:85:51:27:
         79:0b:bb:83
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeO4wm+hwf6omYL4dPvYY9r7G4ecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ5QzcyRUJBRjZBMkQ2MUVENzk0QjcyQ0Q2NDY3MEJC
OUEzQjdDMTAeFw0yNTEyMTExMDM0MjRaFw0yNTEyMTYwNzUwMjRaMDMxMTAvBgNV
BAMTKDk0MDg2NEY1MTE4MDE4RUNDNTM4QjdERDMxOENERTM1N0RDODA2OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMXkCOT+yaEPY37dgAZoHFGHkX
+iw9M4WHx/M0p5BRK8yKbnvi9LZegwUF5eSG1/83igHp0MYxAg0g7cK3OnF1Euab
B67yKTltXrjpbcznWN7+f/Akz/ApsXPW0zx2HKX6HdH//sbRIfeMAGnsuTO1vdgo
c+YEmdN+CiENORVMCbu2cdhqN39bzox21yWy+TWzk979O+QDdn1C5XfNrUAeSGo5
MudbY7Hse3kkpzIRxFUfHmK+MJjhi2qK8b4zTYIKeqXxJ1bRhQaXiakDuxFulRip
69t56BSwxU38YH9MzAhv7i954Q9K85UY6HIZrQFxsuH0v6R292sCbz4LxNwbAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUlAhk9RGAGOzFOLfdMYzeNX3IBo4wHwYDVR0j
BBgwFoAUZJxy669qLWHteUtyzWRnC7mjt8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUQwN0Y2RThBOEVDNTRDRDZBM0QzMjcwNDExMDI5NDk0
MDE5Q0I5OTZBQTdBNzg5QzNCN0UyQjVFNTMwRTQ2LzAvNjQ5QzcyRUJBRjZBMkQ2
MUVENzk0QjcyQ0Q2NDY3MEJCOUEzQjdDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDlDNzJFQkFGNkEyRDYxRUQ3
OTRCNzJDRDY0NjcwQkI5QTNCN0MxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVEMDdGNkU4QThFQzU0Q0Q2QTNEMzI3MDQxMTAyOTQ5NDAxOUNCOTk2
QUE3QTc4OUMzQjdFMkI1RTUzMEU0Ni8wLzY0OUM3MkVCQUY2QTJENjFFRDc5NEI3
MkNENjQ2NzBCQjlBM0I3QzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRuuswW5cI6QFVkJ5GQj72nT8b
uH1fMvyLLDWbsruw8/yODPMUennYVRghfhKpBQIhjg6rrkVMkZuhB/lN1xN21MGZ
Z11rsSt+xOZjDRfDZ1PsT1HNUZV2s1OGhA0ahHlaqRJoc1K2D1xTwUAxxipPnCCz
R1Hr/xwoXlxKW/kIyUUn0eoKBZXh1UQW2hBYQH3HL83tSq0NbTqp1ABEwY3nMu4a
YWI2ZVt7SYUPCS9rA/dYvRNzJhP1HUwuRv9q+rzRQlWNER2daWnMOelvl+/kImgc
+B53Hs28RFWyQMu1u90xXiZzDeAOHe0OoaNPXMA0l6KQcFh1zM2FUSd5C7uD
-----END CERTIFICATE-----
Generated at Sun Jan 11 22:53:41 2026 by rpki-client