This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
File:                     688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json)
Hash identifier:          7NwsRR+nNA96Yji+vajHCsY/LCwGD5EUJyS43gz3XV4=
Subject key identifier:   3D:FF:32:38:EB:C9:66:93:DE:D5:C9:6C:0F:B8:63:E2:D4:5F:37:19
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Certificate issuer:       /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial:       59B162B9175D8898F4235F83EB28E4E77BF4C681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
Manifest number:          014C
Signing time:             Wed 24 Dec 2025 22:12:29 +0000
Manifest this update:     Wed 24 Dec 2025 22:07:29 +0000
Manifest next update:     Mon 29 Dec 2025 17:46:29 +0000
Files and hashes:         1: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: FdSDa7l8YGLStvxEYVwMNzsZDEBEw19PGqtqZLZRKk8=)
                          2: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=)
                          3: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 17:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b1:62:b9:17:5d:88:98:f4:23:5f:83:eb:28:e4:e7:7b:f4:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
        Validity
            Not Before: Dec 24 22:07:29 2025 GMT
            Not After : Dec 29 17:46:29 2025 GMT
        Subject: CN=3DFF3238EBC96693DED5C96C0FB863E2D45F3719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:40:fa:18:3d:f2:c7:26:cf:29:b6:49:76:
                    82:94:cc:45:a4:a5:a8:d8:b0:07:24:99:d9:b5:8b:
                    ff:d2:6c:f2:1b:ea:2c:0e:55:e1:a7:69:44:44:55:
                    07:af:54:32:35:16:b2:22:46:da:b1:52:82:f4:2b:
                    e2:4c:65:7a:bb:21:7c:5d:83:ac:36:3a:0d:83:2c:
                    d9:89:ac:a1:02:f2:e1:f7:36:ca:68:04:ae:b4:80:
                    5c:eb:fd:6d:f9:9c:8e:90:d5:c6:58:72:05:78:1b:
                    c0:55:df:04:e6:fc:25:71:9b:89:df:45:58:18:3f:
                    7b:1f:2b:fc:f2:92:22:b4:94:5e:cf:24:78:48:ef:
                    18:6a:ae:a8:ef:5c:83:76:a8:21:18:23:d4:eb:91:
                    6a:c3:f2:4f:84:9d:46:07:28:a2:6e:bf:88:ea:80:
                    bd:1c:48:38:90:78:02:9f:8e:26:d9:3f:c1:ce:da:
                    bf:75:e0:ae:8c:97:d7:35:55:e8:1d:c4:8d:da:57:
                    96:1d:e1:36:db:f4:5a:34:6e:bb:aa:71:85:33:ce:
                    b6:5b:8a:bf:a1:3f:67:9f:ea:62:87:51:a5:5e:ce:
                    d4:5a:7a:72:99:05:b3:fc:76:05:5e:e3:a7:a6:49:
                    7a:e6:bb:33:c2:a9:6b:1a:7d:c3:e7:dc:00:10:89:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FF:32:38:EB:C9:66:93:DE:D5:C9:6C:0F:B8:63:E2:D4:5F:37:19
            X509v3 Authority Key Identifier:
                keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:63:4f:dc:49:6c:a0:bd:ca:87:98:52:4c:ea:44:34:b4:
         97:42:de:8e:15:4d:fa:4e:06:4a:93:e2:53:0f:6c:39:e0:d5:
         f0:71:ec:f6:a1:11:fd:be:5f:4c:d7:23:3c:ec:cf:1b:a7:8d:
         28:b0:b6:bb:53:9a:98:b8:e0:0c:b9:69:b7:29:c5:f7:44:f9:
         61:45:6c:62:3b:16:2c:1a:31:0b:b7:c8:b0:1b:e6:3e:1a:8f:
         65:d2:95:60:7e:66:b8:3e:4e:01:f7:9a:4e:95:78:ee:8b:a0:
         6e:96:5d:82:8a:8d:ce:d9:07:51:9d:66:ce:8c:c7:3b:ce:ea:
         3b:04:09:8f:cf:03:f0:5e:29:3e:58:0f:17:9c:34:a8:29:e4:
         96:ff:77:02:69:c3:65:2d:81:98:c5:ef:82:8a:bb:00:5a:fe:
         4c:b3:3c:91:3e:d3:33:1d:ac:a9:b9:8a:2b:ca:9d:4e:bf:70:
         50:8f:40:f9:2f:97:83:66:98:98:66:f3:d7:18:09:57:3f:b7:
         eb:40:bd:f2:b8:fa:8a:02:3a:30:9c:e5:34:58:3b:80:d4:31:
         95:f0:29:9b:a6:b4:b0:50:7f:3f:0d:e5:e0:c1:87:a0:57:9c:
         53:fa:d1:12:73:dc:63:31:3d:d1:cd:5a:fb:4b:fa:f6:2a:e1:
         7b:4b:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----