This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
File:                     991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft (raw, json)
Hash identifier:          lwIU16aApJngl49j4/BtZmWnM5nRx6FbkN1sDxkQnFw=
Subject key identifier:   35:68:CF:0C:F4:0A:92:6A:38:62:8F:AD:FA:A4:6A:29:6B:04:8A:D9
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       31FF33AB319C24B973E0AF286AD5D6D43357F69C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
Manifest number:          0147
Signing time:             Fri 19 Dec 2025 11:26:20 +0000
Manifest this update:     Fri 19 Dec 2025 11:21:20 +0000
Manifest next update:     Wed 24 Dec 2025 16:10:20 +0000
Files and hashes:         1: 3230302e35392e36342e302f31382d3234203d3e203130363137.roa (hash: f53pT77amDTuBArH+WEzU3OCsT9epXBysx2Y5ijj/2U=)
                          2: 323830333a393738303a3a2f33322d3438203d3e203130363137.roa (hash: su9GtQXbBXrz37TvNSJHGLO5vBj8F9pU0VVKdSmDqgY=)
                          3: 991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl (hash: 8jEM6nYnaOOOJnHMaar/P9mFGgRBhWXC4l8gkJEC2ts=)
                          4: 3230312e3232312e39362e302f32302d3234203d3e203130363137.roa (hash: e/qUkjsYKIECphv86PRHW0nXTVHje+GfAmlVABgKAWQ=)
                          5: 3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (hash: wNzC8NdV3FAhY0BGfmsh0OAVAzwxh9+cJwEUEYLWMok=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:33:ab:31:9c:24:b9:73:e0:af:28:6a:d5:d6:d4:33:57:f6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Dec 19 11:21:20 2025 GMT
            Not After : Dec 24 16:10:20 2025 GMT
        Subject: CN=3568CF0CF40A926A38628FADFAA46A296B048AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:93:3c:cf:c5:f5:3e:0d:9c:b3:a3:d0:a5:
                    f3:8a:76:cc:0f:33:65:29:c4:f2:71:46:06:bc:22:
                    e4:59:9e:a2:38:4b:f8:f7:9a:e6:a7:e5:77:4b:cd:
                    5d:66:63:17:ae:d2:7f:ce:20:28:67:d4:52:79:3e:
                    af:4a:14:9d:02:cc:19:80:17:f6:95:8e:af:8c:10:
                    a2:fa:a7:5c:12:e2:8f:a2:92:df:a8:2c:64:fb:17:
                    14:37:a6:81:ca:ab:fc:41:b4:c4:f6:6e:c2:ac:dc:
                    34:57:3c:6e:cf:39:ae:bf:5e:14:1a:2d:c3:ed:13:
                    40:16:b8:28:f1:37:19:0a:9a:ae:cf:b9:a1:8a:f2:
                    08:69:96:ca:e5:f1:2e:7a:fb:06:db:09:b7:01:5c:
                    dd:af:f3:d4:d6:fc:11:5e:f5:a3:c5:05:b1:53:69:
                    c4:1f:3c:96:68:82:bd:de:23:c9:48:1b:cb:0e:ab:
                    1e:0a:76:2d:12:57:1e:bc:03:e5:b9:57:b3:d0:d0:
                    fa:0a:8e:3b:d0:4d:dc:d5:82:7e:93:a6:40:fb:ab:
                    d1:de:e6:51:9e:0b:da:da:b7:7f:2f:6d:4f:f2:45:
                    16:12:bf:00:84:06:24:02:9d:3a:7e:ce:aa:d6:93:
                    eb:e1:2b:c0:c8:16:8b:e1:07:0b:c3:f0:a4:47:c9:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:68:CF:0C:F4:0A:92:6A:38:62:8F:AD:FA:A4:6A:29:6B:04:8A:D9
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:20:fc:1c:f3:4d:93:84:8d:f5:1d:95:30:2e:c0:98:24:
         76:1f:c0:92:5e:04:73:24:a0:23:30:57:a9:49:5e:5a:cd:0e:
         1f:fc:a3:ee:fa:ca:5f:25:a2:e7:44:be:dc:e3:73:40:4c:04:
         4b:68:98:56:ad:7e:8a:db:72:60:63:31:40:bf:2a:48:13:e7:
         53:91:db:10:11:76:1b:2a:3c:0f:e3:df:96:80:84:77:64:40:
         ed:4a:01:fa:82:c9:df:8e:1f:3e:3d:c1:fa:3b:99:39:a5:2d:
         1b:c0:62:00:c6:8d:b0:56:7b:1c:0c:b6:0b:e4:ff:9d:35:0f:
         d7:10:5a:cd:2c:d7:1c:48:d2:22:cc:72:0e:d9:02:e8:4b:c1:
         fe:f6:cf:53:10:d2:b6:09:95:49:e2:da:24:89:12:96:c1:36:
         8f:c5:5d:26:56:79:34:40:6e:40:d9:39:bc:73:43:11:1b:83:
         ce:ba:0a:fb:21:43:1a:a3:e7:76:00:07:29:ca:1b:1a:46:1d:
         fd:7a:96:4e:97:de:40:bd:18:94:12:c2:11:e1:5a:40:b6:74:
         d5:8b:74:48:be:89:04:33:d2:76:da:83:af:56:67:0d:32:ad:
         50:5c:29:e0:a6:eb:7c:40:67:df:3f:2d:ac:f0:43:71:87:d2:
         a0:78:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----