This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
File:                     CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json)
Hash identifier:          99wnG8zGnIX5ZwltrhB5hatUVZkoQqKb6jKZdXvIS8M=
Subject key identifier:   0B:1C:E1:8A:12:2D:6A:1B:11:24:19:8B:78:60:BD:44:3F:CE:F1:E5
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       5CBE5DEF44A64CAA33C331E2851DE8A0B94B736D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
Manifest number:          014F
Signing time:             Fri 19 Dec 2025 02:24:55 +0000
Manifest this update:     Fri 19 Dec 2025 02:19:55 +0000
Manifest next update:     Wed 24 Dec 2025 14:04:55 +0000
Files and hashes:         1: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: 2dAG7U5n47XTp12aSGxvzNB0rrTxyRySK9VodyiPoqQ=)
                          2: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: LECpA5bPBejVOnzCUoO1kdwDq77N413G1QKuYnH703M=)
                          3: 3138352e37342e31382e302f32342d3234203d3e203336343534.roa (hash: /s6vyPqjFsCBzbl7k2i7VjFnyweu8raSTCp18y5qPow=)
                          4: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: dAaaA8nh9Fx2Net854xhH+7JBvtcFMN3cbhbFQ29wXQ=)
                          5: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (hash: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=)
                          6: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: AA9n1lVR5HX9REgcEvpVDwT20zFoSkoU8JDEA1qlUsc=)
                          7: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: vREyyI+AZN7N3SkaHJXvgZvl0PshHIYkwZO60lmC2W0=)
                          8: 3138352e37342e31362e302f32332d3234203d3e203336343534.roa (hash: 5hN2NJOMlsMqgRJfpQa/xPxQxH45stlb9cVIjWuo9mE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 14:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:5d:ef:44:a6:4c:aa:33:c3:31:e2:85:1d:e8:a0:b9:4b:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Dec 19 02:19:55 2025 GMT
            Not After : Dec 24 14:04:55 2025 GMT
        Subject: CN=0B1CE18A122D6A1B1124198B7860BD443FCEF1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:30:5d:ef:27:f7:da:d6:2f:6c:fa:c4:33:
                    4d:f9:e7:33:57:8f:1e:72:87:16:1b:16:47:5b:74:
                    05:f9:93:9b:94:d8:44:e7:97:db:08:f2:2f:55:6a:
                    cc:5d:9f:08:4d:39:55:06:ca:5d:11:40:43:50:98:
                    24:f8:b8:5e:30:a6:54:20:18:57:82:e0:55:c9:44:
                    78:65:a2:fd:37:8d:3d:ad:fc:1f:51:8c:72:52:8f:
                    fc:40:5e:84:62:cc:10:9d:4e:10:5c:62:70:1a:22:
                    16:d7:b8:14:de:c7:24:4f:33:6d:45:52:9d:49:7b:
                    2e:cc:8f:90:21:3b:6b:a7:ff:cd:74:4f:fa:89:bd:
                    c1:a4:4d:c4:f8:0c:10:ec:dc:52:01:ab:69:b0:0e:
                    9f:6c:e4:58:8f:74:af:27:66:2c:b0:03:7c:1e:ad:
                    7a:fb:c0:8d:db:ac:63:79:57:bf:74:a6:50:38:aa:
                    02:71:c4:b2:9a:8c:f2:59:a6:06:7f:84:2c:d7:34:
                    7b:33:8a:93:9b:9b:23:72:4e:63:6e:0a:91:74:89:
                    af:85:0d:70:3f:5c:97:3c:dc:73:22:9e:d8:b5:0b:
                    19:89:d7:a3:7d:6e:6f:60:5e:6f:3a:da:9f:35:82:
                    3c:3c:0c:ed:e6:3d:c6:ce:0d:ea:5a:9f:c0:4e:67:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:E1:8A:12:2D:6A:1B:11:24:19:8B:78:60:BD:44:3F:CE:F1:E5
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:fa:6e:d4:54:d3:a3:4c:dc:d5:86:82:13:75:23:89:67:
         8b:61:e3:68:b5:df:da:27:87:11:be:09:58:11:ec:0c:67:02:
         21:27:4f:9b:77:6f:e9:55:1e:fa:21:d1:49:50:83:e6:f9:21:
         a2:52:4c:58:0c:8c:5c:36:24:10:ae:4b:50:e5:e3:d9:fb:bf:
         ca:41:8b:56:27:30:96:8a:e4:5e:13:e6:ce:55:ec:d5:0c:11:
         dd:7f:00:be:6c:7b:c8:8a:4b:a2:fb:72:d1:85:a1:18:fe:f7:
         3f:74:a1:24:ac:72:ff:a0:af:2b:51:d6:8b:b2:b9:bc:cf:2c:
         91:6d:98:c9:9a:fe:71:4a:2a:2d:c0:d5:a2:7c:a5:e4:6c:78:
         8f:bc:1a:00:28:ec:fc:78:93:75:b1:25:91:e1:7f:9c:21:c1:
         d0:28:55:f7:8e:13:4c:8d:21:4d:48:52:4a:dc:b2:0c:c5:b0:
         c1:fa:9f:83:81:25:89:cd:b8:1b:8e:ec:24:83:0f:c1:ea:44:
         5a:c6:7d:50:fd:9e:a4:b6:52:7d:16:41:0f:30:60:67:95:d5:
         14:e1:bf:81:b0:c5:a2:1b:a3:fb:b5:1b:5b:13:81:36:29:1b:
         79:d7:69:74:ba:c2:4e:ad:c6:68:f5:65:58:66:2a:f9:13:cd:
         4a:d9:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:11:14 2025 by rpki-client