This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File:                     AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier:          PRwn1wuRZiLqq37kGjftmIRh5Xdzk9J4q9zjRJq5H9U=
Subject key identifier:   A6:AD:99:4B:5B:59:50:D3:1E:20:4B:EF:DC:1E:8A:F6:0C:71:B9:7C
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer:       /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial:       40DB6437136095339CC38EC581B630E179F4DDF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number:          014B
Signing time:             Sat 20 Dec 2025 23:18:23 +0000
Manifest this update:     Sat 20 Dec 2025 23:13:23 +0000
Manifest next update:     Fri 26 Dec 2025 15:31:23 +0000
Files and hashes:         1: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=)
                          2: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=)
                          3: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=)
                          4: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: wtlQn8VHY+pwC2nQn62mDe6Gcl2GM8CzUD/1Fhskw+g=)
                          5: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:64:37:13:60:95:33:9c:c3:8e:c5:81:b6:30:e1:79:f4:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
        Validity
            Not Before: Dec 20 23:13:23 2025 GMT
            Not After : Dec 26 15:31:23 2025 GMT
        Subject: CN=A6AD994B5B5950D31E204BEFDC1E8AF60C71B97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:95:e8:fb:80:a8:80:68:ce:b8:22:44:dc:
                    df:37:a8:e8:f2:e3:70:53:e8:13:99:fd:ba:17:f1:
                    f0:d5:2e:ee:2f:11:dc:81:92:50:8e:11:a3:3c:83:
                    6a:07:34:c6:fe:90:dc:81:f9:8d:6d:8b:5f:71:a1:
                    a5:ba:ab:ad:ec:38:38:f7:59:b5:b9:a2:59:b6:df:
                    54:45:7c:3b:4f:37:7b:8e:e0:7a:29:1f:16:59:d6:
                    3b:d9:51:e5:76:73:2d:14:cb:4f:c1:cf:3c:81:ff:
                    10:54:63:f3:f0:7f:c0:b0:c1:57:c2:df:e8:2f:78:
                    a9:5f:92:76:a4:4f:5f:7b:a3:f7:2b:d5:25:ff:a6:
                    14:7d:57:18:cb:8b:a3:f6:56:33:f2:66:6c:f3:4c:
                    05:9c:a8:a4:57:aa:ac:3e:05:72:10:7e:a3:0a:fa:
                    fe:39:e3:d5:42:ae:b5:5b:c7:fa:85:d2:3c:76:b7:
                    d1:e3:23:2a:97:82:ff:03:34:45:3f:53:ce:66:ce:
                    8e:94:d8:e2:1b:6d:38:01:fb:40:e3:fb:11:b6:7d:
                    2b:af:02:fe:63:80:ef:ea:b9:1c:00:59:a1:1e:b7:
                    55:b9:d3:8d:3a:42:23:33:a7:25:72:58:31:8e:02:
                    5e:14:59:05:f7:77:ca:0a:e7:55:31:cc:12:18:73:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AD:99:4B:5B:59:50:D3:1E:20:4B:EF:DC:1E:8A:F6:0C:71:B9:7C
            X509v3 Authority Key Identifier:
                keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:65:a2:0f:94:4b:26:c7:bb:cc:62:1f:54:0b:4a:f9:dc:
         60:f6:3a:de:7a:92:b8:af:98:de:ba:c1:de:97:6f:ae:5b:a8:
         3a:9b:6a:8e:6a:69:80:ea:1d:26:98:12:93:09:c1:d4:19:6a:
         88:13:32:68:67:7d:c0:a1:f6:01:77:70:67:5d:ab:4f:e9:5e:
         c2:54:8f:20:6b:70:47:53:21:50:42:c5:9a:33:9d:2d:39:87:
         0a:cd:ae:16:95:32:c0:a1:54:e9:6f:ae:2b:50:e3:5d:c1:ba:
         a6:33:ee:bc:14:0f:66:ca:db:90:56:46:ea:13:32:28:7c:08:
         bc:87:43:22:e3:6b:13:a5:74:48:2f:1e:1d:cb:4c:36:e3:86:
         ba:86:ab:1c:5a:2a:36:f0:f7:84:74:9e:e1:5e:0a:0f:72:58:
         1f:d7:16:7d:0b:5d:a0:20:48:e1:af:16:9a:fb:86:c7:0b:b4:
         b1:72:0e:a5:81:c9:ee:f7:58:99:bd:9f:c5:60:7f:dc:8c:a3:
         44:29:c5:63:e8:db:86:c1:d9:77:f1:71:ac:af:53:ad:04:95:
         05:9c:87:58:3f:99:b8:4d:50:aa:6a:e5:33:8c:85:2f:5a:9f:
         d3:a0:0a:62:8c:f0:1d:48:f6:1c:10:70:23:c2:db:32:71:05:
         c5:72:ec:2a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUQNtkNxNglTOcw47FgbYw4Xn03fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0
NUMzN0JGODAeFw0yNTEyMjAyMzEzMjNaFw0yNTEyMjYxNTMxMjNaMDMxMTAvBgNV
BAMTKEE2QUQ5OTRCNUI1OTUwRDMxRTIwNEJFRkRDMUU4QUY2MEM3MUI5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7pXo+4CogGjOuCJE3N83qOjy
43BT6BOZ/boX8fDVLu4vEdyBklCOEaM8g2oHNMb+kNyB+Y1ti19xoaW6q63sODj3
WbW5olm231RFfDtPN3uO4HopHxZZ1jvZUeV2cy0Uy0/BzzyB/xBUY/Pwf8CwwVfC
3+gveKlfknakT197o/cr1SX/phR9VxjLi6P2VjPyZmzzTAWcqKRXqqw+BXIQfqMK
+v4549VCrrVbx/qF0jx2t9HjIyqXgv8DNEU/U85mzo6U2OIbbTgB+0Dj+xG2fSuv
Av5jgO/quRwAWaEet1W50406QiMzpyVyWDGOAl4UWQX3d8oK51UxzBIYc76rAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUpq2ZS1tZUNMeIEvv3B6K9gxxuXwwHwYDVR0j
BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1
OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF
NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw
RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz
RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4
QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKKWWiD5RLJse7zGIfVAtK+dxg
9jreepK4r5jeusHel2+uW6g6m2qOammA6h0mmBKTCcHUGWqIEzJoZ33AofYBd3Bn
XatP6V7CVI8ga3BHUyFQQsWaM50tOYcKza4WlTLAoVTpb64rUONdwbqmM+68FA9m
ytuQVkbqEzIofAi8h0Mi42sTpXRILx4dy0w244a6hqscWio28PeEdJ7hXgoPclgf
1xZ9C12gIEjhrxaa+4bHC7Sxcg6lgcnu91iZvZ/FYH/cjKNEKcVj6NuGwdl38XGs
r1OtBJUFnIdYP5m4TVCqauUzjIUvWp/ToApijPAdSPYcEHAjwtsycQXFcuwq
-----END CERTIFICATE-----