This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
File:                     4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft (raw, json)
Hash identifier:          Tn9BK9bQevPdjLROlxj3lTqEsk02SfjiamwcC94RA+Q=
Subject key identifier:   B7:2E:66:0E:FA:3D:19:39:5F:3C:7B:66:0B:3F:F8:35:B5:48:BD:58
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       373E219C9F5A55479218CC7071651DD24D6602CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
Manifest number:          014C
Signing time:             Fri 19 Dec 2025 11:36:28 +0000
Manifest this update:     Fri 19 Dec 2025 11:31:28 +0000
Manifest next update:     Thu 25 Dec 2025 01:40:28 +0000
Files and hashes:         1: 3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa (hash: PkRXnm55qWMN6d+n+wjL6E/vYG1pOn4aEs4rUblwKbo=)
                          2: 3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa (hash: +taxbYYapsAd4Lr2rc2Ms6wHqz24XDNrDJGf0PPg1WE=)
                          3: 3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa (hash: 4bLg1hMHDPX2EXByMwQ7cFXxQQA9o6PMkwz4w+sXb9s=)
                          4: 3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa (hash: 0rkxmO4pBWHfrl+hNkJCMfgYI1mw/jzQGG6puOttCF0=)
                          5: 4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl (hash: BZd/eRtffzDOJAFZjes5tJQviaKaJOpeuYDje+0LZlI=)
                          6: 3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa (hash: MSsGtYyGM4xf5NGgoQeAQ4TMIWEzAe9gMbhdk/d/hqo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3e:21:9c:9f:5a:55:47:92:18:cc:70:71:65:1d:d2:4d:66:02:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Dec 19 11:31:28 2025 GMT
            Not After : Dec 25 01:40:28 2025 GMT
        Subject: CN=B72E660EFA3D19395F3C7B660B3FF835B548BD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:0f:19:56:98:8e:aa:29:2c:45:5e:fc:3a:
                    28:60:4c:f2:d1:07:97:8d:4e:1c:70:68:be:ad:ae:
                    8e:0f:30:63:2a:13:20:81:52:3c:05:7a:5a:14:e3:
                    37:34:1b:fb:9c:43:ca:89:c6:36:74:6c:69:be:9b:
                    88:bf:d1:f0:b3:27:80:17:ec:9e:81:24:da:07:5e:
                    fc:a0:bd:99:1e:f9:fa:d1:f0:87:95:c6:c3:0f:3e:
                    48:1c:6f:17:28:33:09:be:12:ba:68:0a:b4:f5:dc:
                    0f:7c:e7:00:92:b7:b6:7b:08:29:7f:2b:fd:c7:94:
                    58:fb:71:43:5d:df:6b:0d:7a:cc:41:dc:e2:e5:a0:
                    cd:d4:dd:77:de:2c:14:33:25:89:33:79:6b:8f:1b:
                    e3:37:9c:5c:9e:6f:8c:c2:1d:1a:82:6a:22:3e:af:
                    9d:39:dc:bd:03:f0:81:99:e2:9d:35:fa:01:b8:14:
                    44:e3:2b:4f:c1:b9:6e:cf:7c:d4:d3:1c:a1:c3:39:
                    a7:04:5c:a7:bc:6d:dc:78:63:37:90:43:a9:3d:60:
                    87:6a:8b:b5:57:9b:84:55:fc:d0:82:4a:a4:5f:f8:
                    da:1c:3d:88:b7:c6:2d:d3:c6:ba:53:6a:6b:25:97:
                    b4:21:96:6e:7e:8d:0f:db:fb:ff:1a:26:be:eb:40:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2E:66:0E:FA:3D:19:39:5F:3C:7B:66:0B:3F:F8:35:B5:48:BD:58
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:39:55:25:97:17:66:da:b2:82:d1:69:8b:26:71:5f:59:1c:
         51:c2:e7:4a:28:8c:07:a7:e0:98:de:b9:5d:31:2a:df:06:b2:
         3c:91:1b:92:e1:04:9c:60:3c:21:8a:82:a3:c6:4b:2e:6e:d8:
         14:06:da:41:9d:d0:9a:41:d9:e3:c4:85:57:b1:91:22:03:0e:
         fa:d1:77:37:42:9c:19:66:ca:97:e9:48:78:fc:a0:ae:79:a6:
         39:e2:29:ab:f5:e3:97:08:fe:2b:35:b6:46:e2:35:5f:14:f4:
         4e:ba:10:a1:0a:81:cf:43:73:e8:53:07:55:45:8b:58:a7:a2:
         28:9f:fe:60:3c:fa:23:16:49:da:fa:5a:ab:2e:15:d7:45:da:
         16:d1:9b:fd:50:cb:ab:07:7c:89:fd:64:7a:39:28:74:6c:ba:
         91:95:b8:f2:61:41:25:6f:af:16:31:59:c4:b1:c5:f8:19:f3:
         3f:4a:ff:9c:d3:f0:34:9d:e7:ac:d0:8b:c1:47:d8:87:25:25:
         33:00:22:88:1e:07:d3:bc:02:3c:94:d3:02:25:16:d8:e9:da:
         37:3f:08:51:fa:c2:55:56:1d:eb:e6:33:99:a6:6f:af:71:c3:
         a5:e8:cc:a5:0c:fc:bf:cc:e7:49:83:24:4e:33:2f:bb:61:ff:
         d0:95:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:21:02 2025 by rpki-client