This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
File:                     08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft (raw, json)
Hash identifier:          zCXY916v+mxHvFxCMnmcx1cWuF0Zbnuf6EgBoWgc238=
Subject key identifier:   EF:8F:BB:BD:B5:DB:9B:8D:F3:9F:0D:7A:98:99:B5:4A:44:89:14:35
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       2200EDA0DF6EE714B8D4C26C5B7436B9013C1CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
Manifest number:          0153
Signing time:             Sat 20 Dec 2025 08:39:30 +0000
Manifest this update:     Sat 20 Dec 2025 08:34:30 +0000
Manifest next update:     Thu 25 Dec 2025 01:04:30 +0000
Files and hashes:         1: 3137302e302e392e302f32342d3234203d3e20323730303838.roa (hash: 7LN0OQnsmAXvYStNmVOiIvjNkgFfua6RqoHMout/whc=)
                          2: 323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa (hash: Uzb66kDA0olA6Gt40tYeuZbuGLMhY3BOA0MSMUlNmQI=)
                          3: 323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa (hash: eAf2ZQ77Qs2bxfokzka5p0VzhIZvsCKr6m9j0JFQmB0=)
                          4: 323830333a626265303a6130303a3a2f34302d3430203d3e20323730303838.roa (hash: 72sXmF4b2QjIi5iTgNafa/lNCdgPDcngDypuvQHZmuY=)
                          5: 323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa (hash: c/0nkhG3ptBHgrvXChIXWxmEYuQUNUuDqTnycGmFMNs=)
                          6: 323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa (hash: agE0M0lFtQc1VANpkHA6fajhH2henOEPVncqTPZduXg=)
                          7: 3137302e302e31302e302f32342d3234203d3e20323730303838.roa (hash: cV+WgbMrL9gpVsd+f4IKaHxwfH26k/rD8TJHa0Z67vA=)
                          8: 323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa (hash: o7NrEuniVWzoQAY2qF07C3VrwLtcPb89+eqsYRONXDM=)
                          9: 3137302e302e31312e302f32342d3234203d3e20323730303838.roa (hash: j3KGJiIApfOCmWSXbBZkimvQsk01fPgRM2I3soYPGQY=)
                          10: 3137302e302e382e302f32342d3234203d3e203138363738.roa (hash: IbPxwBz3L3A3PLIAvuBlA7aDjQzEsxHRfbGFL74IfFg=)
                          11: 08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl (hash: e4rtv1V/N/hWXmxFBPkpWFVJPvjp7zDE7eAdmZ1cSSQ=)
                          12: 323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa (hash: 8h2uDdgfaZ4MbK3x3qz2dsLdU7kQsgQN4HrefxIXDE4=)
                          13: 323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa (hash: 5MWmdHAFjNELGAGH+Zqqf6q31kqFKYyPkkHsDhh9SHc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:00:ed:a0:df:6e:e7:14:b8:d4:c2:6c:5b:74:36:b9:01:3c:1c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 20 08:34:30 2025 GMT
            Not After : Dec 25 01:04:30 2025 GMT
        Subject: CN=EF8FBBBDB5DB9B8DF39F0D7A9899B54A44891435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:57:84:b5:73:aa:50:90:92:5c:c0:d9:44:
                    87:2b:1d:56:2c:9d:60:20:2b:78:43:df:41:d8:56:
                    0a:89:75:63:8a:07:30:1b:7f:fb:41:26:78:2e:65:
                    14:5e:78:93:a0:bf:f9:fe:e6:78:bf:15:50:7a:68:
                    fd:e8:21:ed:1f:76:98:50:53:a6:a6:9d:29:f2:fa:
                    8a:f9:0a:80:4f:3e:17:ee:9e:c6:f8:e0:56:d5:c1:
                    42:63:a3:67:bc:d3:85:d8:4a:0f:dc:d4:90:4b:f7:
                    08:f1:67:74:3a:89:0c:cc:65:ad:98:e8:a6:31:3b:
                    7d:dc:c4:39:b8:01:08:f1:7c:c8:c8:17:a1:d9:f4:
                    8b:bc:43:fd:9d:b6:bd:41:1c:e9:6b:87:49:e4:13:
                    04:d6:1a:b4:80:12:ab:b9:5a:0e:b5:d3:6b:f5:58:
                    e7:7a:ec:fa:42:12:ce:db:f8:35:51:15:1d:2c:8a:
                    59:24:48:5c:66:f8:44:44:e8:cb:30:79:2f:bf:cf:
                    4d:f0:e6:ed:df:0e:b1:88:fc:1d:e7:aa:46:99:fb:
                    3e:b9:cc:b2:f4:28:a4:02:07:b1:58:80:db:ae:62:
                    9f:ea:be:89:f8:83:29:f3:b0:a3:42:f2:36:42:76:
                    7d:41:44:a4:f0:3f:d8:6d:67:94:a4:17:ba:7f:58:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:BB:BD:B5:DB:9B:8D:F3:9F:0D:7A:98:99:B5:4A:44:89:14:35
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:02:be:d7:cb:ba:a9:77:d8:89:97:2b:80:94:bc:c3:94:
         94:d4:87:f1:10:c4:b4:2c:3b:93:fc:85:c0:9f:d4:4e:66:d6:
         54:50:e4:11:fe:c7:a0:a8:2a:a9:35:17:98:2e:78:31:30:f8:
         d5:21:da:bf:7e:01:c5:c0:e3:ba:e0:04:56:d3:15:45:66:23:
         a7:4a:d6:7d:9b:92:f5:31:0f:25:bd:97:51:06:cb:74:7c:e8:
         45:d0:82:5d:20:ce:a2:8c:cb:c3:2b:68:b2:ff:d1:31:2b:f3:
         b7:18:db:02:f9:7d:37:cc:b4:61:0d:3e:5a:b8:de:a0:c4:f4:
         f6:e8:95:40:ed:53:d0:f5:9b:36:62:e8:5d:44:a5:b1:ec:f2:
         0f:91:93:f1:d3:2f:9d:ac:d6:5b:82:18:09:ce:93:91:03:d2:
         cf:6f:ed:2f:84:ea:78:83:78:77:d0:ed:de:4b:97:7c:0d:24:
         fc:8e:db:04:ef:b5:76:4a:07:4e:ce:0d:e6:04:b8:ab:71:44:
         e7:b3:e8:5f:be:75:88:bb:83:85:2c:ea:3e:d8:a4:13:78:f3:
         84:33:57:0b:62:b3:b8:06:2f:50:16:b5:e1:42:22:31:ba:66:
         38:61:cf:5e:cc:4d:58:8d:ee:13:1b:e0:94:15:3b:47:88:71:
         78:ff:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:13:10 2025 by rpki-client