This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft
File:                     B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft (raw, json)
Hash identifier:          r+xvA7Az1BN76/XdvAgpA5x2FTr8YUt9vZtvHZbZy74=
Subject key identifier:   33:24:0F:CC:89:FA:FC:8F:B5:D4:63:0A:5B:9A:9B:C0:D0:D3:38:38
Authority key identifier: B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
Certificate issuer:       /CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Certificate serial:       6931FC54E4029F772D40351DAD0BC00274E716D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft
Manifest number:          0148
Signing time:             Wed 24 Dec 2025 01:24:48 +0000
Manifest this update:     Wed 24 Dec 2025 01:19:48 +0000
Manifest next update:     Tue 30 Dec 2025 00:26:48 +0000
Files and hashes:         1: 34352e37302e382e302f32322d3234203d3e20323635383137.roa (hash: qhpW+arYm9zprv3SwYinsKGOyh55WdYWHydkLbgP9+w=)
                          2: B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl (hash: SAgtbFIWEz3/mxa8xdjRwr1dT5Z6vggWMeQo0djzJaw=)
                          3: 323830333a363832303a3a2f33322d3335203d3e20323635383137.roa (hash: 4IYWoNyqy/3qcrenw7vxE/y2k5XbRmJ4wADPtQhJpyw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:31:fc:54:e4:02:9f:77:2d:40:35:1d:ad:0b:c0:02:74:e7:16:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
        Validity
            Not Before: Dec 24 01:19:48 2025 GMT
            Not After : Dec 30 00:26:48 2025 GMT
        Subject: CN=33240FCC89FAFC8FB5D4630A5B9A9BC0D0D33838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:5f:80:49:72:f5:2c:ad:27:46:2b:6b:d2:
                    50:87:bc:93:0a:40:7c:ef:1e:40:4e:14:bb:0b:f1:
                    20:80:89:49:d8:4f:7f:fd:54:6e:a3:1f:cd:ee:03:
                    41:fc:0f:2a:c2:20:d6:e1:23:08:95:cd:07:00:c5:
                    6b:54:35:62:8e:f0:b2:c4:01:74:37:4d:f4:c6:ce:
                    ed:d0:b6:f5:d7:60:dd:ca:64:0b:0d:c6:b6:2a:7d:
                    86:2e:9c:70:bd:c4:b9:d2:8b:f8:64:5c:77:86:39:
                    b2:13:4f:1e:ab:57:6d:80:ef:33:bb:65:41:98:99:
                    61:c8:63:6c:70:ed:e3:05:ba:9b:95:93:22:fa:0f:
                    45:33:13:db:64:96:81:fd:fc:01:33:0a:bb:f3:c3:
                    bc:e8:d7:dc:ab:fc:cb:80:8c:fd:eb:a7:14:6d:30:
                    16:d6:43:b2:38:7b:97:96:4a:a2:7d:df:5c:07:76:
                    76:2f:f6:6d:c4:9f:bc:5f:91:5b:31:3a:91:71:77:
                    05:22:4e:ac:9b:68:b3:98:86:d5:50:fb:b6:d4:8e:
                    3f:d9:8a:f7:c2:74:ec:be:e7:67:30:e2:05:0d:56:
                    fc:99:bb:65:50:4d:aa:eb:f1:fd:34:66:a2:f4:1f:
                    77:a5:62:87:0d:21:7e:22:86:d7:71:c0:d8:9a:96:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:0F:CC:89:FA:FC:8F:B5:D4:63:0A:5B:9A:9B:C0:D0:D3:38:38
            X509v3 Authority Key Identifier:
                keyid:B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:96:bb:b1:80:ee:b8:69:41:a1:a7:cb:83:cc:f2:b9:9d:
         b3:5b:2e:d8:56:3d:b9:2d:6f:08:5e:61:eb:42:21:7e:2d:61:
         d5:ee:6b:c1:93:03:0b:9d:bf:e7:49:5d:82:bf:8c:dc:75:39:
         7c:22:b9:4e:65:cb:88:3e:da:da:be:19:6f:e8:9b:c8:5c:ca:
         e0:d6:0d:96:4c:06:ab:57:30:9b:89:7f:66:f8:11:b6:4d:b1:
         3b:47:c8:5b:5a:80:49:24:68:f7:20:fb:af:63:d9:d5:80:8e:
         5c:af:ad:8a:50:47:c8:57:32:ab:e3:22:27:ac:b0:c4:36:17:
         4b:15:3f:cc:58:c0:5e:f7:1c:e4:78:8b:d3:9e:e5:77:e9:cb:
         6e:c3:5c:f9:0b:1c:b7:4f:0b:7a:19:b9:e5:44:84:18:9d:c0:
         68:40:6f:8d:52:5d:82:85:27:7c:93:5a:58:cf:d8:0a:26:9d:
         66:54:a9:54:e8:19:d4:72:65:86:ad:01:5e:ba:23:90:21:f5:
         85:da:2c:c7:27:99:81:b7:b9:f7:a9:f3:3b:02:97:99:9a:9f:
         b6:92:5d:13:50:9e:8e:33:b8:c9:8f:1b:b5:8a:16:28:c1:18:
         9e:41:cf:b1:5a:e8:f7:ab:91:5d:02:88:5b:16:48:f1:78:62:
         c4:6c:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----