This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
File:                     CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft (raw, json)
Hash identifier:          w+89Pdb5bfvm05u59eUSZmwSUgHAuq02DFu0pGUT580=
Subject key identifier:   1E:F3:BD:15:C2:DF:B1:58:13:4E:8C:6C:EE:FB:30:0B:A0:6D:7E:3F
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       3E3B64199A09795E86D71ED86C4CF2B96842A5EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
Manifest number:          0143
Signing time:             Sat 20 Dec 2025 23:28:30 +0000
Manifest this update:     Sat 20 Dec 2025 23:23:30 +0000
Manifest next update:     Fri 26 Dec 2025 06:11:30 +0000
Files and hashes:         1: 34352e3136322e39302e302f32342d3234203d3e20323633323434.roa (hash: Q4cKad9QGPlMLuod8irBnRQ23Ij1FG6fmlLA2b5ejtE=)
                          2: 34352e3136322e38382e302f32342d3234203d3e20323731383932.roa (hash: Hz9/vHLG1cNfo19Iu2PJF0VUWd2uW+O0Ukul+4U4WMk=)
                          3: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl (hash: B2Z0eDiI+OhSX2Ep3RgIWNPyMwTFyjjC6evXO9rW8HE=)
                          4: 34352e3136322e39312e302f32342d3234203d3e20323633323434.roa (hash: 03mX5v3MX2e6J6dQF7uHPGxH6VtKTluYipMmrR59FcY=)
                          5: 34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (hash: qLKgn92Pyz7kDri8smsoul5kq00cZGFJqKwuYPi8cxs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 06:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3b:64:19:9a:09:79:5e:86:d7:1e:d8:6c:4c:f2:b9:68:42:a5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Dec 20 23:23:30 2025 GMT
            Not After : Dec 26 06:11:30 2025 GMT
        Subject: CN=1EF3BD15C2DFB158134E8C6CEEFB300BA06D7E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:b7:73:af:b1:50:7d:35:b3:ca:c9:c4:4b:
                    8e:aa:49:ca:96:8d:73:c5:4f:da:c9:27:62:34:86:
                    4e:4c:b5:fe:4e:b8:c2:cd:b5:8b:67:28:77:97:06:
                    39:af:84:00:0f:08:64:50:ef:97:d0:56:26:bb:f7:
                    56:58:32:53:48:26:77:c9:9d:ac:76:33:93:f7:89:
                    f1:b6:71:7e:5a:86:2b:b5:58:71:fc:15:cf:8a:6b:
                    42:92:e7:1f:78:97:c3:c0:63:f3:19:cd:aa:8a:eb:
                    1a:35:d5:78:54:23:64:4b:da:53:aa:ed:4b:7f:e0:
                    4b:8a:7f:d1:0a:bb:02:1f:d1:b5:06:0e:6b:76:16:
                    95:33:38:5c:6e:64:62:f9:4c:48:e1:ab:9f:ca:fc:
                    a4:16:f4:2d:3d:f1:34:8b:f2:95:9c:e7:70:a6:f2:
                    1f:30:11:7d:51:39:49:1a:9b:4e:c2:be:a9:3f:d4:
                    d9:3c:bb:c3:0b:cf:b2:2b:ce:02:34:bb:a2:43:7c:
                    7a:65:2c:84:b8:8e:71:1d:79:7f:8a:8c:c6:98:5b:
                    8c:90:33:64:c5:38:99:3f:7e:b0:83:d8:d9:fd:01:
                    5a:c1:5e:cf:c1:23:e9:5b:33:c0:7e:7a:35:cf:2c:
                    3a:d3:d3:be:ee:ca:a6:e9:a8:ba:39:56:74:b8:03:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F3:BD:15:C2:DF:B1:58:13:4E:8C:6C:EE:FB:30:0B:A0:6D:7E:3F
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d5:a2:9e:51:3e:83:59:76:fb:77:e2:ce:ae:c5:eb:91:27:
         ec:7a:00:5d:90:81:fd:0d:67:b9:52:b2:3a:68:37:b5:ad:58:
         35:19:a7:44:cb:fe:34:be:e1:a4:e6:bc:a4:91:2a:da:f2:9d:
         f2:18:8b:f0:f3:a8:33:76:6f:0f:7e:c2:57:7d:49:4e:30:af:
         9c:d8:7b:7f:99:c7:bb:cc:d0:65:0a:02:6a:68:4e:55:b7:db:
         68:44:55:a7:58:fb:0d:3c:4a:9b:2b:25:a0:92:a8:9e:74:e9:
         21:99:e4:4a:62:49:36:cb:dd:ac:d4:7a:f8:5b:5e:9c:f1:e1:
         75:d0:53:b3:1e:11:a8:f5:66:72:c9:d1:b0:72:76:44:56:2f:
         2d:ca:a1:a2:41:f7:89:7f:86:b7:c6:36:67:f0:e1:a9:1c:b1:
         ae:aa:06:75:c3:80:d0:43:99:31:2a:8c:8c:d3:63:36:66:e7:
         86:ab:89:cd:e0:5d:fd:d9:08:3d:71:0c:0a:1e:6b:f4:28:a9:
         0a:c5:b0:f1:ae:de:9d:4e:3e:c4:a7:0e:a3:93:08:c4:a5:7a:
         3d:1e:4b:d6:4a:e9:31:f6:42:f2:f1:05:ad:96:a0:58:88:e5:
         4a:ef:0a:2b:67:8d:da:f1:74:ee:82:c9:73:e0:85:c4:5c:d0:
         97:37:27:75
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPjtkGZoJeV6G1x7YbEzyuWhCpe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzRkFGQzJFNTVCREZEMzNBMjYwM0Y2ODM5RDA1RUNG
NTJBMkNFQzAeFw0yNTEyMjAyMzIzMzBaFw0yNTEyMjYwNjExMzBaMDMxMTAvBgNV
BAMTKDFFRjNCRDE1QzJERkIxNTgxMzRFOEM2Q0VFRkIzMDBCQTA2RDdFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXbdzr7FQfTWzysnES46qScqW
jXPFT9rJJ2I0hk5Mtf5OuMLNtYtnKHeXBjmvhAAPCGRQ75fQVia791ZYMlNIJnfJ
nax2M5P3ifG2cX5ahiu1WHH8Fc+Ka0KS5x94l8PAY/MZzaqK6xo11XhUI2RL2lOq
7Ut/4EuKf9EKuwIf0bUGDmt2FpUzOFxuZGL5TEjhq5/K/KQW9C098TSL8pWc53Cm
8h8wEX1ROUkam07Cvqk/1Nk8u8MLz7IrzgI0u6JDfHplLIS4jnEdeX+KjMaYW4yQ
M2TFOJk/frCD2Nn9AVrBXs/BI+lbM8B+ejXPLDrT077uyqbpqLo5VnS4A1/lAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUHvO9FcLfsVgTToxs7vswC6Btfj8wHwYDVR0j
BBgwFoAUyj+vwuVb39M6JgP2g50F7PUqLOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OEJGNUIzMEM4MzRBQkE1NkE2ODlBRUM2NjMxRjdDMkQ4
RTI1N0Q0QUQxOEE0MUZEQ0RDMDhDMTUxQUMyNkNDLzAvQ0EzRkFGQzJFNTVCREZE
MzNBMjYwM0Y2ODM5RDA1RUNGNTJBMkNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTNGQUZDMkU1NUJERkQzM0Ey
NjAzRjY4MzlEMDVFQ0Y1MkEyQ0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOThCRjVCMzBDODM0QUJBNTZBNjg5QUVDNjYzMUY3QzJEOEUyNTdENEFE
MThBNDFGRENEQzA4QzE1MUFDMjZDQy8wL0NBM0ZBRkMyRTU1QkRGRDMzQTI2MDNG
NjgzOUQwNUVDRjUyQTJDRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb1aKeUT6DWXb7d+LOrsXrkSfs
egBdkIH9DWe5UrI6aDe1rVg1GadEy/40vuGk5rykkSra8p3yGIvw86gzdm8PfsJX
fUlOMK+c2Ht/mce7zNBlCgJqaE5Vt9toRFWnWPsNPEqbKyWgkqiedOkhmeRKYkk2
y92s1Hr4W16c8eF10FOzHhGo9WZyydGwcnZEVi8tyqGiQfeJf4a3xjZn8OGpHLGu
qgZ1w4DQQ5kxKoyM02M2ZueGq4nN4F392Qg9cQwKHmv0KKkKxbDxrt6dTj7Epw6j
kwjEpXo9HkvWSukx9kLy8QWtlqBYiOVK7worZ43a8XTugslz4IXEXNCXNyd1
-----END CERTIFICATE-----