This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
File:                     E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft (raw, json)
Hash identifier:          E34kncX20NH6rnIRvmn6AAY8iH+zP/+RFvXCraPhMBQ=
Subject key identifier:   1F:0E:93:DF:62:48:97:EB:12:B6:0A:23:E3:0B:98:E2:EC:55:7E:7A
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       7C31CCC2A3E2C9E26889FE6850337CE3B4E51608
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
Manifest number:          5D
Signing time:             Fri 19 Dec 2025 03:00:17 +0000
Manifest this update:     Fri 19 Dec 2025 02:55:17 +0000
Manifest next update:     Thu 25 Dec 2025 01:25:17 +0000
Files and hashes:         1: 34352e36382e39342e302f32342d3234203d3e20323734303832.roa (hash: lhc62mxO4E11a1nS2+eTLpSkRQvO8IrRtl4nl2jl+rE=)
                          2: 34352e36382e39342e302f32332d3233203d3e20323734303832.roa (hash: sM200nMTnixrA/fFvHJhwPuTgnNQl/GyLV99r0uCYoo=)
                          3: E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl (hash: KNTgURLonkHKDRTwK2Q6aA6XFX2+Scdtuo7mP+VdqgQ=)
                          4: 34352e36382e39352e302f32342d3234203d3e20323734303832.roa (hash: Ptmcbh4UnPwoTmgtgc4nOaqbYtiZZ0qesRkHGMvBf50=)
                          5: 323830313a31303a3430303a3a2f34382d3438203d3e20323734303832.roa (hash: 8vIPDiyHWCFxED1QzQUkWPFRn5ehHgljcBJsp+0ZuQs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:31:cc:c2:a3:e2:c9:e2:68:89:fe:68:50:33:7c:e3:b4:e5:16:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: Dec 19 02:55:17 2025 GMT
            Not After : Dec 25 01:25:17 2025 GMT
        Subject: CN=1F0E93DF624897EB12B60A23E30B98E2EC557E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:ce:04:0d:fe:c3:da:56:6d:90:3c:1c:2c:
                    cd:77:21:8f:13:ed:c9:3f:e7:58:af:e6:0d:5c:34:
                    03:d9:b9:9e:35:cf:f5:33:90:82:1a:1a:37:1b:f3:
                    73:7c:c0:23:1e:92:2d:b8:3c:88:a9:0a:ff:44:b9:
                    eb:0e:c0:38:2f:b6:9c:a9:6d:7e:75:87:cb:44:ce:
                    aa:c9:cf:06:89:b5:73:dd:29:0b:9b:9f:86:b9:d6:
                    0a:ff:72:a1:9e:ec:05:cd:9a:d9:6f:a1:00:63:fa:
                    e8:b4:47:9c:0d:b0:8e:64:9c:d3:dc:13:84:39:95:
                    3f:e3:a5:64:3f:3a:bf:3a:71:56:ef:2c:a1:5c:14:
                    2b:9c:d0:05:24:72:86:fb:0f:51:35:5a:51:4b:9e:
                    f8:dc:17:c9:81:51:02:4a:8f:ff:2d:72:00:24:08:
                    4b:5f:ff:00:d3:5d:80:ca:0b:80:67:9d:d0:03:9a:
                    94:92:17:47:8d:fa:c9:e8:40:7f:8c:bb:96:04:c4:
                    a9:0e:72:b0:85:5b:ce:2e:66:b2:e4:84:6e:40:bc:
                    58:59:4f:f6:fb:0e:3a:85:54:2f:16:d8:21:09:f2:
                    b5:04:88:9f:3d:f8:71:43:80:4a:fe:66:0b:03:81:
                    c2:0d:40:e2:9f:d1:69:4c:8c:4b:5d:d0:0e:13:03:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:93:DF:62:48:97:EB:12:B6:0A:23:E3:0B:98:E2:EC:55:7E:7A
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:cc:54:f7:77:93:76:e3:11:4a:ef:cb:3b:ab:40:c3:10:
         d4:b8:d3:23:5a:e6:04:5c:23:7a:d9:29:ad:98:69:fe:3c:20:
         32:74:d9:70:08:2c:ef:85:2b:d4:03:ce:dc:a0:4e:04:a1:ac:
         0d:7f:90:b4:49:1a:56:ce:55:0b:57:66:6b:dc:f8:06:40:50:
         30:66:2e:a5:e1:7c:bd:f9:26:96:b8:95:38:a4:27:72:95:e1:
         3d:8d:5a:66:a6:f8:56:dc:91:57:65:57:3e:fd:4e:32:2d:37:
         1b:ba:70:60:f0:21:2c:8a:63:f5:c9:ca:bf:51:21:d1:72:d2:
         4a:96:63:1a:8d:d7:30:b1:2e:69:1d:63:30:3d:bf:6f:c8:0e:
         d4:11:1a:b9:4d:07:1f:a8:69:52:e4:c4:3d:3a:cb:83:e4:fe:
         30:9d:86:2a:4e:3d:be:13:e7:41:5b:0d:df:9d:15:89:b7:8f:
         4f:c5:c0:f3:8c:01:da:9e:fc:b5:b3:c9:d4:64:4f:78:1a:3d:
         83:81:f5:3e:c0:bb:95:00:8c:1f:9b:a3:18:58:e5:3a:7b:6a:
         96:7e:83:50:87:5a:79:f9:e4:eb:3c:6c:6f:78:25:78:e2:7e:
         86:d0:a5:9c:3e:c6:67:56:0d:d0:eb:d1:ce:9e:97:66:6c:9b:
         86:90:b7:ec
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfDHMwqPiyeJoif5oUDN847TlFggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4MzIzQzhGMEM4RENGNTFCOTQ4MkQ1NkI0QkRGQjhC
NzcwRkVFMDAeFw0yNTEyMTkwMjU1MTdaFw0yNTEyMjUwMTI1MTdaMDMxMTAvBgNV
BAMTKDFGMEU5M0RGNjI0ODk3RUIxMkI2MEEyM0UzMEI5OEUyRUM1NTdFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBM4EDf7D2lZtkDwcLM13IY8T
7ck/51iv5g1cNAPZuZ41z/UzkIIaGjcb83N8wCMeki24PIipCv9EuesOwDgvtpyp
bX51h8tEzqrJzwaJtXPdKQubn4a51gr/cqGe7AXNmtlvoQBj+ui0R5wNsI5knNPc
E4Q5lT/jpWQ/Or86cVbvLKFcFCuc0AUkcob7D1E1WlFLnvjcF8mBUQJKj/8tcgAk
CEtf/wDTXYDKC4BnndADmpSSF0eN+snoQH+Mu5YExKkOcrCFW84uZrLkhG5AvFhZ
T/b7DjqFVC8W2CEJ8rUEiJ89+HFDgEr+ZgsDgcINQOKf0WlMjEtd0A4TA4sDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUHw6T32JIl+sStgoj4wuY4uxVfnowHwYDVR0j
BBgwFoAU6YMjyPDI3PUblILVa0vfuLdw/uAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QUM3NzQ4RjkwOTQ2NDJFRUQ1QjE2QUVGMjgwRTAyOTI2
REZFNjk4OUE5OUZCRjQ0MDQ4NkJBQ0ZCMDkwMTVELzAvRTk4MzIzQzhGMEM4RENG
NTFCOTQ4MkQ1NkI0QkRGQjhCNzcwRkVFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTgzMjNDOEYwQzhEQ0Y1MUI5
NDgyRDU2QjRCREZCOEI3NzBGRUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUFDNzc0OEY5MDk0NjQyRUVENUIxNkFFRjI4MEUwMjkyNkRGRTY5ODlB
OTlGQkY0NDA0ODZCQUNGQjA5MDE1RC8wL0U5ODMyM0M4RjBDOERDRjUxQjk0ODJE
NTZCNEJERkI4Qjc3MEZFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6F8xU93eTduMRSu/LO6tAwxDU
uNMjWuYEXCN62SmtmGn+PCAydNlwCCzvhSvUA87coE4EoawNf5C0SRpWzlULV2Zr
3PgGQFAwZi6l4Xy9+SaWuJU4pCdyleE9jVpmpvhW3JFXZVc+/U4yLTcbunBg8CEs
imP1ycq/USHRctJKlmMajdcwsS5pHWMwPb9vyA7UERq5TQcfqGlS5MQ9OsuD5P4w
nYYqTj2+E+dBWw3fnRWJt49PxcDzjAHanvy1s8nUZE94Gj2DgfU+wLuVAIwfm6MY
WOU6e2qWfoNQh1p5+eTrPGxveCV44n6G0KWcPsZnVg3Q69HOnpdmbJuGkLfs
-----END CERTIFICATE-----