This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
File:                     D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json)
Hash identifier:          CdqvSl5OAPaJ4Dxlyba1CB19bl1R0x/0+7uMn3SPoMw=
Subject key identifier:   99:AA:A9:6A:D3:99:4E:24:44:43:84:87:0A:D1:50:24:18:B8:67:0F
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Certificate issuer:       /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial:       7B0A67C4CF66653D104EE4F8E9BDC08683EAEF9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
Manifest number:          0147
Signing time:             Sat 27 Dec 2025 21:57:22 +0000
Manifest this update:     Sat 27 Dec 2025 21:52:22 +0000
Manifest next update:     Fri 02 Jan 2026 04:01:22 +0000
Files and hashes:         1: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: 4HtorrOW/I6X+pr+gKEt8+V/VmCquASYi32d7tPOPWI=)
                          2: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: yccsCmM2OrYLmVCr0MsR3hl/o3Iuc4lRZvuWXccsUPw=)
                          3: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: L2Kv2nnD4bwQDif7mUHc5gi3vX3pJy1DVnf5dX5lxhc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0a:67:c4:cf:66:65:3d:10:4e:e4:f8:e9:bd:c0:86:83:ea:ef:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
        Validity
            Not Before: Dec 27 21:52:22 2025 GMT
            Not After : Jan  2 04:01:22 2026 GMT
        Subject: CN=99AAA96AD3994E24444384870AD1502418B8670F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:d8:74:6a:07:13:57:b6:b8:25:9d:8a:15:
                    01:a7:80:27:a8:71:48:29:f5:68:f2:5c:dd:f1:ac:
                    3b:bd:15:63:ae:1a:43:d1:a5:2f:e6:b3:86:d6:86:
                    04:06:7b:40:37:94:cb:96:ad:e2:15:17:77:33:75:
                    cb:06:77:ac:99:01:72:c4:01:3c:1b:35:ca:01:19:
                    17:b8:1e:4d:de:63:54:c3:71:e8:fd:f0:c9:8d:0e:
                    cb:60:e2:a9:5f:23:03:15:10:44:06:fa:67:9f:bc:
                    f5:d1:90:2a:b8:d9:2c:d9:c1:88:86:49:86:b5:54:
                    47:c4:c3:c2:74:f0:41:bf:71:ca:c5:d3:bb:56:8d:
                    a0:48:13:80:6b:88:91:49:10:e0:77:34:9b:b3:73:
                    96:f2:07:c4:4f:d3:41:20:61:01:37:3d:ff:80:46:
                    da:08:ec:04:53:cf:08:6d:4b:76:f1:16:1a:8d:93:
                    51:ea:87:a9:8e:f8:5d:02:4e:ed:64:88:fd:d3:49:
                    80:d2:b8:85:65:26:d9:9b:00:4c:d6:0d:d2:8e:f6:
                    ad:fe:8f:a4:88:1d:fe:3c:b9:ad:a3:2d:5b:94:76:
                    e7:3a:dc:6a:44:0f:87:eb:c6:63:43:99:8f:fb:2c:
                    e7:06:49:91:09:26:a6:9e:b5:48:04:bb:8e:af:4c:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AA:A9:6A:D3:99:4E:24:44:43:84:87:0A:D1:50:24:18:B8:67:0F
            X509v3 Authority Key Identifier:
                keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:5d:9b:a7:7c:30:c5:e9:93:b8:79:95:18:e7:75:e5:a0:
         2f:aa:4e:f5:29:45:22:9e:10:59:be:a2:28:43:72:e9:f9:fc:
         18:00:ef:1f:3e:77:53:f5:44:d6:32:9f:6f:f8:6f:f2:e1:c5:
         0c:43:dd:96:4f:d8:2a:78:bf:6c:16:69:ef:07:52:29:27:c7:
         b8:9f:f0:90:71:99:74:ce:0a:28:7d:89:13:80:f5:1a:69:dd:
         c8:d1:92:f0:71:da:f7:4f:f6:86:1f:fe:d9:4d:fd:19:8c:66:
         1a:bd:bb:8b:3c:a3:62:42:d7:08:35:1c:a3:62:67:05:c7:46:
         c7:53:e6:51:8d:b2:9d:5c:98:47:e3:af:a8:11:1a:c7:d9:bb:
         c1:a3:25:bd:20:ea:b9:66:c0:3e:dc:62:8f:87:86:21:7b:e7:
         f9:33:4d:d0:00:09:e6:db:e2:71:0d:b9:fa:fe:76:46:50:f2:
         9d:73:e3:9b:4a:95:fd:de:d4:03:b1:0e:6b:e8:b5:0b:9f:69:
         bc:a2:ce:b0:cd:df:ec:6c:79:ca:48:8e:e2:18:b2:86:01:26:
         29:1d:3c:cb:2e:a2:3a:6f:2b:7e:d8:07:77:8e:df:0e:37:20:
         5b:d8:1e:8f:c2:ce:95:77:00:de:35:25:76:f5:01:18:f8:30:
         b0:ee:3e:d9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUewpnxM9mZT0QTuT46b3AhoPq75wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGODlCMDY3NUVGRjIzQTI1NjAyOUVDNzgyMzRBRTdC
OTdGNkI1MjAeFw0yNTEyMjcyMTUyMjJaFw0yNjAxMDIwNDAxMjJaMDMxMTAvBgNV
BAMTKDk5QUFBOTZBRDM5OTRFMjQ0NDQzODQ4NzBBRDE1MDI0MThCODY3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTe9h0agcTV7a4JZ2KFQGngCeo
cUgp9WjyXN3xrDu9FWOuGkPRpS/ms4bWhgQGe0A3lMuWreIVF3czdcsGd6yZAXLE
ATwbNcoBGRe4Hk3eY1TDcej98MmNDstg4qlfIwMVEEQG+mefvPXRkCq42SzZwYiG
SYa1VEfEw8J08EG/ccrF07tWjaBIE4BriJFJEOB3NJuzc5byB8RP00EgYQE3Pf+A
RtoI7ARTzwhtS3bxFhqNk1Hqh6mO+F0CTu1kiP3TSYDSuIVlJtmbAEzWDdKO9q3+
j6SIHf48ua2jLVuUduc63GpED4frxmNDmY/7LOcGSZEJJqaetUgEu46vTBpDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUmaqpatOZTiREQ4SHCtFQJBi4Zw8wHwYDVR0j
BBgwFoAU2PibBnXv8jolYCnseCNK57l/a1IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QjNERjlBOTZDQjlEQjVCQ0I2QzVFMEI1MzkxQzNEMTY4
QUZGMTVCMDU2RTI1NkI4ODY5OTMxRTM5QkNFRTIzLzAvRDhGODlCMDY3NUVGRjIz
QTI1NjAyOUVDNzgyMzRBRTdCOTdGNkI1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEY4OUIwNjc1RUZGMjNBMjU2
MDI5RUM3ODIzNEFFN0I5N0Y2QjUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUIzREY5QTk2Q0I5REI1QkNCNkM1RTBCNTM5MUMzRDE2OEFGRjE1QjA1
NkUyNTZCODg2OTkzMUUzOUJDRUUyMy8wL0Q4Rjg5QjA2NzVFRkYyM0EyNTYwMjlF
Qzc4MjM0QUU3Qjk3RjZCNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl7l2bp3wwxemTuHmVGOd15aAv
qk71KUUinhBZvqIoQ3Lp+fwYAO8fPndT9UTWMp9v+G/y4cUMQ92WT9gqeL9sFmnv
B1IpJ8e4n/CQcZl0zgoofYkTgPUaad3I0ZLwcdr3T/aGH/7ZTf0ZjGYavbuLPKNi
QtcINRyjYmcFx0bHU+ZRjbKdXJhH46+oERrH2bvBoyW9IOq5ZsA+3GKPh4Yhe+f5
M03QAAnm2+JxDbn6/nZGUPKdc+ObSpX93tQDsQ5r6LULn2m8os6wzd/sbHnKSI7i
GLKGASYpHTzLLqI6byt+2Ad3jt8ONyBb2B6Pws6VdwDeNSV29QEY+DCw7j7Z
-----END CERTIFICATE-----