This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
File:                     88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft (raw, json)
Hash identifier:          9gDOjJW86AqtKrf1773px8poIQnDkE/bVGrgG47OYxI=
Subject key identifier:   DC:2E:68:94:00:E5:67:6C:22:40:A2:48:1A:90:AB:AA:F4:01:09:A8
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       3A4900F09095253E14F1C11788D270D2A9FBD00E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
Manifest number:          0118
Signing time:             Fri 19 Dec 2025 06:43:45 +0000
Manifest this update:     Fri 19 Dec 2025 06:38:45 +0000
Manifest next update:     Thu 25 Dec 2025 00:54:45 +0000
Files and hashes:         1: 88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl (hash: 8U50CG+KyslD95yds9z6+9vtAe3L5cIl/FPS6pVdbio=)
                          2: 323030313a313230373a653030303a3a2f33362d3336203d3e203238343539.roa (hash: E9sIC+WjAF1izlOZUGsYo/RvkXviK7NEOXo8UY3P9hs=)
                          3: 323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (hash: qkyZxltVVFUxcd48BM3ODxVwLPXAJM95O5CCVBZvOSU=)
                          4: 323030313a313230373a663030303a3a2f33362d3336203d3e203238343539.roa (hash: pTNGbvG9dgqnBl9QM0lbNI4uZp33HQ4fCicHEcZnMpw=)
                          5: 323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa (hash: jznJpg1ahba2NYH40zBUUhcsREyg2dJ7rPGCDNh6CLg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:00:f0:90:95:25:3e:14:f1:c1:17:88:d2:70:d2:a9:fb:d0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Dec 19 06:38:45 2025 GMT
            Not After : Dec 25 00:54:45 2025 GMT
        Subject: CN=DC2E689400E5676C2240A2481A90ABAAF40109A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:4c:d3:ed:b8:af:6b:f1:13:63:3f:ba:92:
                    43:26:5e:8d:6a:cd:48:c7:c5:a0:03:2c:cd:92:b8:
                    c6:89:44:43:04:89:85:ee:64:92:08:e4:f8:f1:0e:
                    ef:f0:3e:13:c5:af:23:46:b4:b3:26:48:ea:da:d1:
                    09:28:01:6b:f6:02:fd:ab:fc:32:16:3f:11:13:cf:
                    23:ab:c2:00:40:e9:09:9b:63:86:93:68:92:e9:9d:
                    c6:c9:46:c0:d0:21:45:7b:08:7d:26:7b:bd:30:bf:
                    61:7e:eb:a5:48:2c:b0:b0:b3:8b:81:ad:67:02:ed:
                    ff:0a:a4:a3:35:12:5c:8f:c7:4f:59:e8:d0:57:8d:
                    ab:87:ce:8e:cf:f8:32:f0:18:c6:11:35:a7:c5:c0:
                    cb:67:f4:b3:44:f6:94:d9:8e:6c:b7:fd:7c:c7:e8:
                    00:3a:43:7d:6c:04:36:32:31:ee:e8:2c:0b:e5:9b:
                    84:0c:bf:3b:ad:4e:d4:be:cd:69:00:2a:00:53:80:
                    2e:87:09:aa:1f:f7:54:76:63:ac:d5:51:a2:72:48:
                    2a:11:2d:05:4a:9b:82:3c:1b:16:74:db:f6:66:12:
                    6c:a0:29:e8:77:f1:d7:9a:e8:cb:6a:a3:83:e5:82:
                    57:68:ec:b4:b0:c0:5f:60:15:1b:65:b7:dd:61:f9:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2E:68:94:00:E5:67:6C:22:40:A2:48:1A:90:AB:AA:F4:01:09:A8
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:36:2d:88:ea:92:7b:e5:d2:26:cb:28:e1:ef:dc:29:c9:
         96:25:dd:76:49:78:9c:31:18:66:6b:df:cc:5e:43:8c:20:d6:
         c1:65:d0:35:32:6d:36:83:77:fb:f9:e3:8d:75:16:1b:df:be:
         98:48:08:73:03:bc:1f:22:f1:6b:27:07:9d:c5:8c:6d:3c:91:
         9f:aa:46:49:fb:78:bf:a7:8a:a2:04:52:a7:c4:68:b6:bf:74:
         c6:4a:1d:ac:fc:be:40:4b:fe:74:fb:08:ac:17:f9:bc:30:50:
         e2:a0:42:7a:2a:de:93:70:26:f4:9b:a1:ee:2a:94:89:7b:91:
         71:4d:fe:ac:b5:98:c6:aa:67:5c:7b:29:1d:d3:b6:a8:c6:ca:
         d6:02:58:01:6b:4a:45:e3:2c:d7:d4:34:42:b8:31:bd:47:08:
         00:72:cd:54:eb:ad:35:89:2a:8c:0f:f2:d9:84:c9:35:b8:4e:
         13:24:d3:76:74:ff:cd:f0:97:d4:72:8b:3f:7e:1c:f3:f9:ae:
         c3:ee:27:57:99:9d:f4:7d:cd:02:a2:e7:3e:de:8a:52:66:e9:
         fb:76:08:88:af:55:37:3c:28:8d:31:a6:e7:83:5d:b3:c4:a5:
         e6:5f:dd:fb:d9:83:62:37:68:0c:c3:34:89:f3:25:ed:bf:d1:
         a1:ac:40:fa
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOkkA8JCVJT4U8cEXiNJw0qn70A4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGMzNDMkZFQTU4MjQ5RTgzQjg5NDdGN0M2REVENTM4
QjkxQjE4QjAeFw0yNTEyMTkwNjM4NDVaFw0yNTEyMjUwMDU0NDVaMDMxMTAvBgNV
BAMTKERDMkU2ODk0MDBFNTY3NkMyMjQwQTI0ODFBOTBBQkFBRjQwMTA5QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GEzT7biva/ETYz+6kkMmXo1q
zUjHxaADLM2SuMaJREMEiYXuZJII5PjxDu/wPhPFryNGtLMmSOra0QkoAWv2Av2r
/DIWPxETzyOrwgBA6QmbY4aTaJLpncbJRsDQIUV7CH0me70wv2F+66VILLCws4uB
rWcC7f8KpKM1ElyPx09Z6NBXjauHzo7P+DLwGMYRNafFwMtn9LNE9pTZjmy3/XzH
6AA6Q31sBDYyMe7oLAvlm4QMvzutTtS+zWkAKgBTgC6HCaof91R2Y6zVUaJySCoR
LQVKm4I8GxZ02/ZmEmygKeh38dea6Mtqo4Plgldo7LSwwF9gFRtlt91h+auVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU3C5olADlZ2wiQKJIGpCrqvQBCagwHwYDVR0j
BBgwFoAUiPM8L+pYJJ6DuJR/fG3tU4uRsYswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzM1NUVDRDZBQzFCMEE5QUFDNTJBNTZBRDBBRjM0QjQ1
MzZDMkFDN0ZBRDUyNUMwMkVGMjMwMzQxQkMwNkFFLzAvODhGMzNDMkZFQTU4MjQ5
RTgzQjg5NDdGN0M2REVENTM4QjkxQjE4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OEYzM0MyRkVBNTgyNDlFODNC
ODk0N0Y3QzZERUQ1MzhCOTFCMThCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMzNTVFQ0Q2QUMxQjBBOUFBQzUyQTU2QUQwQUYzNEI0NTM2QzJBQzdG
QUQ1MjVDMDJFRjIzMDM0MUJDMDZBRS8wLzg4RjMzQzJGRUE1ODI0OUU4M0I4OTQ3
RjdDNkRFRDUzOEI5MUIxOEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdYjYtiOqSe+XSJsso4e/cKcmW
Jd12SXicMRhma9/MXkOMINbBZdA1Mm02g3f7+eONdRYb376YSAhzA7wfIvFrJwed
xYxtPJGfqkZJ+3i/p4qiBFKnxGi2v3TGSh2s/L5AS/50+wisF/m8MFDioEJ6Kt6T
cCb0m6HuKpSJe5FxTf6stZjGqmdceykd07aoxsrWAlgBa0pF4yzX1DRCuDG9RwgA
cs1U6601iSqMD/LZhMk1uE4TJNN2dP/N8JfUcos/fhzz+a7D7idXmZ30fc0Couc+
3opSZun7dgiIr1U3PCiNMabng12zxKXmX9372YNiN2gMwzSJ8yXtv9GhrED6
-----END CERTIFICATE-----