This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
File:                     08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft (raw, json)
Hash identifier:          mU+Tonyf3mu5sJEObxE01yLZMzEXz+nTO8PnxbXrOOQ=
Subject key identifier:   4F:98:E6:14:70:F8:6D:E2:92:51:CA:CC:30:D0:48:FC:B1:0E:CE:9B
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       481043E3F8DDD32BFD33401C15EEF9AF7FAC848F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
Manifest number:          0143
Signing time:             Fri 19 Dec 2025 22:32:44 +0000
Manifest this update:     Fri 19 Dec 2025 22:27:44 +0000
Manifest next update:     Wed 24 Dec 2025 08:55:44 +0000
Files and hashes:         1: 3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa (hash: lEua8GJfzTeL7+gQflgP2IWdLAwsUC6edxWk25GBWq8=)
                          2: 3137392e36302e35362e302f32342d3234203d3e20323633383035.roa (hash: l4CjdEl1yGnDuHd/wJKz4ZA2iWrWy/UmeC3vLbR0yUw=)
                          3: 3137392e36302e35352e302f32342d3234203d3e203532343638.roa (hash: iBwj3LwCxSn+trQ2LpXyaXwtNqH4IswX7AvIdSM0taY=)
                          4: 08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl (hash: EiyMpnPoYQBgpDGFOiyiobhiv63XFDtdXwDMjsT5zak=)
                          5: 3137392e36302e35332e302f32342d3234203d3e203532343638.roa (hash: tJWnRb5eowxJncmo8LxGwbc/E8diLmCqTp86vBWztWk=)
                          6: 3137392e36302e35342e302f32342d3234203d3e20323635373939.roa (hash: tP2obconJhkcUn2eDgNR97hybSc9UDfAaE6WIo06M68=)
                          7: 3137392e36302e34382e302f32302d3234203d3e203238303538.roa (hash: GSISkN9ckabl4XJXDBVqkBBg0sarMpJCQtjyheQzxvU=)
                          8: 3137392e36302e35312e302f32342d3234203d3e20323635373939.roa (hash: A7ZfpVL9k7oePcqMyU0pREN1zbDPFruz6rI3Sd5xflg=)
                          9: 3137392e36302e35322e302f32342d3234203d3e20323731393239.roa (hash: muRdS5UUHmqHTES2uASQoN7avmsiuaUzMsQofwErSm4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:10:43:e3:f8:dd:d3:2b:fd:33:40:1c:15:ee:f9:af:7f:ac:84:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Dec 19 22:27:44 2025 GMT
            Not After : Dec 24 08:55:44 2025 GMT
        Subject: CN=4F98E61470F86DE29251CACC30D048FCB10ECE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:11:81:2b:a1:a2:23:b7:87:76:fc:2a:cf:
                    85:63:33:ba:ea:e9:2f:22:d9:d6:9e:f6:f0:39:c2:
                    21:da:43:11:c3:bd:84:80:78:87:65:b0:a4:25:86:
                    bf:d9:a4:e5:4d:f8:18:f4:c8:5d:f4:c9:98:6f:0a:
                    6a:5c:3c:e7:8a:ba:eb:5c:00:14:e7:55:6d:dd:87:
                    53:e6:fc:c3:77:d6:d6:66:cb:71:14:47:99:87:51:
                    d3:30:2c:26:43:df:ff:d1:e4:c2:af:a4:6b:a8:06:
                    53:18:9c:fd:6f:93:32:2e:25:75:79:98:05:a4:11:
                    48:6d:6e:2d:b9:05:e5:d1:e7:43:3f:01:7d:aa:3f:
                    f3:c5:29:36:5a:7c:d7:65:14:bc:ca:6d:bd:56:d0:
                    4b:d2:8a:47:6f:52:71:9d:18:37:55:07:07:74:6c:
                    38:25:48:fd:1f:e2:41:a4:de:08:a3:73:10:62:17:
                    d9:4d:a2:f5:10:73:5d:13:17:a5:27:4e:ac:a8:fb:
                    94:7a:43:93:ab:6b:04:58:fd:99:28:76:f2:f8:d7:
                    89:00:da:a4:50:4e:f2:87:46:92:f7:20:c4:11:8f:
                    44:9f:cb:96:5e:11:35:49:06:51:14:b9:3b:17:1a:
                    0f:0b:fe:bc:de:ec:d9:a5:5d:81:09:bf:d4:12:e5:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:98:E6:14:70:F8:6D:E2:92:51:CA:CC:30:D0:48:FC:B1:0E:CE:9B
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:cb:59:7a:13:56:f6:5e:91:ad:b7:23:e7:60:6b:8a:23:
         35:42:f1:61:94:1a:bf:4a:c5:0d:d1:2c:b4:2a:96:43:14:21:
         05:fc:21:02:c7:9e:05:70:11:40:89:ed:19:f0:b3:3b:2a:89:
         e1:28:af:be:c4:96:1d:33:ef:a5:28:03:29:9c:99:b6:4f:bf:
         ad:6c:96:cc:b5:9e:38:7c:a6:df:00:d6:43:87:04:53:fd:2b:
         4c:b5:2a:bd:b5:8d:84:70:7b:58:a8:25:b5:23:c9:1b:f7:4b:
         ea:ec:a5:7f:d9:cf:b3:0e:d0:5f:1a:a7:e5:b7:8d:ab:8d:34:
         0f:f7:7f:74:cb:f3:61:31:65:bd:b2:aa:fa:3c:6e:2c:bb:1d:
         0c:66:0c:0d:00:fb:33:7d:a9:c7:af:10:56:14:dc:fc:50:dc:
         83:60:82:e4:a2:0d:6b:5f:eb:22:b3:c1:a4:44:48:c2:46:70:
         85:a7:98:3f:d6:dd:5e:f0:93:6c:8d:d0:08:4e:23:a2:0d:09:
         5d:53:5a:f3:ec:46:95:fa:26:e7:6d:ed:77:cc:35:09:d6:d7:
         6e:d4:df:b7:29:87:f9:61:82:e0:2b:d5:3a:87:9f:22:5b:15:
         06:a1:43:8f:e1:e4:e8:f3:e8:e7:9d:d8:01:51:35:99:77:75:
         4e:42:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:20:37 2025 by rpki-client