This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
File:                     D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft (raw, json)
Hash identifier:          2vdsvx00BdGY+fnAXuuD8OSMNKPuXuKyQ+W0ZvF42S8=
Subject key identifier:   A5:FB:8A:38:C8:92:44:07:0F:55:EC:03:59:63:FE:1A:87:76:46:F2
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       75E0F73CCAA8F0DA21F3CA5F1C40E7AA883CE87B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
Manifest number:          0152
Signing time:             Mon 29 Dec 2025 22:53:39 +0000
Manifest this update:     Mon 29 Dec 2025 22:48:39 +0000
Manifest next update:     Sun 04 Jan 2026 06:59:39 +0000
Files and hashes:         1: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl (hash: cxVLQP4hKzP5OcgDp6b4cFe3n8sbjp1k7OlaYjPll50=)
                          2: 3135392e31362e342e302f32342d3234203d3e20323732333233.roa (hash: MDeJlQE/QYUt0IOXHP5qWTWuvb4cThq/54ZgjGe5N3Q=)
                          3: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (hash: 7mm3mCGIoZexDzhAGuH/bf5GqhNwXZ3jwwtWfeQz3c8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 Jan 2026 06:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e0:f7:3c:ca:a8:f0:da:21:f3:ca:5f:1c:40:e7:aa:88:3c:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Dec 29 22:48:39 2025 GMT
            Not After : Jan  4 06:59:39 2026 GMT
        Subject: CN=A5FB8A38C89244070F55EC035963FE1A877646F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:e5:cd:4c:db:8d:66:55:3f:fc:66:8d:bf:
                    6b:87:38:8c:a6:04:ca:29:93:e4:12:62:95:8e:32:
                    c0:d0:70:97:cd:33:43:5f:94:7e:4f:06:a5:e8:eb:
                    23:9f:d8:a1:2f:34:4c:c0:03:50:ef:58:f0:6a:88:
                    83:2a:59:1b:09:f6:15:86:3e:ee:d3:c6:cb:f7:c0:
                    a0:af:9f:f8:97:fd:96:9d:60:68:f4:ba:ce:86:92:
                    77:65:2e:1a:ee:6f:44:d0:37:62:46:3c:4a:95:57:
                    68:54:2f:2a:a1:ab:55:b6:4f:b0:1c:9b:76:75:ea:
                    12:d1:67:1c:dc:6f:e9:50:e3:9e:a7:a9:ba:63:6c:
                    dc:2d:17:4a:02:bb:7c:57:62:2e:a4:36:db:01:8a:
                    59:62:c2:56:c6:b3:f1:45:b1:48:2b:43:fc:3e:e0:
                    73:43:5b:fe:76:68:70:d5:8c:7e:d7:a2:fa:f0:a5:
                    f7:6c:3e:88:0c:3e:77:38:4a:b7:1f:89:a0:6a:f4:
                    55:bc:3f:80:d1:05:55:9c:4c:70:2e:d1:e7:7b:82:
                    b3:4a:75:dc:27:2f:a9:86:d0:10:f7:b1:eb:c4:dd:
                    cd:14:3d:b3:2e:9b:ca:f2:a6:e3:dc:93:a7:65:d4:
                    b2:60:e1:23:9f:40:fd:f7:bc:de:60:bf:79:2d:9d:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:8A:38:C8:92:44:07:0F:55:EC:03:59:63:FE:1A:87:76:46:F2
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9b:d8:49:26:90:70:0e:89:b2:d5:d1:23:a5:40:fd:66:22:
         a5:43:fa:3f:48:04:2f:e2:bc:f1:ca:cf:4b:74:78:fe:25:49:
         e9:ad:a4:35:32:eb:4d:1c:14:24:3a:c9:a5:10:32:06:91:82:
         6c:bb:db:c8:e5:c1:a9:1e:4f:fd:91:e3:b4:0a:7a:4d:e2:12:
         71:18:e9:6b:7d:07:66:bd:90:e6:14:11:b0:47:34:ec:f7:23:
         2b:80:ce:6b:3f:c9:4a:65:4b:c5:35:46:16:75:e1:54:db:5c:
         97:fc:95:37:d1:11:19:13:58:9f:51:61:01:a5:e9:75:79:c4:
         9f:a2:0a:20:41:57:4b:5b:df:ee:5a:6d:82:57:8a:a0:4e:66:
         54:54:fb:76:2f:d6:e5:78:33:7f:9d:e7:66:a6:4c:87:db:44:
         d7:00:c8:81:15:8d:4a:92:a8:46:da:9f:a5:68:9c:28:d8:80:
         9b:c9:01:3b:1d:0a:f8:8c:94:db:bf:f4:66:cd:bd:37:bb:05:
         2c:cf:59:eb:5d:2c:d7:40:c3:6b:f4:96:6d:47:94:af:27:90:
         7f:9d:46:7a:5f:99:de:c2:ec:d4:8a:d2:ec:85:27:3d:6f:e4:
         7a:76:5f:aa:f3:dc:cc:7e:88:ea:5b:fb:1a:c7:e1:69:02:65:
         6a:6b:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----