This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          b0b+Kzf3K233Jn3DpnT5DQykVrsmEmCh4sqNFfL75Z0=
Subject key identifier:   69:68:33:6F:52:2B:79:BB:7C:2A:32:36:DD:6F:A6:5D:99:87:57:20
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       0BB67885186FD2D8D6CD230695061B2C51119F59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          014E
Signing time:             Sat 20 Dec 2025 23:23:26 +0000
Manifest this update:     Sat 20 Dec 2025 23:18:26 +0000
Manifest next update:     Thu 25 Dec 2025 00:17:26 +0000
Files and hashes:         1: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: l4Jx734awB6q++zt4yuuQs6QtfSrV51cP9wPz5GLhCQ=)
                          2: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: a5imhJiA/rURVBAlP3FqZj9MPOoFNNsbK8+YsVaOEJg=)
                          3: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
                          4: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
                          5: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b6:78:85:18:6f:d2:d8:d6:cd:23:06:95:06:1b:2c:51:11:9f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Dec 20 23:18:26 2025 GMT
            Not After : Dec 25 00:17:26 2025 GMT
        Subject: CN=6968336F522B79BB7C2A3236DD6FA65D99875720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:90:9b:3b:9d:06:a4:e3:65:ae:a0:79:73:
                    0c:0b:42:f9:0b:9b:c1:36:a4:57:7b:ce:3d:40:d0:
                    63:e6:c5:4e:c3:7f:91:de:8b:3f:57:e0:5c:57:45:
                    99:04:4a:dd:fa:a7:92:b8:e0:da:27:cb:4a:e8:be:
                    ea:28:0c:d3:0e:8e:45:d0:81:f1:a3:e9:8c:09:19:
                    41:4a:32:10:9f:ee:ba:a6:10:9a:5d:91:66:45:c7:
                    83:0a:c5:f1:9d:47:06:39:f9:a2:12:76:dd:f3:8a:
                    aa:cf:30:29:14:01:79:17:d2:fb:9d:04:94:44:b5:
                    eb:fa:12:af:22:99:09:3b:5e:13:a2:27:50:36:c9:
                    75:ac:23:a2:66:ea:cd:ab:f4:a1:33:ba:8b:e2:44:
                    72:23:0a:75:b9:c4:d5:be:7a:3b:30:be:fb:52:91:
                    ab:66:d9:55:16:f3:e4:76:07:f6:90:94:6e:07:47:
                    6c:7e:d1:3b:72:3d:54:7d:ab:c3:69:07:09:66:2a:
                    f1:5d:81:44:bf:c4:e1:9b:22:e5:15:d3:b7:b3:bd:
                    61:f5:a2:de:63:92:a0:69:2d:c9:b0:41:77:52:36:
                    02:25:04:00:88:4d:97:42:91:dc:45:66:05:ba:aa:
                    3a:f6:79:82:d5:5d:bd:3b:9f:62:07:d4:ba:aa:2d:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:33:6F:52:2B:79:BB:7C:2A:32:36:DD:6F:A6:5D:99:87:57:20
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:27:79:de:61:85:b0:e5:39:e8:96:b4:df:2c:e8:af:43:
         cf:0a:ef:e5:79:7c:08:bb:07:9f:63:4b:79:72:e8:9c:ed:3e:
         13:20:f1:e6:26:c7:31:71:ee:64:7b:80:30:5d:4a:45:b5:df:
         31:dd:4e:f0:5c:b9:4b:28:6e:f1:9c:c7:65:c7:ea:bf:c1:64:
         42:27:e6:89:a7:04:a6:68:fd:cc:bf:f1:88:bc:4d:78:58:37:
         c0:60:26:01:69:c9:4f:3c:fd:2c:cf:65:21:c8:e0:bd:88:0b:
         dd:e8:c2:b0:55:5b:69:0b:47:61:3a:6c:6b:f5:c1:b3:d3:fa:
         34:25:d3:ec:b2:71:f3:d0:0e:fb:09:7b:76:dc:1c:f0:21:67:
         ca:7e:6a:81:09:70:7f:e2:d4:80:c4:5e:69:fa:73:a6:c5:14:
         f8:36:52:6a:64:ba:fe:93:0f:73:94:66:10:57:94:9d:c2:f6:
         02:ef:91:27:f7:00:10:31:c0:83:21:79:6f:a7:75:b5:0a:24:
         6b:1e:db:2d:29:57:e4:3c:e4:19:ed:35:00:49:f7:c3:b8:9e:
         b4:d6:b9:6a:70:60:f2:f0:11:da:1f:8a:e5:28:ab:20:6a:86:
         79:15:ab:65:26:c6:78:56:6a:0d:69:1b:a3:3d:26:32:a7:b0:
         ef:29:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----