This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
File:                     4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json)
Hash identifier:          0K56HVw86dVfTu0MbtIQVR1Xeaw6kYIQtQwzY/T9DDY=
Subject key identifier:   C5:9F:49:1B:91:44:AF:83:79:44:5D:C3:27:03:C1:DC:9F:5A:64:73
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       0C41D5C2F19BF9A6F310A5369A889C7F8CC93B1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
Manifest number:          0153
Signing time:             Mon 22 Dec 2025 22:53:29 +0000
Manifest this update:     Mon 22 Dec 2025 22:48:29 +0000
Manifest next update:     Sun 28 Dec 2025 12:01:29 +0000
Files and hashes:         1: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=)
                          2: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=)
                          3: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=)
                          4: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=)
                          5: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: eLoyNpkAQgScGGdyHYalJzS/RwXEhTci3O3RjQ/61E4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 07:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:d5:c2:f1:9b:f9:a6:f3:10:a5:36:9a:88:9c:7f:8c:c9:3b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Dec 22 22:48:29 2025 GMT
            Not After : Dec 28 12:01:29 2025 GMT
        Subject: CN=C59F491B9144AF8379445DC32703C1DC9F5A6473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:d3:df:41:24:ac:66:42:1b:86:9a:fb:5b:
                    19:de:b0:07:39:c7:86:96:3b:32:36:f1:8a:31:8b:
                    fd:49:cf:b4:5b:7d:84:95:09:5a:fb:eb:5e:62:5c:
                    fd:e3:0c:02:9b:8e:09:3e:4e:a5:aa:fd:c9:c4:c6:
                    c2:27:7c:47:6e:0f:95:26:65:3c:ec:16:08:0d:f7:
                    0f:9a:09:c7:a1:a9:91:50:2c:7e:c4:35:12:34:cd:
                    89:05:cb:58:be:a0:68:21:1d:fd:d0:0e:19:7e:fb:
                    d3:e4:e9:02:ae:b5:8b:13:2f:5f:d5:4f:cf:02:86:
                    72:06:ca:0d:8c:96:7e:6a:e6:55:fa:79:bd:36:ce:
                    12:6c:b6:0d:39:75:8a:94:b5:da:8d:92:d5:44:3e:
                    ff:90:50:80:d6:b4:14:cf:85:78:02:e4:f0:5e:e9:
                    e1:37:85:fb:75:69:a7:86:fa:3b:97:69:e5:44:44:
                    24:04:69:fb:f0:50:99:0e:a2:6b:b9:4d:0d:18:63:
                    7f:53:53:aa:65:79:ba:fc:2d:60:7d:de:7b:e5:7a:
                    49:54:76:8f:4a:1b:b3:19:ee:ec:94:7b:03:92:28:
                    62:5a:01:49:f0:1e:93:2f:fb:82:02:da:76:18:50:
                    2d:eb:08:fb:7e:6a:f2:53:02:b3:80:cf:92:4f:5c:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:49:1B:91:44:AF:83:79:44:5D:C3:27:03:C1:DC:9F:5A:64:73
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:e4:09:43:bb:c0:c2:2d:84:c8:93:79:d9:f2:25:f5:87:
         1f:5f:2d:c4:b6:27:66:5a:01:82:61:5e:2b:63:1d:f7:36:98:
         a7:64:e6:bb:c2:9b:ec:05:c9:82:01:ad:f0:e4:10:3c:ff:f7:
         19:da:74:6d:9d:58:77:47:b1:88:18:59:ee:4a:97:90:66:af:
         d4:b5:f0:3e:91:ba:84:57:8e:c5:65:e1:bf:6b:00:fd:46:83:
         a0:fa:8d:e7:14:25:90:df:a4:83:2d:97:93:67:16:42:ef:32:
         6f:2c:4f:48:49:6b:39:7a:80:4e:00:0b:1e:95:e3:cd:50:9d:
         7f:33:f7:f1:10:8b:57:29:84:30:86:2e:57:d5:a6:74:f5:08:
         65:55:18:32:f3:15:65:6f:ee:20:0c:ad:80:ae:6e:33:c0:a7:
         f6:c4:08:95:9f:a1:bc:96:0e:7b:be:39:78:2d:f9:13:ba:78:
         83:e1:fe:ef:09:00:17:09:d4:0d:57:b0:cb:45:59:5e:07:50:
         59:d6:f3:ff:49:90:ba:5e:c6:a7:95:5a:37:18:c4:6b:47:43:
         16:32:f5:8d:08:66:49:69:35:c8:e5:fe:fe:82:67:69:fa:c5:
         35:fc:50:28:67:14:36:70:0f:96:7d:48:27:46:a5:a6:aa:e1:
         68:fd:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----