This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
File:                     8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft (raw, json)
Hash identifier:          BrFg664ndU0FYTQIzgIQmbE/huEEn6kn3Qy/P4KXkpk=
Subject key identifier:   5D:B9:A1:E9:77:2F:90:A2:FA:38:F3:42:E3:81:03:C1:23:30:F7:E2
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       5F726815980BDC41E904235BAAE36C79ACAA9171
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
Manifest number:          0152
Signing time:             Sun 28 Dec 2025 09:35:11 +0000
Manifest this update:     Sun 28 Dec 2025 09:30:11 +0000
Manifest next update:     Sat 03 Jan 2026 02:17:11 +0000
Files and hashes:         1: 34352e3233392e34342e302f32322d3234203d3e203631353132.roa (hash: pR11TWw7KwD32ZjkppNjXF7VhBow5upeJmBppmcB+rA=)
                          2: 34352e3233392e34342e302f32322d3234203d3e203532343638.roa (hash: W1P0JJHyVrkCN2RvwUkvswikCLB04L6FchuhIvxucGI=)
                          3: 34352e3233392e34342e302f32322d3234203d3e20323633373137.roa (hash: delOFgSRNeHIObr57AoKhUMDVOIzwRzEkeje0U8nQRE=)
                          4: 8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl (hash: eOgkTVtwvgixfaLWM4/LmMRCXVJ3O/mtVYTvRD5UG3Y=)
                          5: 34352e3233392e34342e302f32322d3234203d3e20323636383538.roa (hash: odM7zbtJXl9RM8ZkLhjcgrYnToyisA/RjF53i3W/C5I=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 14:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:68:15:98:0b:dc:41:e9:04:23:5b:aa:e3:6c:79:ac:aa:91:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Dec 28 09:30:11 2025 GMT
            Not After : Jan  3 02:17:11 2026 GMT
        Subject: CN=5DB9A1E9772F90A2FA38F342E38103C12330F7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:2f:1c:ed:3f:eb:4f:da:ca:26:65:54:e0:
                    6e:91:90:6e:be:76:93:09:67:c1:96:8e:df:cb:9b:
                    c1:71:83:00:9b:bb:da:03:bc:e2:e1:c7:92:75:95:
                    2c:e0:85:27:85:28:a1:48:cb:6e:aa:c6:4e:cc:e0:
                    92:70:f1:86:d7:b7:19:ce:74:4c:3d:3d:d8:aa:61:
                    0c:cf:87:0f:f7:93:55:27:16:ac:e4:29:3e:85:41:
                    29:f8:1e:32:ac:87:bd:7b:1c:6c:37:88:65:11:e9:
                    17:8a:8a:f0:65:6c:08:eb:ed:56:2f:ce:50:a3:80:
                    e1:f4:31:6f:6c:53:1b:c2:70:9b:b5:b2:84:75:d3:
                    83:96:48:13:92:84:3c:ef:87:00:8e:39:3e:3a:6b:
                    5c:3f:e2:c3:14:ca:d7:b7:0f:62:f4:e6:e4:38:c5:
                    19:60:29:41:74:d7:72:c4:75:70:e4:76:ce:67:96:
                    f0:4c:6c:94:cb:ab:75:cd:d1:f8:e4:c9:0f:2d:44:
                    50:e4:36:52:88:22:aa:d3:f5:69:01:88:5b:9b:1e:
                    cc:d2:53:3f:f2:f3:88:a6:0b:e5:c4:eb:f9:5c:f6:
                    ca:3a:63:db:ff:d8:2f:be:2b:2c:5c:9f:c8:1c:f5:
                    7a:1f:9b:19:a0:b2:88:05:e6:09:18:1c:7d:45:05:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:A1:E9:77:2F:90:A2:FA:38:F3:42:E3:81:03:C1:23:30:F7:E2
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:2a:a2:50:bd:7a:c6:9d:3b:15:8b:05:2c:7d:cb:6e:f0:
         21:20:f8:bc:84:e4:de:fb:bf:ba:16:1b:bf:ef:f1:b2:a1:42:
         6e:30:37:d5:e9:1a:17:90:c1:2f:41:f4:5b:5a:3f:cd:cb:3f:
         ea:64:f9:b9:41:c8:01:b6:4d:27:5b:94:21:5f:b6:23:c9:cd:
         c9:da:69:d2:9e:3d:a9:df:c5:a9:79:81:61:6e:fe:95:65:1b:
         93:14:67:ad:7c:b2:e6:6f:0e:21:4c:00:c3:fd:db:b1:52:17:
         b2:9b:3f:14:2a:05:58:8d:6c:1e:2a:23:29:27:1a:a4:72:9f:
         e7:45:ed:25:ca:bb:02:f6:ac:d3:3e:7b:32:1d:b5:45:52:bd:
         34:19:09:69:b9:ad:1d:a4:89:b6:4a:fe:60:e8:88:3c:f2:48:
         86:ea:c3:7f:cd:e2:1b:53:2a:6f:d5:c9:18:45:77:5d:19:e5:
         49:93:ea:78:04:ac:41:9b:7b:33:ed:f4:a8:83:ee:09:3d:20:
         78:47:ac:c8:50:d5:4b:d5:ea:79:8f:7a:9c:e3:20:35:71:fb:
         85:45:59:db:6e:06:b7:72:de:d3:f6:48:89:65:3f:ef:34:6d:
         87:1a:30:86:bd:86:6c:7e:d7:6e:7a:70:56:37:64:d6:11:8b:
         24:c1:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----