This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
File:                     CDE9A086136079BC935532C1329B043B4912BF62.mft (raw, json)
Hash identifier:          IaziBIJ5qwUzICJyXCvPWRyVebIjd5ivcb+joJl2KTs=
Subject key identifier:   C9:F8:2F:6F:90:F4:1B:CD:02:62:74:53:76:1D:AE:EE:4F:6A:FE:BB
Authority key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
Certificate issuer:       /CN=CDE9A086136079BC935532C1329B043B4912BF62
Certificate serial:       280C8A3E5775283DF37BA313854C1D909D988278
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
Manifest number:          014B
Signing time:             Wed 24 Dec 2025 18:15:19 +0000
Manifest this update:     Wed 24 Dec 2025 18:10:19 +0000
Manifest next update:     Mon 29 Dec 2025 22:41:19 +0000
Files and hashes:         1: CDE9A086136079BC935532C1329B043B4912BF62.crl (hash: HdAa2RW17dqz5jMxMYhCDBFRgdGAh2oJQNeHPebuJDY=)
                          2: 34352e3138382e32302e302f32322d3234203d3e20323639383333.roa (hash: kHeTSpTYh6OdL0w4DvDN/TDfQuBaK/PDRfAKHxPTS9c=)
                          3: 323830333a636636303a3a2f33322d3332203d3e20323639383333.roa (hash: DAWfUBJxhL/E2Uz/2dU/mnXFUcL+tMpbjshPWq8OILY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:8a:3e:57:75:28:3d:f3:7b:a3:13:85:4c:1d:90:9d:98:82:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE9A086136079BC935532C1329B043B4912BF62
        Validity
            Not Before: Dec 24 18:10:19 2025 GMT
            Not After : Dec 29 22:41:19 2025 GMT
        Subject: CN=C9F82F6F90F41BCD02627453761DAEEE4F6AFEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:79:c6:01:db:bf:4c:64:cb:b4:a3:20:90:
                    45:ed:49:33:aa:d6:7d:24:d9:16:53:af:28:af:2f:
                    69:58:0a:c8:29:89:27:75:75:a3:b3:9b:1b:7d:34:
                    3a:75:c0:11:27:64:1f:67:48:9a:d6:3d:34:e5:42:
                    63:8c:e2:23:6c:12:c3:6d:8d:80:e6:fd:e8:37:e7:
                    8b:e3:10:a0:9d:49:e2:01:06:ff:5f:0e:91:de:cc:
                    62:f0:0c:c9:33:96:47:2c:1b:3f:a1:5f:71:6e:d5:
                    d6:73:cd:7d:ea:ce:40:68:d1:10:33:93:ad:49:4a:
                    e0:0f:f7:d8:e2:96:23:1e:fe:95:f3:18:cc:6b:d8:
                    ca:0e:81:dc:0c:bb:87:e7:a2:ba:a2:fe:b6:5b:88:
                    65:d5:b9:92:64:6a:73:08:14:df:19:8e:21:4f:c3:
                    ca:eb:a0:aa:f9:3b:8e:e5:38:fc:39:0a:d1:1a:5e:
                    2d:e7:bb:c7:b6:c8:d5:3a:d5:7c:f7:1b:40:64:35:
                    fe:bc:71:96:58:15:c5:80:0b:0d:7b:49:f4:d1:d9:
                    13:0d:2e:52:15:05:b7:b3:7f:c0:98:81:de:53:96:
                    2f:40:a7:2b:6b:8b:88:93:9d:82:c4:92:6b:8d:78:
                    38:3a:c6:ec:a7:99:7c:99:25:f1:a7:51:05:18:e0:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F8:2F:6F:90:F4:1B:CD:02:62:74:53:76:1D:AE:EE:4F:6A:FE:BB
            X509v3 Authority Key Identifier:
                keyid:CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0c:00:f8:a7:92:50:c7:40:70:13:db:2d:e7:34:91:9b:33:
         eb:3c:d4:69:45:5f:d5:d5:43:9e:66:a7:99:0b:5b:f9:6b:2f:
         4f:4d:71:0d:e1:c3:d3:fa:93:13:fa:6c:0f:7c:00:31:19:db:
         bd:91:3b:ee:b9:b4:83:b8:a9:29:28:82:8a:4a:1d:61:ca:d7:
         da:34:bd:e8:11:fb:99:07:3e:6f:49:e5:7b:ef:ac:17:bd:66:
         25:9b:79:7f:78:f9:7e:ea:1c:56:92:6a:bb:7f:47:2f:f2:e3:
         6e:67:74:d2:5d:e0:9a:9c:54:43:1b:f1:43:b3:46:8e:c4:fd:
         f8:46:25:2a:6f:ed:82:57:17:24:7c:f6:1e:b7:f5:78:0b:89:
         cb:ad:fb:6a:c6:82:72:b7:9f:ea:1f:18:d8:ad:8a:7a:ce:67:
         df:fa:19:35:5e:9d:c3:f9:47:f3:bb:a7:5a:14:cf:57:7b:01:
         dc:79:60:a8:da:ed:0d:6a:2d:7e:20:86:be:3d:b1:5e:3b:67:
         ad:61:69:d7:15:73:e6:6f:70:22:a8:9a:ef:73:09:ec:71:24:
         bb:57:91:b4:c7:7c:8d:a9:d9:62:dd:ea:29:41:da:53:41:5a:
         5c:a5:2b:5f:de:96:81:7f:ea:a4:8c:53:ea:aa:a0:42:7c:4d:
         91:16:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----