This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft
File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json)
Hash identifier: GQO2XMI44nWQZBzX1nUoN39wmsW2NaCME6RHZUOJ28w=
Subject key identifier: 98:E5:C3:EC:05:01:12:BC:64:1B:39:1C:28:32:58:50:82:AC:86:30
Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5
Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5
Certificate serial: 0788C79B6B2E5953423BF5CBCD845C86B7A1084B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft
Manifest number: 0142
Signing time: Sat 20 Dec 2025 00:59:11 +0000
Manifest this update: Sat 20 Dec 2025 00:54:11 +0000
Manifest next update: Thu 25 Dec 2025 08:32:11 +0000
Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: yutI/EyzfALKhQNukTjSPRZNHMy7NeCs7zzIj4nOCkI=)
2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl
rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 08:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:88:c7:9b:6b:2e:59:53:42:3b:f5:cb:cd:84:5c:86:b7:a1:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5
Validity
Not Before: Dec 20 00:54:11 2025 GMT
Not After : Dec 25 08:32:11 2025 GMT
Subject: CN=98E5C3EC050112BC641B391C2832585082AC8630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:33:68:96:07:2e:6d:d9:d2:81:9e:53:9d:
97:63:96:ac:81:51:b4:77:77:04:e6:4b:4c:24:40:
0c:92:ee:63:4b:24:ee:3e:78:b9:3c:fc:21:92:60:
8e:08:b0:28:04:aa:00:49:bc:54:91:09:9d:a3:d0:
a8:29:e8:1d:1e:b6:f0:77:e8:93:19:25:cd:17:2d:
c7:61:f1:14:e3:0d:6b:5e:bb:25:90:b5:1f:0e:4d:
99:8b:04:58:c9:01:fa:81:23:15:a7:50:ae:bb:39:
32:e4:51:3c:48:53:b9:72:da:f2:15:f5:85:1b:eb:
50:82:d0:41:4c:89:bd:e2:3a:c3:9f:d5:29:cb:73:
b3:c9:4d:72:53:21:37:ae:b4:33:61:ed:38:8a:8e:
27:14:1e:c2:f9:0e:c9:67:a9:dd:02:b3:ca:c4:98:
ae:04:f6:40:80:3f:0c:ef:e8:24:e6:9f:bf:b1:24:
5b:e1:f1:f5:27:dc:68:9c:80:e3:c4:5c:47:ba:09:
cc:a6:4c:5a:d8:67:ab:6e:d3:ca:c2:4d:8b:20:ff:
01:11:84:30:7c:17:19:64:c7:f7:cf:9d:19:01:71:
2e:2b:91:20:96:14:30:ac:f2:28:2c:b3:62:8f:12:
f1:4e:9b:29:a7:48:4f:4b:16:ca:64:f9:36:4e:9b:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:C3:EC:05:01:12:BC:64:1B:39:1C:28:32:58:50:82:AC:86:30
X509v3 Authority Key Identifier:
keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:66:e2:7c:bf:bb:b2:9b:e4:45:a5:08:31:e2:77:4e:2b:6e:
31:a7:45:80:b0:e3:c8:1b:a2:18:f9:98:15:56:93:35:b4:3c:
2a:0c:b3:d0:60:84:bd:49:0b:25:b1:8b:6f:67:fa:eb:bf:41:
68:6a:7c:12:dc:99:63:40:c4:42:24:a5:3b:91:f9:45:4d:7f:
75:0c:a0:20:03:d7:e5:57:34:dc:bf:9c:3d:29:db:49:ad:9a:
7f:5a:2f:25:b5:61:cd:a6:fc:92:ae:37:34:ee:b5:f1:83:04:
8b:3b:07:25:be:45:97:6d:1e:fb:8d:a8:fc:3e:be:af:1e:24:
2c:05:7e:5f:bf:ba:ce:40:2b:60:47:37:fe:03:ce:2b:7f:cb:
4d:e8:e9:7d:11:02:b4:d2:88:61:61:ea:39:ae:8f:59:50:66:
24:83:14:21:76:50:06:59:ee:d1:e7:51:7f:7b:68:0d:8c:bd:
af:22:73:a8:b7:9d:38:e0:ab:17:aa:cd:01:f9:2d:0e:d6:c2:
31:09:d9:e8:ad:c8:03:e4:ac:c3:28:18:2a:79:51:d6:c1:22:
af:16:13:41:3d:37:d0:4e:df:d9:85:dc:f2:d9:ab:47:60:0b:
7a:1b:4c:cd:fc:20:58:c6:10:f4:cc:7f:42:11:21:8a:ec:b1:
d8:e0:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:43:19 2025 by rpki-client