This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
File:                     DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json)
Hash identifier:          3Ta3AZQ5LTBOpaoHZ+1qE6aowzOqp6uT8d8VfxfuKKw=
Subject key identifier:   F2:5B:E0:E6:D9:98:1C:FE:1D:A1:5E:F8:09:8A:AB:64:5C:9E:B9:76
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       39D8ECA5DB94F3EEF2CC83F9E6390F9FA7DA258C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
Manifest number:          0156
Signing time:             Wed 24 Dec 2025 17:45:04 +0000
Manifest this update:     Wed 24 Dec 2025 17:40:04 +0000
Manifest next update:     Tue 30 Dec 2025 08:06:04 +0000
Files and hashes:         1: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=)
                          2: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=)
                          3: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=)
                          4: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=)
                          5: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: CBe2ObpsHX26YzsYDyQdab1vl5n/bQI46NR2NvhBIXk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:ec:a5:db:94:f3:ee:f2:cc:83:f9:e6:39:0f:9f:a7:da:25:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Dec 24 17:40:04 2025 GMT
            Not After : Dec 30 08:06:04 2025 GMT
        Subject: CN=F25BE0E6D9981CFE1DA15EF8098AAB645C9EB976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:5d:07:dc:f8:4e:00:9e:f8:c4:2d:47:5c:
                    f6:3b:92:96:7e:95:30:60:0c:09:d6:57:6f:e8:65:
                    47:3f:09:e1:5c:80:32:31:69:5a:5d:ee:64:03:5f:
                    91:b7:0a:d7:40:ac:f6:bc:53:c5:bb:5c:b8:09:b2:
                    73:0c:55:1f:70:75:26:ca:ba:c0:38:60:94:d0:bf:
                    a3:42:01:38:60:69:bb:1d:50:91:3d:83:ff:9f:c4:
                    8e:46:b4:c0:0f:17:f3:e7:71:5e:b9:12:f7:39:4d:
                    11:e5:3e:58:7b:64:ea:e9:cf:35:fc:61:52:21:40:
                    9c:cb:e3:a5:7c:87:94:f8:86:37:2a:2d:0a:5b:cb:
                    15:65:41:4d:15:7d:af:4f:a0:e7:59:4d:23:f9:ea:
                    d4:43:c1:d9:78:d5:57:94:e0:de:36:11:7c:6b:92:
                    5d:31:d3:0e:04:4d:72:d4:0a:21:ec:e8:1e:ba:76:
                    49:42:64:ee:65:64:80:fb:3b:d8:96:98:90:c6:2a:
                    63:14:92:2c:b9:56:96:13:59:b3:b2:ca:10:1b:e7:
                    9d:d0:b5:9a:f5:37:37:f4:f5:67:58:47:22:3b:d8:
                    9d:92:28:fa:c8:07:8b:c4:8a:fe:65:34:e9:80:3f:
                    fd:21:05:d0:ee:62:16:89:b6:cc:29:4b:93:46:ee:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5B:E0:E6:D9:98:1C:FE:1D:A1:5E:F8:09:8A:AB:64:5C:9E:B9:76
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:fd:38:db:f4:5c:5c:8a:63:d2:e0:33:cf:58:4d:9b:da:
         97:9e:c6:88:6c:dc:89:8b:00:3d:51:58:4d:13:43:6f:ca:7d:
         41:50:80:1d:2c:24:e5:88:ae:48:44:56:57:0a:7e:b1:d9:53:
         98:c0:d9:4b:48:2b:50:2b:4b:c6:8d:5e:5a:57:64:75:76:60:
         a8:00:29:e6:27:61:00:db:89:ae:cb:5f:74:88:24:30:f9:4a:
         c9:bc:a7:89:14:7f:7e:ad:7f:07:df:39:83:6e:b9:94:00:16:
         7b:16:35:98:70:5e:89:e4:e2:08:62:24:ab:46:09:4b:8c:80:
         43:28:6a:63:84:8b:51:f0:f3:18:a1:0d:0a:01:ff:5b:65:a8:
         94:52:01:85:7d:36:46:3d:74:e6:16:05:ac:c4:2f:93:b3:5f:
         86:a0:36:3d:76:48:51:9b:dd:df:b1:76:34:e0:69:f4:f8:61:
         9c:51:11:f7:22:b8:25:02:22:db:79:87:a0:cc:83:7a:cd:01:
         61:68:b1:d7:01:f8:20:92:f1:07:a3:f4:f5:c3:81:71:77:52:
         f0:3b:74:78:b3:5c:8b:10:c0:59:93:c6:ef:c9:04:ea:40:bf:
         dd:de:67:89:22:51:53:f3:1b:07:6c:2c:28:b9:81:68:4e:5c:
         82:47:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----