This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
File:                     A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft (raw, json)
Hash identifier:          pm9NwpvhNo/PK5QQ/kEOY6aziFYP6IA+6Nxo94EhHMA=
Subject key identifier:   E3:C7:41:A1:AF:4C:8B:45:6D:1B:2A:3F:A0:A8:E6:8A:E9:3F:33:C8
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       34DA84740A3ED36501C9F01E6B44BFD98274CB1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
Manifest number:          0142
Signing time:             Fri 19 Dec 2025 18:10:09 +0000
Manifest this update:     Fri 19 Dec 2025 18:05:09 +0000
Manifest next update:     Wed 24 Dec 2025 21:47:09 +0000
Files and hashes:         1: 34352e3136332e33362e302f32322d3232203d3e20323637363830.roa (hash: mYLeR814mRwYvAEbb+Y+7Y1Q+oZ47ciYXKINWZfiSB8=)
                          2: 34352e3136332e33382e302f32342d3234203d3e20323637363830.roa (hash: Y3tNshWTORR4A57XRaKIty2c/MO6tw+jncZRdE0XOOs=)
                          3: 34352e3136332e33362e302f32342d3234203d3e20323637363830.roa (hash: 1DwnOznFKZ1jDk6nN7IUsF9qcRjTdT49vErOxqecqTo=)
                          4: 34352e3136332e33372e302f32342d3234203d3e20323637363830.roa (hash: MGPQH3Im9gkkm+0Bn9ltqZawLZU5FUV33GSF8YICThg=)
                          5: A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl (hash: PypqoOT4M6kAT4mY5Y/V9/Blh4FORFM19Yty1TTcokc=)
                          6: 34352e3136332e33392e302f32342d3234203d3e20323637363830.roa (hash: 2JT1s9b02udqv1xXocSTYJ7G7ikJiarSvMcL0a1tAiE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 21:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:da:84:74:0a:3e:d3:65:01:c9:f0:1e:6b:44:bf:d9:82:74:cb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Dec 19 18:05:09 2025 GMT
            Not After : Dec 24 21:47:09 2025 GMT
        Subject: CN=E3C741A1AF4C8B456D1B2A3FA0A8E68AE93F33C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:d0:15:84:3a:85:4f:5e:eb:2b:5f:19:b2:
                    4c:7d:75:c2:e1:6b:83:b6:e9:4e:de:25:90:95:be:
                    45:5c:f5:e5:07:91:5b:f0:9b:6e:01:0d:62:83:e8:
                    08:ab:f2:06:67:89:9d:57:79:fa:16:d2:3a:1a:d4:
                    a5:0e:1e:3c:47:64:da:6e:ce:85:d9:50:13:84:a5:
                    b9:93:29:ba:53:18:d1:01:b7:c8:56:47:a3:df:2e:
                    fa:7c:90:e7:7f:18:62:b1:8e:2c:bf:5c:06:b6:ee:
                    e0:93:00:63:d8:d7:2d:75:02:91:95:ac:66:e0:a0:
                    00:1b:ae:f7:3d:5f:59:f8:c1:2e:4b:c2:02:09:2e:
                    32:1f:6b:89:de:41:68:df:b1:36:49:97:06:98:f8:
                    b9:0b:ec:d4:db:05:f2:50:66:34:cb:91:ac:7d:ef:
                    76:1d:35:78:7b:74:6c:94:08:aa:6c:8c:91:fd:66:
                    49:24:dc:05:b6:61:21:f0:7e:b2:92:f6:da:fc:f5:
                    44:05:ae:24:69:a9:76:a7:57:99:de:cf:fa:0d:ee:
                    f7:5c:bb:aa:ca:5b:a6:2a:aa:1e:d9:56:28:1f:bb:
                    1d:f2:df:49:50:12:fb:67:22:97:68:bb:54:99:7d:
                    4b:da:9d:9f:66:27:fb:47:d1:68:21:d9:52:c4:db:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:41:A1:AF:4C:8B:45:6D:1B:2A:3F:A0:A8:E6:8A:E9:3F:33:C8
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9c:1e:82:5f:80:c2:a9:d2:0b:8e:42:2e:a0:42:dc:62:79:
         10:22:fa:64:e6:01:74:d0:a8:dc:71:ef:a5:7b:e5:8c:60:e4:
         fe:cf:c0:10:41:0e:84:d3:9d:b9:db:1e:d2:c1:07:ba:e1:f2:
         5d:44:86:43:7b:50:cf:31:85:89:24:4a:ef:53:6a:23:f6:5c:
         7f:e5:1b:dd:df:50:b5:e2:95:88:2d:b9:08:98:5b:98:a3:64:
         29:59:3a:0e:7d:92:86:5e:0d:65:cc:35:46:42:7d:3a:71:36:
         c3:82:1f:ab:ef:d4:50:22:58:08:c8:0c:46:e5:30:12:c8:c1:
         8e:27:bb:46:90:a2:42:8a:fc:2e:09:e1:bf:20:31:0b:63:3e:
         49:57:6e:af:e2:35:0e:c8:b0:26:25:f4:1e:b6:0e:55:69:c6:
         14:37:c5:59:2a:35:7e:79:bd:f9:af:f3:c2:22:c7:6d:59:44:
         16:38:cf:9f:35:1b:de:c9:0d:39:ca:6b:fe:b1:bd:e5:c4:1a:
         25:2b:64:52:e8:ff:26:84:91:4a:fe:81:69:02:3c:2a:96:e9:
         8f:fb:59:21:91:9d:36:98:f7:24:05:52:57:c5:c6:d3:62:75:
         fb:4a:fd:2d:42:b4:c3:65:d9:a8:ce:b3:50:13:6a:86:e5:3f:
         aa:67:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:34:27 2025 by rpki-client