This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
File:                     D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft (raw, json)
Hash identifier:          hoy+EWpELOZlh+phKle0foYB1UMnT7aSoaGw70Vevi4=
Subject key identifier:   F1:8F:83:DA:00:44:39:F8:67:7F:B9:1C:7D:B7:EF:3A:00:14:47:D9
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       3BCE9ABD245D621D05E76EB8C7827DE304F1DF91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
Manifest number:          014D
Signing time:             Fri 19 Dec 2025 17:09:35 +0000
Manifest this update:     Fri 19 Dec 2025 17:04:35 +0000
Manifest next update:     Thu 25 Dec 2025 04:23:35 +0000
Files and hashes:         1: 3230302e31302e3135362e302f32342d3234203d3e20323634363930.roa (hash: FZ/51zNLl/FLdreyLVD1pY/OLyIgpCvENTzIyty2FGE=)
                          2: 3230302e31302e3135372e302f32342d3234203d3e20323634363930.roa (hash: dS443k0jb6FeJ863iJHXxVN9wcNoJdplU/1MuXz/wpg=)
                          3: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl (hash: hFoSXVmFDqvR1ED0BjP6v/LIFdsz/CBoKvI4fKRUTEY=)
                          4: 3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa (hash: 6L0kN/X+iONWYp2Uoh3YSZXTDEQqsdzRjCElRBAJI/g=)
                          5: 3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (hash: bDGvSgzXepfqaBjNqpdJ8j8/CE+Aq0NxQh0D//tkdsc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ce:9a:bd:24:5d:62:1d:05:e7:6e:b8:c7:82:7d:e3:04:f1:df:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Dec 19 17:04:35 2025 GMT
            Not After : Dec 25 04:23:35 2025 GMT
        Subject: CN=F18F83DA004439F8677FB91C7DB7EF3A001447D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:29:a3:91:4e:fa:70:3c:32:68:cc:7d:f1:
                    7b:b8:a4:68:13:ec:2e:62:cb:57:54:11:2a:70:82:
                    20:6c:9e:78:b1:9e:e6:74:f3:e2:a9:8d:07:22:ec:
                    f8:39:cb:89:f5:9e:93:3b:e2:5c:43:cb:b0:71:fd:
                    f2:7c:32:83:07:1e:96:01:83:89:df:8c:41:20:c6:
                    55:32:76:5c:49:6f:08:7a:54:f0:67:24:2d:8a:5d:
                    c2:ee:7e:a1:3b:a7:e0:6a:1c:3f:de:c9:96:be:d8:
                    62:26:bb:3c:59:17:02:04:e7:cd:7c:da:50:3a:21:
                    c7:bd:04:82:d4:a8:90:d9:3d:51:88:41:23:8e:d7:
                    79:e3:c9:f1:63:ed:dd:53:c6:c8:5c:9a:85:e2:1a:
                    2b:4f:58:76:bb:ee:a3:db:d2:c8:92:43:7f:df:da:
                    eb:8c:60:19:73:bf:60:b5:ea:ce:bc:d4:61:5b:aa:
                    37:d9:49:ee:d9:0d:22:a9:7c:2d:05:76:a6:68:28:
                    06:d4:36:4a:75:a8:04:c3:3d:6d:c5:b0:85:d6:6c:
                    4f:ed:21:71:1c:14:41:ee:84:c3:af:5b:2b:d4:45:
                    22:08:b6:14:70:86:8c:79:0b:cc:fe:1a:0e:2b:4c:
                    e8:33:15:ce:d6:69:8e:c9:92:42:30:31:fb:2d:d2:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:83:DA:00:44:39:F8:67:7F:B9:1C:7D:B7:EF:3A:00:14:47:D9
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:46:96:be:4d:2d:29:59:45:3e:61:22:44:e4:32:4d:8f:35:
         86:4c:4f:99:2a:f8:fb:14:74:c0:34:f4:79:2b:c4:6d:e1:29:
         ca:2a:45:99:60:83:40:88:39:54:5d:a9:8a:eb:96:f2:14:d1:
         25:5c:1c:b4:39:93:91:d4:2c:8d:e2:ad:ad:4b:91:c4:76:b5:
         83:56:4e:95:1c:c6:e8:35:0f:79:08:0a:7c:c2:18:be:9a:28:
         a0:81:15:60:1f:00:0e:26:f8:ff:b2:0e:41:0e:e5:42:4a:50:
         eb:1f:2e:1a:3b:c4:e9:fa:18:01:ac:88:34:f5:28:23:d0:9d:
         7b:fc:28:01:6f:f8:41:ec:5f:63:23:05:8a:53:48:31:81:56:
         75:33:ac:c0:b1:ed:85:ec:dc:92:44:89:2b:8a:be:74:d4:3c:
         14:f5:45:f5:81:6e:bf:6a:51:f8:8f:be:83:42:00:8c:ac:e2:
         4a:3c:a2:6c:08:7b:14:e0:e5:7f:37:23:f3:51:c2:e7:cd:ee:
         7d:85:62:4d:39:cd:89:98:91:56:ce:e7:f7:1b:2f:0d:8d:c8:
         33:b9:87:90:7f:a5:7e:c4:1c:b7:fc:50:cc:99:96:93:41:80:
         9d:8f:f8:4c:7e:66:24:cf:1b:de:ce:a4:1f:6b:99:2a:52:83:
         15:fc:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----