This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
File:                     3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft (raw, json)
Hash identifier:          h8sn0sZO/+oBoFs2x8X8pK/DjXghRK9HFyeC4K15H6Q=
Subject key identifier:   90:F3:13:C3:F7:5E:C3:DF:A8:F3:69:2B:9B:07:50:FC:97:E2:9F:C8
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       482BC3C2491EC2D3829CA9AE50D8B44A6994622C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
Manifest number:          0143
Signing time:             Fri 19 Dec 2025 12:21:53 +0000
Manifest this update:     Fri 19 Dec 2025 12:16:53 +0000
Manifest next update:     Wed 24 Dec 2025 18:28:53 +0000
Files and hashes:         1: 3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa (hash: rWNZM86mlMvFeBPwiLhtW6J0yDbT9/rGpu9muLIHB4A=)
                          2: 3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa (hash: iRJbi0yjSxdfBQzKI3WIxgzFX+fezx7oIAXPWtT5ufo=)
                          3: 3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl (hash: iQGJxroLaSY18pDOm8oJ1xn2W30Q/iUeVrcPf6ELZeg=)
                          4: 3138312e3139312e32372e302f32342d3234203d3e203532343235.roa (hash: cr3RE5JiEtIeT+Ru9AsHTbsdUt1AVS3Jo/pX0waIJHM=)
                          5: 3138312e3139312e32352e302f32342d3234203d3e203532343235.roa (hash: /8X80f0D2T+Z7BPNIwmdZXDZ8PeOKgVJn1i/1T3KLiE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2b:c3:c2:49:1e:c2:d3:82:9c:a9:ae:50:d8:b4:4a:69:94:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Dec 19 12:16:53 2025 GMT
            Not After : Dec 24 18:28:53 2025 GMT
        Subject: CN=90F313C3F75EC3DFA8F3692B9B0750FC97E29FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:ed:e7:a0:e0:9f:7b:87:71:48:85:54:ce:
                    df:7e:13:f4:92:9b:e1:a3:9d:71:06:ba:77:4c:41:
                    58:32:7b:ff:cb:46:6d:d9:6b:ae:6f:fe:b2:01:bd:
                    3f:36:2d:dc:ee:bd:2c:63:c4:5a:b0:81:98:aa:9c:
                    24:e3:e6:70:21:7c:03:5d:1b:b6:8b:54:35:dc:86:
                    5d:47:5c:fc:db:6f:12:93:e2:6a:39:fa:ef:a6:60:
                    a3:25:55:ad:8b:9c:f6:14:63:96:14:0f:e3:ad:29:
                    0b:cf:00:bc:de:00:f6:57:62:4c:e4:33:74:07:17:
                    86:9e:21:97:8a:f3:bc:8c:56:bf:d8:b4:19:4e:c1:
                    4f:ae:c4:0f:0e:d9:0e:f2:5c:99:c8:c9:e1:60:4e:
                    85:57:d0:ec:01:6e:cd:46:2b:5f:2e:01:96:a4:6a:
                    6d:8f:b4:06:03:05:c9:36:a3:73:4c:a3:fc:6a:aa:
                    63:a2:49:b2:a6:b6:81:1a:1b:73:3b:e1:33:a7:ef:
                    47:e9:83:e2:a8:59:4f:43:92:a6:e9:0a:d9:3b:fc:
                    fb:8c:50:54:a4:c0:e3:41:04:19:ba:28:0e:38:25:
                    40:c7:92:66:36:57:cd:92:d3:66:45:91:2f:08:61:
                    dd:27:0b:bb:26:6b:2d:f5:75:11:1e:32:3d:9f:12:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:13:C3:F7:5E:C3:DF:A8:F3:69:2B:9B:07:50:FC:97:E2:9F:C8
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:a2:70:80:cc:77:ce:44:02:71:bc:61:d7:f8:4c:cf:43:
         ad:ec:a7:79:c8:bc:c6:9a:d7:a7:ec:df:80:ff:5e:78:56:46:
         1c:8c:a8:e9:1e:49:8d:08:6d:08:2a:e6:ec:84:61:3c:36:01:
         da:d1:8b:87:02:56:a3:64:62:53:65:3f:9d:65:0d:ed:1f:e0:
         29:85:17:8d:a4:0b:af:d7:e3:18:e2:8b:0f:90:e0:4d:e6:bd:
         a2:7d:c8:7b:58:70:7b:73:e4:4f:e5:46:01:9d:93:a5:4d:79:
         d5:64:d8:8d:c0:bf:ae:fe:bc:4c:1b:8e:0a:73:6f:84:71:49:
         17:db:a3:9c:8e:cd:a6:6c:ae:e2:91:08:df:b1:7c:d1:8f:9c:
         cd:6c:61:fb:d2:58:16:17:ac:91:36:fe:93:e2:01:74:75:ff:
         3b:be:c6:e6:c7:8c:3b:98:b3:be:08:7c:b4:d6:d4:a4:60:db:
         b2:24:46:12:d5:41:6b:2e:a9:fd:e1:87:07:50:c2:33:8f:d2:
         42:78:1f:8d:cf:d3:e5:a7:f5:58:21:bb:ed:03:c7:b3:20:2e:
         69:e8:0d:ed:00:20:ab:f9:57:a4:0e:f9:34:10:65:ef:53:cb:
         b0:f7:bc:74:83:98:bb:5c:ab:50:82:d3:b3:4d:98:6d:0a:2e:
         07:5f:2d:66
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSCvDwkkewtOCnKmuUNi0SmmUYiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwNkYwQTVEM0YwQ0ZEODRDRjFBODFGMTJENUUzQzc2
MjNFQ0Q3NjAeFw0yNTEyMTkxMjE2NTNaFw0yNTEyMjQxODI4NTNaMDMxMTAvBgNV
BAMTKDkwRjMxM0MzRjc1RUMzREZBOEYzNjkyQjlCMDc1MEZDOTdFMjlGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0W+3noOCfe4dxSIVUzt9+E/SS
m+GjnXEGundMQVgye//LRm3Za65v/rIBvT82LdzuvSxjxFqwgZiqnCTj5nAhfANd
G7aLVDXchl1HXPzbbxKT4mo5+u+mYKMlVa2LnPYUY5YUD+OtKQvPALzeAPZXYkzk
M3QHF4aeIZeK87yMVr/YtBlOwU+uxA8O2Q7yXJnIyeFgToVX0OwBbs1GK18uAZak
am2PtAYDBck2o3NMo/xqqmOiSbKmtoEaG3M74TOn70fpg+KoWU9DkqbpCtk7/PuM
UFSkwONBBBm6KA44JUDHkmY2V82S02ZFkS8IYd0nC7smay31dREeMj2fEmclAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUkPMTw/dew9+o82krmwdQ/Jfin8gwHwYDVR0j
BBgwFoAUPQbwpdPwz9hM8agfEtXjx2I+zXYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjJENERDNDIwQzRDMzk3OTBCQzJDMDNENTEyNTVEMEEx
QzAxOTMzRjM3QzI4REMwNzQwNTk4NThCMDA1NzNFLzAvM0QwNkYwQTVEM0YwQ0ZE
ODRDRjFBODFGMTJENUUzQzc2MjNFQ0Q3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDA2RjBBNUQzRjBDRkQ4NENG
MUE4MUYxMkQ1RTNDNzYyM0VDRDc2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkYyRDREQzQyMEM0QzM5NzkwQkMyQzAzRDUxMjU1RDBBMUMwMTkzM0Yz
N0MyOERDMDc0MDU5ODU4QjAwNTczRS8wLzNEMDZGMEE1RDNGMENGRDg0Q0YxQTgx
RjEyRDVFM0M3NjIzRUNENzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlvaJwgMx3zkQCcbxh1/hMz0Ot
7Kd5yLzGmten7N+A/154VkYcjKjpHkmNCG0IKubshGE8NgHa0YuHAlajZGJTZT+d
ZQ3tH+AphReNpAuv1+MY4osPkOBN5r2ifch7WHB7c+RP5UYBnZOlTXnVZNiNwL+u
/rxMG44Kc2+EcUkX26Ocjs2mbK7ikQjfsXzRj5zNbGH70lgWF6yRNv6T4gF0df87
vsbmx4w7mLO+CHy01tSkYNuyJEYS1UFrLqn94YcHUMIzj9JCeB+Nz9Plp/VYIbvt
A8ezIC5p6A3tACCr+VekDvk0EGXvU8uw97x0g5i7XKtQgtOzTZhtCi4HXy1m
-----END CERTIFICATE-----