This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: N9qkRSBYTdCcmYLkp4VBre+Oz+z/ksIqwTnEC9KaXOo= Subject key identifier: 5B:F6:B2:98:45:66:26:C2:E5:8B:14:19:95:93:A2:28:E6:90:08:68 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 2FE9EAE08AC4973685C28C41797CC55AB39BF432 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: A0 Signing time: Fri 19 Dec 2025 00:03:34 +0000 Manifest this update: Fri 19 Dec 2025 00:03:34 +0000 Manifest next update: Tue 23 Dec 2025 00:03:34 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: 9nyP7+JJv9dsQVSDnGOqt4X7mFIy70A6ElsR/8TWEnM=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 083EbNIPLx/FZlgKIk8j1vrc55JmKY8yDiaMatQXzSw=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: +ejao4GbyUcStsDCXJl9TtM+p8jBn0LXnsLdeoJI1sU=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 00:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e9:ea:e0:8a:c4:97:36:85:c2:8c:41:79:7c:c5:5a:b3:9b:f4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Dec 19 00:03:34 2025 GMT Not After : Dec 23 00:03:34 2025 GMT Subject: serialNumber=389bb9d836b8c526aba69f9ffb7f6a154c81b01eb26ec8ff176fd300677e52de, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:17:e1:8c:39:52:dd:87:61:0f:5e:a1:bc: 99:fb:f3:98:31:9c:ce:e1:d6:40:ef:04:b3:2e:d0: 10:35:0b:8d:aa:e3:47:84:10:4d:b6:80:a0:3c:56: b4:a7:e6:f5:3f:a2:74:52:81:e1:61:91:19:36:f6: b4:62:f5:14:96:ca:9e:94:0c:16:20:4c:3f:7c:a4: 31:9e:41:b6:3f:70:b0:8a:56:c3:25:c8:e8:3d:fa: d5:a6:0c:c0:f6:f2:b1:e4:81:c7:31:68:f1:87:48: 9f:b9:b2:2c:cb:80:9a:8a:7c:00:d8:ed:fe:4f:22: 4a:f0:90:7d:88:91:48:9c:c6:c8:ae:68:03:55:ea: e1:74:9f:2b:87:5e:69:5c:c9:62:26:50:8f:d0:28: c6:88:69:a0:b7:b6:0c:fb:46:c1:0a:27:35:fb:e5: 58:7a:54:a2:58:9a:8e:2f:6f:d5:f8:61:e4:9d:d9: 34:bf:52:13:74:a9:e7:bb:84:32:fa:7a:3c:b8:7d: 29:55:63:c1:67:80:f7:0f:78:c6:12:94:8f:f0:e5: d2:6a:43:37:44:d2:d9:af:ca:9c:8f:9c:cc:91:ba: c7:7f:87:6b:6e:e0:06:a5:6b:4a:bf:d9:c9:33:6c: 86:b9:73:d9:36:bd:cb:d3:be:b1:8c:05:a9:ac:ec: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:B2:98:45:66:26:C2:E5:8B:14:19:95:93:A2:28:E6:90:08:68 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:06:51:fa:9b:57:ab:9b:a4:a8:0a:84:b9:4d:8e:c8:ca: 36:67:07:0f:9d:e0:59:10:d6:7c:cc:ad:5c:0a:ce:da:ad:4f: 64:57:f6:0e:bb:5c:6d:73:9a:3a:ce:55:33:54:33:ee:84:d7: ff:aa:0c:4c:fb:9f:00:d4:b4:5f:d2:14:0a:c0:37:ca:88:5f: 00:67:bb:ce:94:1c:ad:b1:9a:0b:27:42:ed:27:8e:ef:32:db: 3d:78:7d:a8:c4:a1:c2:6a:5a:5d:40:a3:38:f6:53:cf:86:e2: 18:4f:82:0e:5c:10:eb:ca:32:21:b9:64:f1:c2:12:55:d2:14: 43:ee:8c:fd:29:ec:61:9a:3c:40:25:92:c1:dc:14:63:25:47: 5e:b0:c3:f8:3c:cb:92:a3:a0:8a:11:d3:c1:34:a5:38:07:9b: c8:bb:cb:4a:a3:73:7b:08:59:64:f0:e6:c9:a5:90:9d:64:94: bb:27:52:d9:96:fd:52:35:1d:72:b9:dc:ba:3e:5d:b4:96:a2: 15:31:2c:97:a7:79:b1:c5:64:79:1b:b5:8e:5b:41:7e:b6:30: 39:a0:d0:3a:0f:3a:36:33:d4:0d:b3:f5:29:e9:25:91:25:5b: 65:68:6b:dc:17:4f:0c:66:9c:82:41:42:73:c8:fc:4c:8f:92: 5b:b6:84:fa -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUL+nq4IrElzaFwoxBeXzFWrOb9DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTEyMTkwMDAzMzRaFw0yNTEyMjMwMDAzMzRaMHoxSTBHBgNV BAUTQDM4OWJiOWQ4MzZiOGM1MjZhYmE2OWY5ZmZiN2Y2YTE1NGM4MWIwMWViMjZl YzhmZjE3NmZkMzAwNjc3ZTUyZGUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnoF+GMOVLdh2EPXqG8mfvzmDGczuHWQO8Esy7QEDULjarjR4QQTbaAoDxW tKfm9T+idFKB4WGRGTb2tGL1FJbKnpQMFiBMP3ykMZ5Btj9wsIpWwyXI6D361aYM wPbyseSBxzFo8YdIn7myLMuAmop8ANjt/k8iSvCQfYiRSJzGyK5oA1Xq4XSfK4de aVzJYiZQj9AoxohpoLe2DPtGwQonNfvlWHpUoliaji9v1fhh5J3ZNL9SE3Sp57uE Mvp6PLh9KVVjwWeA9w94xhKUj/Dl0mpDN0TS2a/KnI+czJG6x3+Ha27gBqVrSr/Z yTNshrlz2Ta9y9O+sYwFqazsvl0CAwEAAaOCAocwggKDMB0GA1UdDgQWBBRb9rKY RWYmwuWLFBmVk6Io5pAIaDAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyMGUfqbV6ubpKgKhLlNjsjKNmcHD53g WRDWfMytXArO2q1PZFf2DrtcbXOaOs5VM1Qz7oTX/6oMTPufANS0X9IUCsA3yohf AGe7zpQcrbGaCydC7SeO7zLbPXh9qMShwmpaXUCjOPZTz4biGE+CDlwQ68oyIblk 8cISVdIUQ+6M/SnsYZo8QCWSwdwUYyVHXrDD+DzLkqOgihHTwTSlOAebyLvLSqNz ewhZZPDmyaWQnWSUuydS2Zb9UjUdcrncuj5dtJaiFTEsl6d5scVkeRu1jltBfrYw OaDQOg86NjPUDbP1KeklkSVbZWhr3BdPDGacgkFCc8j8TI+SW7aE+g== -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:44 2025 by rpki-client