This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
File:                     2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft (raw, json)
Hash identifier:          RERJnR7GmKxvXAxTI5g/rTzaPSqKtqKEJJW9d5o1qpY=
Subject key identifier:   0F:07:4C:7E:57:58:FB:C3:A0:4B:DA:8D:60:54:B6:48:58:4D:05:A2
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       4479AA4ACF44CA4C980F7EC8EEFAF4CD09799ADD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
Manifest number:          0154
Signing time:             Wed 31 Dec 2025 07:14:22 +0000
Manifest this update:     Wed 31 Dec 2025 07:09:22 +0000
Manifest next update:     Mon 05 Jan 2026 01:30:22 +0000
Files and hashes:         1: 323830363a3330383a3a2f33322d3332203d3e20323635353536.roa (hash: /kQaBwilv0ri685lZejpdpXCYYogLmMC/nAHy3CMwyc=)
                          2: 34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa (hash: TO7zD2brLMB0uuSWWWYzcTbzCkpCH7sN4nUyUFyKP5k=)
                          3: 2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl (hash: Yg8BI0Yq9cLOaJJUT2Mm357v2oN9EdiMGrJu0zMJRJ0=)
                          4: 34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa (hash: Geoz43FH3G0KObZ+Q8JC16GEeZbW4v5B53g+jiuxEac=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Jan 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:79:aa:4a:cf:44:ca:4c:98:0f:7e:c8:ee:fa:f4:cd:09:79:9a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Dec 31 07:09:22 2025 GMT
            Not After : Jan  5 01:30:22 2026 GMT
        Subject: CN=0F074C7E5758FBC3A04BDA8D6054B648584D05A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:28:29:e6:41:d3:89:23:6c:95:3a:86:f7:
                    01:dc:11:96:7f:61:da:f7:83:b9:44:d7:b0:40:d7:
                    b2:b8:b7:f0:65:9e:bc:11:64:0e:5d:77:26:bd:87:
                    47:46:47:1a:72:26:a5:4b:29:59:83:8f:aa:42:f2:
                    42:4b:33:5e:93:ca:30:d1:21:55:86:bf:6d:c9:20:
                    77:63:72:fe:a2:d9:69:ac:03:11:6e:f2:7f:80:20:
                    ed:98:6d:2c:83:ac:9c:2e:46:d6:93:04:58:e5:18:
                    87:13:7a:5f:98:28:91:87:d4:26:b1:1a:7b:d3:dc:
                    33:ef:c7:47:ed:cb:7c:9c:a0:c1:54:4f:f2:62:03:
                    ac:f9:b1:99:84:b8:95:e8:91:1d:d5:d1:d9:c4:51:
                    0d:25:39:58:22:e3:7a:37:42:87:7e:64:4b:58:0d:
                    7c:f4:50:4a:45:98:1a:48:a4:6d:96:92:46:40:34:
                    47:92:56:e8:01:55:57:f0:af:bc:00:6c:a8:d9:84:
                    00:01:c8:26:77:9b:d6:e0:b2:f0:56:6c:5f:70:d2:
                    63:0d:b5:9f:bf:ad:d1:4b:6c:82:1f:53:d0:33:fb:
                    ae:a1:c1:21:84:45:b9:ad:cd:db:9d:7f:3f:fe:13:
                    d7:51:db:4b:c6:8a:01:0d:48:ff:9d:6e:41:27:60:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:4C:7E:57:58:FB:C3:A0:4B:DA:8D:60:54:B6:48:58:4D:05:A2
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:b0:a9:68:08:19:9f:68:0c:17:30:85:ae:7b:78:15:e3:
         76:40:42:08:73:9c:1a:f5:ac:eb:2c:90:e9:a1:64:bf:f5:6f:
         6a:d6:34:85:4d:10:f1:7f:68:ed:4a:ed:64:67:b7:be:d4:92:
         7f:af:29:d4:73:33:18:1d:8c:25:5c:76:38:49:96:a8:66:ac:
         8f:5f:1c:d8:22:db:0b:3a:0c:a0:64:f2:07:15:44:5f:15:c7:
         0e:5c:0d:36:f4:ef:52:3a:b0:40:60:38:ca:6d:dd:79:19:68:
         10:4b:3b:bc:91:65:38:4a:e6:28:5e:f3:2f:e3:4f:7f:ac:d7:
         5f:af:98:b6:15:dc:e3:5d:fd:3a:75:f2:ad:a7:0b:4d:be:f9:
         3e:08:72:89:19:a9:a6:d8:95:27:69:8e:34:4c:84:dc:16:5d:
         5e:9a:e4:a5:79:33:27:13:58:7d:77:36:1c:d7:a5:e1:59:86:
         f8:25:eb:1d:8f:31:fa:66:3d:aa:81:cd:3e:d8:9b:5f:40:13:
         cc:cb:bc:fb:9e:44:f4:9b:6b:02:12:04:2e:f9:71:37:09:07:
         d0:aa:e2:18:ce:08:1b:a7:99:4e:52:a6:42:bb:a1:30:06:34:
         ef:34:39:c6:f8:28:de:3b:5b:d4:08:65:08:f6:13:c4:5c:96:
         c9:cc:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:53:24 2026 by rpki-client