This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
File:                     DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft (raw, json)
Hash identifier:          JKphdy5o2qnJ0+7L27k2D1CO/Mz629R0brgv9BoxHtw=
Subject key identifier:   C0:1E:CF:92:A0:5E:D9:27:7A:EF:63:AE:08:36:A7:8D:56:D6:E7:06
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       1C95D83623AC009856FC9AC78BC7F3047FAB2A08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
Manifest number:          0159
Signing time:             Wed 28 Jan 2026 06:15:56 +0000
Manifest this update:     Wed 28 Jan 2026 06:10:56 +0000
Manifest next update:     Mon 02 Feb 2026 05:20:56 +0000
Files and hashes:         1: 3137392e36302e39362e302f32302d3233203d3e203237393630.roa (hash: sm/tjP/XjIgtW3x2GJlSJDnSKppSiHdqfWH6lI7y/jc=)
                          2: 3139302e3132322e34382e302f32302d3233203d3e203237393630.roa (hash: FHXmoAiUdjenaLl54TG4ZCmuz/gLKKFMr299XCRPdkg=)
                          3: 3230302e34392e3132302e302f32312d3233203d3e203237393630.roa (hash: boVCxlENXha7zIsXOyHQOxXODOg5vWloo3aUQmvUIp8=)
                          4: DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl (hash: FZ8f8jgUXoocdHc1lZOcxOAwCdUaVtpRLgGM/5CsDU4=)
                          5: 3139302e3132322e33322e302f32302d3233203d3e203237393630.roa (hash: NfFFhPiduuF63qp/VSgKBMpTqhsgrw8JhqBExj0SzdY=)
                          6: 323830333a643038303a3a2f33322d3634203d3e203237393630.roa (hash: 4VuVqCqg5NV0Fo7uWo9TI41CWhN6vh3aRKi2g3Y+SZM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:95:d8:36:23:ac:00:98:56:fc:9a:c7:8b:c7:f3:04:7f:ab:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Jan 28 06:10:56 2026 GMT
            Not After : Feb  2 05:20:56 2026 GMT
        Subject: CN=C01ECF92A05ED9277AEF63AE0836A78D56D6E706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:13:f5:47:ef:5c:f9:90:8b:25:11:7b:18:
                    71:63:59:58:5c:2d:bd:e6:fd:6e:67:1e:34:f6:32:
                    9f:fe:c7:b0:0f:a8:98:8b:04:f1:df:e3:d8:4c:ff:
                    e3:fa:38:25:b9:36:6c:53:4a:2b:63:37:6a:7a:01:
                    d6:68:6f:4b:df:64:77:ae:80:02:3e:b0:8c:e6:ae:
                    8b:2a:a5:74:d6:a8:b8:f8:be:4f:39:ae:98:b3:46:
                    d3:63:77:d0:b5:7f:a5:ab:4a:55:5b:c6:e1:33:7e:
                    57:90:67:7d:63:5c:50:e0:54:91:1b:1b:da:f8:b5:
                    06:59:4a:08:10:3c:79:4c:32:9a:84:c1:15:c0:ea:
                    b9:59:e9:a8:4e:0b:96:58:da:83:b5:ff:38:2f:cf:
                    80:59:69:68:69:d5:a3:7e:13:8b:fa:0d:5a:47:1d:
                    4d:c0:ae:a7:26:c8:bd:b4:a7:b2:d5:b9:91:d1:d9:
                    5e:c5:f3:c0:af:d9:d1:0d:24:5b:fe:79:8f:0f:9e:
                    d5:4c:cc:26:76:69:9d:ac:4e:4b:ff:7e:78:b0:22:
                    aa:e1:3d:68:b2:ce:ac:1c:99:78:a9:b0:0a:49:fc:
                    46:c7:2f:bb:3a:a9:d3:7a:a5:ad:8e:5b:83:77:b3:
                    31:69:66:d3:eb:94:bf:3d:c4:d3:2a:ac:32:0e:e1:
                    10:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:CF:92:A0:5E:D9:27:7A:EF:63:AE:08:36:A7:8D:56:D6:E7:06
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:d5:16:9f:81:5c:37:fc:a1:61:28:b5:d7:1d:c9:0d:41:a3:
         c1:8e:7a:aa:40:d7:2d:d6:f5:12:5b:a6:b1:ef:ee:96:1a:59:
         09:ee:e0:4e:e6:4a:54:df:e7:2a:94:a8:e6:49:7d:f6:bc:0e:
         9d:3b:a6:86:70:32:96:86:45:71:de:b6:43:3b:2c:08:e6:d9:
         e3:5d:b9:34:49:b7:ce:a2:af:94:b7:d8:8e:52:c3:2e:e7:4c:
         bc:f8:34:1b:fe:c0:77:88:9c:c9:ef:a2:98:8d:5b:39:b4:5a:
         0d:58:27:a4:7d:63:ca:ad:c7:69:12:6e:c0:b1:81:ed:c6:d8:
         ce:01:0f:c5:dd:22:df:48:74:1d:ac:47:0e:0d:2b:69:9f:bc:
         d8:a7:40:48:be:9b:1e:93:63:14:17:8b:53:aa:5b:83:84:23:
         9f:8f:b9:37:4a:01:a9:51:5a:cf:82:52:70:18:5b:51:0a:a7:
         d1:21:57:69:38:df:88:a0:74:b0:2b:3e:89:08:50:45:24:ba:
         ff:69:25:a4:c4:d1:00:9e:b8:80:90:67:94:5d:ab:c5:36:55:
         72:65:fd:14:a3:8b:25:ca:ad:05:9c:42:35:a4:14:18:d0:c1:
         55:3f:62:c3:1a:84:b1:ac:77:01:99:14:a2:f5:29:00:18:99:
         77:ff:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:48:30 2026 by rpki-client