This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier:          xK1gZ7Umz5zRM8agBUurCWkStKM2gYhne9X91y9hSUk=
Subject key identifier:   1B:24:F4:E0:95:EB:93:DA:20:BA:E6:89:30:03:9A:C9:2C:14:57:8B
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       4C51B3391ADA0C97DB28BC32409902EB244A204E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number:          0163
Signing time:             Wed 28 Jan 2026 09:17:47 +0000
Manifest this update:     Wed 28 Jan 2026 09:12:47 +0000
Manifest next update:     Mon 02 Feb 2026 07:52:47 +0000
Files and hashes:         1: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: Xru0tyfTBqsCBtEBgMj9rb0HrtrkaAwaQK0dfPR3nsQ=)
                          2: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: uaTXBPq4Xt48jKQMR/Y0Qj0kXZDdabwweiE3+uOO6ck=)
                          3: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: Ez6wUNBZQYl4+Unjzg1QwfEX6tFGdMC/oA80uKot2qU=)
                          4: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: 77pdNkxxa965XrZs5ZAxZoSqZfXURgIQwoEk4eh5Z3A=)
                          5: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: uNGOa2x9Mw2Q4yh2ufpsxwGxKfW5LD1leK5Y0A6i24E=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:b3:39:1a:da:0c:97:db:28:bc:32:40:99:02:eb:24:4a:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Jan 28 09:12:47 2026 GMT
            Not After : Feb  2 07:52:47 2026 GMT
        Subject: CN=1B24F4E095EB93DA20BAE68930039AC92C14578B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:aa:76:4d:91:f9:f7:c5:27:2e:12:18:00:
                    0f:2a:f8:f2:93:02:82:76:1a:b4:45:3f:ba:d2:eb:
                    98:6e:1a:09:be:1d:a0:39:05:2b:0b:6f:dd:b3:a2:
                    a7:4b:f6:12:54:fd:5a:35:2c:7b:5b:7d:dd:68:81:
                    3d:df:37:83:82:26:9f:38:6f:51:d0:7d:eb:3e:c7:
                    d1:7c:5c:81:f8:32:3f:65:92:41:34:16:c2:c9:f9:
                    1c:7a:96:67:77:a3:73:45:41:d3:42:2a:1c:63:20:
                    c6:ac:8a:c1:e4:c9:b0:58:cf:9d:4a:cb:04:8e:4c:
                    05:6a:c8:b3:a3:46:9a:b9:04:bd:e1:c9:ae:d2:f1:
                    2b:ab:ce:b1:26:25:76:79:9e:21:38:70:d7:c8:e8:
                    b0:75:52:92:bb:97:d5:40:db:06:92:e2:ed:b3:4b:
                    5e:87:44:aa:77:3b:c8:fd:a2:72:62:b7:ce:45:6b:
                    fd:c7:be:cb:97:13:7f:06:af:d4:4f:7f:c7:4c:6f:
                    0b:13:57:c7:bd:14:1f:7e:f5:24:46:18:41:a2:24:
                    f5:ad:bb:2b:2f:fa:59:ab:98:f1:a9:8b:e8:ed:8f:
                    49:d1:fd:3a:d5:26:3d:6b:74:fb:83:d7:03:fd:75:
                    68:02:e9:cf:6e:be:08:e9:a4:42:79:71:33:f9:85:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:F4:E0:95:EB:93:DA:20:BA:E6:89:30:03:9A:C9:2C:14:57:8B
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:01:88:8d:04:f5:34:9d:3e:f7:4b:5f:42:e3:3f:79:df:
         df:6c:38:28:80:ca:eb:c4:fe:60:0e:b4:6d:03:64:88:6c:d2:
         6a:5d:46:01:45:07:aa:16:9e:1b:b7:e0:32:a3:0a:46:b9:a5:
         75:3a:49:99:54:59:fc:38:c2:f1:2b:b5:0f:76:3d:08:59:44:
         8f:73:f0:6a:1f:8a:c2:aa:db:44:d8:eb:d6:91:7e:26:72:c1:
         d1:35:79:a3:45:62:d8:c5:8e:a4:04:55:23:64:1b:cb:45:a4:
         9e:0e:e6:a6:46:a6:26:1b:d2:22:ae:cf:b8:88:f9:3f:5a:1e:
         c7:5e:e8:9b:8e:c5:0c:83:96:be:f5:8e:9b:1e:35:10:d4:7b:
         95:4f:b8:dc:12:42:f9:2f:b5:e3:01:6c:23:d4:9b:b2:6a:27:
         79:06:d4:d6:44:8e:fb:c2:39:7a:8a:12:e6:38:0f:1d:6c:8f:
         26:2e:03:c7:19:96:a1:69:60:98:5a:49:9a:47:6a:75:6d:ad:
         5f:86:12:35:40:d4:80:ec:a0:d8:df:dd:5c:70:d0:fd:ad:be:
         39:61:05:75:78:fc:4d:c5:10:bf:4b:77:2c:06:11:fc:d9:d3:
         fd:3d:40:b1:9c:ed:1d:8b:b9:42:c1:c2:65:3f:43:e6:e8:dc:
         24:ec:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----