This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
File:                     24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft (raw, json)
Hash identifier:          HrNBdHUY+e9KErnvqCdjZLYUbWHZHBajHTSZXvtThZo=
Subject key identifier:   A4:43:63:B9:7F:AA:A5:BF:E7:24:6E:EC:24:2F:3B:D5:92:51:7F:0A
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       302FE157CE99EC36278A6509F225D16C0BB166FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
Manifest number:          0161
Signing time:             Thu 29 Jan 2026 00:22:03 +0000
Manifest this update:     Thu 29 Jan 2026 00:17:03 +0000
Manifest next update:     Tue 03 Feb 2026 01:44:03 +0000
Files and hashes:         1: 3134332e302e33322e302f32322d3232203d3e203237363934.roa (hash: m4HXN0onWRO3jbJ/dakdQxtv9rJm0C4GoCYynsxKgig=)
                          2: 3230302e3130372e38342e302f32322d3232203d3e203237363934.roa (hash: PGvd3r2zBQ1G4Q89XDldHKodVPN/TivrRR7CX0wTou0=)
                          3: 24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl (hash: H62UMu2Z9R9C+ua/MGNk8FxN+iHBftX/YThRKChjlK8=)
                          4: 323830333a663634303a3a2f33322d3332203d3e203237363934.roa (hash: Yrh/2M9HZhGboXGxb+5v6YUiqFM+OPcbd5QHRIgp64U=)
                          5: 3230302e37312e3234382e302f32312d3231203d3e203237363934.roa (hash: +fiD7wPho5Awfjgn42snPrMVHmvQBS3W2TqjZs8BAT8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2f:e1:57:ce:99:ec:36:27:8a:65:09:f2:25:d1:6c:0b:b1:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Jan 29 00:17:03 2026 GMT
            Not After : Feb  3 01:44:03 2026 GMT
        Subject: CN=A44363B97FAAA5BFE7246EEC242F3BD592517F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:e3:86:79:a4:ed:fc:fc:9f:ae:dc:3b:b2:
                    33:5a:61:64:a9:a4:73:2b:d6:e5:17:1b:b0:ab:0d:
                    05:d3:d2:22:c9:57:a1:0b:52:72:d0:23:99:37:7b:
                    62:e4:6d:5f:9e:00:24:69:29:5d:de:16:09:fb:f2:
                    08:f7:ba:ee:66:87:de:29:1a:bb:9a:06:d8:3a:87:
                    0a:76:47:67:f6:8b:28:80:e0:e4:99:d8:04:63:ee:
                    88:ef:ab:05:94:06:ec:27:66:db:12:b2:44:65:7a:
                    e5:9e:1e:5e:66:9a:62:f9:2a:89:3e:4f:fe:9d:41:
                    a9:75:1b:a1:d3:79:d7:a1:85:dc:89:ff:be:6d:02:
                    c9:9e:8c:cf:fd:33:1e:c6:f5:10:bc:72:63:59:a8:
                    cb:51:78:cb:12:cd:35:0d:97:e4:89:23:a0:ff:bb:
                    70:1c:ca:34:ed:08:3f:ca:23:2c:c5:73:a1:a4:af:
                    54:c9:8e:6e:bd:72:a0:a1:19:00:7e:3e:32:3c:d7:
                    96:43:0c:33:9f:b4:5d:03:fe:1f:b6:d4:ae:6c:12:
                    02:97:5a:3d:92:55:d4:08:84:c9:d2:75:2b:a8:40:
                    86:33:eb:6a:58:d7:42:ea:49:2a:3f:5a:70:ee:8a:
                    15:0b:8a:95:d7:d9:c6:6c:65:e9:df:78:3e:41:7f:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:63:B9:7F:AA:A5:BF:E7:24:6E:EC:24:2F:3B:D5:92:51:7F:0A
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:8a:8a:2e:e8:11:46:4b:29:e8:ae:11:65:39:70:9c:99:
         12:17:8c:48:b2:24:53:c1:f4:84:a5:13:25:37:dd:ee:2a:b2:
         d0:e5:e0:7f:9b:a1:6a:39:36:5e:06:6e:26:9c:1c:07:86:fe:
         19:92:dc:50:bb:4b:35:d7:4b:9a:62:7f:67:bd:4c:65:4f:7e:
         57:4b:84:13:c1:a1:c4:22:bb:8b:4c:85:5d:78:0f:d6:73:29:
         63:78:31:eb:dd:c5:1e:7d:ff:f4:c0:30:1d:ba:4b:1d:76:18:
         f4:6e:bf:d1:e0:53:bb:5a:13:96:2a:20:a7:f2:f5:75:6e:e8:
         f3:d2:8f:f7:75:2f:36:f2:78:c7:22:f1:81:3f:c5:36:97:39:
         9a:41:81:cf:eb:9f:fd:03:e3:ba:8c:ad:ea:8a:45:e8:30:f4:
         3f:ca:74:24:1a:22:39:42:19:7b:f3:20:3e:60:04:1d:44:7b:
         56:df:24:07:75:be:09:c4:12:c7:4c:05:9c:bf:90:31:df:2b:
         b1:24:ff:3e:8c:29:44:52:aa:15:80:1c:68:90:d7:e3:41:2a:
         2a:bf:4d:a7:6b:00:a6:4a:f6:8b:10:87:af:46:6d:c9:e7:cb:
         50:30:05:da:62:ed:9c:83:95:66:a3:99:73:4b:bf:8a:c3:59:
         14:76:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:52:18 2026 by rpki-client