This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          xVacOGHl+mH7PScwHlxNM4YtEdwzKnjzpRgl/npsQuQ=
Subject key identifier:   C8:67:39:FE:72:D1:E2:A1:4C:84:E9:54:96:AC:EF:0C:43:9A:C5:0B
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       6E7368C94A2B84C4F251F3ADA199AC850FF96D13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          0158
Signing time:             Tue 27 Jan 2026 12:28:04 +0000
Manifest this update:     Tue 27 Jan 2026 12:23:04 +0000
Manifest next update:     Sun 01 Feb 2026 10:11:04 +0000
Files and hashes:         1: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=)
                          2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: dDbpG2+xSrvJN5yKswvdtXg4lqRTIlXesd+wshviCOQ=)
                          3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 10:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:73:68:c9:4a:2b:84:c4:f2:51:f3:ad:a1:99:ac:85:0f:f9:6d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Jan 27 12:23:04 2026 GMT
            Not After : Feb  1 10:11:04 2026 GMT
        Subject: CN=C86739FE72D1E2A14C84E95496ACEF0C439AC50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:5c:70:13:d5:c5:5d:33:05:95:1e:98:bf:
                    87:4e:0c:97:e5:11:1f:db:fe:e5:7c:60:cc:f7:6a:
                    fd:6a:6c:b8:d3:a7:a8:34:79:b4:4c:01:cb:de:0f:
                    9f:50:2b:65:1b:f5:c4:37:2d:89:99:d8:65:3c:05:
                    1c:c7:1a:df:bd:ec:49:db:10:fe:f5:cb:0a:b9:f5:
                    40:bb:b7:1d:53:80:bb:2f:dd:e8:5c:69:d5:ec:c9:
                    f5:c7:d2:80:38:05:04:94:e2:a1:c6:1d:23:09:7e:
                    2d:58:41:a3:a6:83:be:d3:c9:4d:08:7f:2e:94:e4:
                    3a:98:b3:b8:e2:d9:32:b1:88:71:0b:ac:dd:0b:38:
                    6f:e5:ba:96:5e:ec:db:63:e9:ba:4e:9f:80:69:f2:
                    1b:10:d4:c9:29:f5:63:ab:05:c5:70:bc:3f:b8:47:
                    e9:04:6f:50:c4:f8:a1:18:c1:53:02:60:01:68:71:
                    55:20:02:e0:df:e1:14:c7:1d:30:12:80:89:62:da:
                    bc:da:e8:6c:7b:0f:cc:3c:46:4e:8f:34:e3:1e:0e:
                    55:90:60:dd:3d:37:d5:10:f3:93:f7:af:d6:d2:6e:
                    fb:6e:e9:64:6d:9b:96:39:6f:df:0e:d4:a4:64:f6:
                    79:8f:c2:e8:7d:5c:60:b0:b4:05:10:91:ff:13:cd:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:67:39:FE:72:D1:E2:A1:4C:84:E9:54:96:AC:EF:0C:43:9A:C5:0B
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:2b:ab:a6:77:6d:bd:c1:fd:73:c5:f3:8b:42:e1:17:95:
         41:36:6f:e5:63:18:4e:5d:34:fc:b4:a1:13:fe:6c:16:24:38:
         1d:9f:7d:e1:72:d1:12:07:66:aa:ba:16:07:5f:0c:7a:e6:e2:
         07:c8:3c:73:76:9a:5c:c3:05:d9:cc:ce:9d:2f:ed:f5:9d:09:
         1e:8e:5c:3c:47:46:db:b0:a7:8c:3e:10:a5:55:5c:12:17:c4:
         b5:99:3a:92:5a:1c:2d:51:d2:88:2b:bd:2a:e8:5a:33:19:e2:
         9b:49:02:13:a6:c1:77:7a:ef:77:ee:39:10:d5:c8:07:c4:a7:
         5a:7d:c6:2b:b2:53:5e:b8:6d:12:f0:ff:7a:4c:54:4a:54:dc:
         4a:cd:1c:79:25:e7:b1:1b:ac:89:33:e7:8d:28:f1:89:76:30:
         06:80:b2:08:16:97:1d:71:b5:2d:be:14:18:e3:34:78:f5:64:
         bb:fb:3d:c6:b4:c5:1b:05:2c:85:a4:bd:19:05:73:42:5d:0b:
         fc:58:f0:20:07:75:53:92:28:af:34:e5:bf:7c:53:5f:03:79:
         c2:1c:4f:42:bb:44:49:97:44:f5:fe:c2:95:cd:26:8d:ce:87:
         90:e4:98:2c:b2:9f:56:a1:4a:fc:66:4c:a0:4c:6f:2c:a8:bc:
         44:6e:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----