This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
File:                     E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft (raw, json)
Hash identifier:          YcYeo+gXBL/cRrijnPcgLPibU2LOzKmfjzZZAT912Xw=
Subject key identifier:   37:4C:B7:78:6C:11:E9:21:C5:D5:62:54:25:E3:72:AF:25:67:8D:61
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       139FB91DBFA2BFF37391368EE328729C480142F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
Manifest number:          0154
Signing time:             Tue 27 Jan 2026 11:17:22 +0000
Manifest this update:     Tue 27 Jan 2026 11:12:22 +0000
Manifest next update:     Sun 01 Feb 2026 03:25:22 +0000
Files and hashes:         1: 323830333a3231303a3a2f34362d3634203d3e20323731383839.roa (hash: zjbwXC7yN/3iOnX1d72vxgtV36hV2nVceoWPsurHdB8=)
                          2: 3139302e392e3132342e302f32332d3233203d3e20323731383839.roa (hash: PpAQGDtnBueqQukdvBRwQF2xNEwDfB09gkhYl++dWWg=)
                          3: 323830333a3231303a3a2f33322d3634203d3e20323731383839.roa (hash: KYKKLWH/ewJhMnRYGDW7CqPtJ4XHHGh8JlidwOIsc88=)
                          4: E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl (hash: KK7A+YoOBhOOt8rais0GHZQmNkFKoN/sVN5Xo58lLTM=)
                          5: 3139302e392e3132342e302f32342d3234203d3e20323731383839.roa (hash: osNFTI3vVfA3k37m46Lp72KcIQGCJEwgKoAzfC0BKUQ=)
                          6: 3139302e392e3132352e302f32342d3234203d3e20323731383839.roa (hash: sA+nZip+h9+H1tkkrWv955klFpifXRwu7G0FqChwods=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 03:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9f:b9:1d:bf:a2:bf:f3:73:91:36:8e:e3:28:72:9c:48:01:42:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jan 27 11:12:22 2026 GMT
            Not After : Feb  1 03:25:22 2026 GMT
        Subject: CN=374CB7786C11E921C5D5625425E372AF25678D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:2a:1e:33:7f:bf:44:12:6c:f5:79:28:05:
                    86:ac:64:6c:64:a2:05:9b:26:a5:c2:47:d5:7e:37:
                    30:3e:2c:5a:28:91:90:fc:d0:6d:89:54:03:bd:fd:
                    7c:07:8e:8b:b9:b4:ee:9c:4e:95:50:f4:de:21:d2:
                    ad:b1:fa:bf:0b:f0:eb:e7:f1:1e:b4:e2:e4:67:91:
                    f0:c8:60:2e:b2:1a:8f:7f:e5:7a:ed:e0:50:b5:d7:
                    be:6b:70:c6:16:0c:2f:71:91:52:24:af:90:ec:90:
                    66:7e:05:b6:90:af:37:cc:47:01:c6:4c:1b:41:8a:
                    c4:e0:3a:eb:80:92:8d:95:6d:1f:2f:6a:8b:2c:4b:
                    c2:98:d4:ec:6f:23:84:ec:b3:5b:59:af:f8:93:db:
                    52:5f:d3:0c:0e:fe:d7:61:f8:54:9d:ac:5a:cf:f1:
                    de:1e:fc:2c:cc:e0:93:9d:23:9c:bc:7b:a7:20:76:
                    66:ba:68:b0:fb:3f:4c:4e:8e:ec:18:b8:33:8d:1e:
                    c2:1f:a2:91:19:01:a5:a4:c3:67:91:e8:7f:8a:cc:
                    a9:c2:86:f9:2f:ad:fd:b9:4b:d2:12:09:5c:c5:87:
                    50:bc:da:a8:5f:3a:84:bc:07:0d:6e:cd:e9:18:03:
                    5d:88:bb:82:d1:cf:b7:76:19:b8:b8:c2:9a:28:08:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:B7:78:6C:11:E9:21:C5:D5:62:54:25:E3:72:AF:25:67:8D:61
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:30:ef:2a:7b:cc:00:f4:10:da:00:f5:3f:07:32:71:a1:f0:
         96:d7:4d:20:08:41:06:c8:79:32:ae:5c:44:ec:d1:7a:be:9e:
         aa:81:d7:d8:73:28:1e:d2:af:5b:f6:66:ff:d6:bf:c0:f5:2f:
         57:70:4f:92:75:26:71:1e:bd:d2:e0:11:a7:61:6b:d4:6b:d4:
         4a:de:d5:52:f8:1f:e4:54:96:93:ff:2c:ad:43:af:d5:2c:fe:
         50:b0:5e:7b:5d:ba:c3:93:f5:18:27:73:04:29:fc:6b:d7:ce:
         36:9f:b6:fb:d9:a9:f6:12:cd:ea:b2:1a:39:f8:ab:77:a1:b9:
         f6:69:3a:5a:dc:cc:da:92:c0:54:42:f5:73:80:42:73:7f:e5:
         ff:98:1c:22:35:3d:0d:a5:07:0f:24:38:79:ec:05:75:e4:f0:
         9b:2d:f9:77:07:68:5f:52:83:00:bb:be:c8:d5:7a:5e:f7:62:
         44:71:02:a7:e6:0e:61:d9:0f:ee:41:b7:2c:1e:ed:ee:b1:c5:
         f0:c5:4e:db:78:2c:23:49:5c:ec:a3:fb:3e:f2:34:6d:5a:67:
         51:a8:d6:2f:02:73:f1:93:d9:da:c3:94:d8:7d:f6:19:a5:51:
         da:c7:bd:84:1d:f8:a9:56:08:5e:64:1c:e3:73:54:06:6b:32:
         7f:72:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:44:41 2026 by rpki-client