This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
File:                     8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft (raw, json)
Hash identifier:          WMuh5iHRWiod7op403sBPb+mJHxrsM1qSnbyVMbkqgU=
Subject key identifier:   72:EF:ED:47:08:F5:9F:80:97:96:71:7C:B1:80:10:DF:B5:F9:C5:23
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       3A15FF524240D934175A3749C4F9AE6CF68AE81C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
Manifest number:          0159
Signing time:             Wed 21 Jan 2026 20:18:24 +0000
Manifest this update:     Wed 21 Jan 2026 20:13:24 +0000
Manifest next update:     Mon 26 Jan 2026 23:07:24 +0000
Files and hashes:         1: 8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl (hash: eqDMWKLj0hZ8j/L5eiDWISqpOlQ4kAyWnmG74U5C5jQ=)
                          2: 3138392e39302e3232382e302f32332d3234203d3e203237393838.roa (hash: VuCBPmMDmjkKWRGylGSMNvjxkQcNu873AeWGoYF9VXM=)
                          3: 323830333a383165303a3a2f33322d3332203d3e20323730303535.roa (hash: Ga5o6ed83Pe+G7+jACiNxBqEKAOQqmtCfGyq86PXeXs=)
                          4: 3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (hash: XXBgbK9cxwhJ363FWVYxwXzI3fGWVZcc5FY6hoyeA/s=)
                          5: 3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa (hash: wGoLVeVpvkPU7lSQ/4lh+rb28V9ZgY+3ielrk3jkDCg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:15:ff:52:42:40:d9:34:17:5a:37:49:c4:f9:ae:6c:f6:8a:e8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Jan 21 20:13:24 2026 GMT
            Not After : Jan 26 23:07:24 2026 GMT
        Subject: CN=72EFED4708F59F809796717CB18010DFB5F9C523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:10:6e:45:e0:79:8c:5a:64:54:64:1b:94:
                    39:fc:54:41:a0:50:69:67:70:26:e6:92:61:78:72:
                    fe:b5:e3:1b:16:21:38:65:d5:a5:a3:b9:62:9f:26:
                    73:41:b1:41:26:c5:d3:97:e7:95:f6:c3:8a:a2:b4:
                    57:62:35:54:db:e5:cd:b1:ed:e7:60:8c:15:43:c3:
                    8f:53:2a:7b:01:bf:52:8f:52:38:02:af:84:7d:cd:
                    95:84:2b:57:43:1a:18:ff:00:e1:22:8b:43:65:12:
                    d1:91:da:e5:53:0c:af:79:b4:51:4e:9f:dc:12:d0:
                    6b:d0:2f:61:9f:31:4c:37:5d:b4:e8:65:a1:60:d9:
                    87:f7:ac:21:a4:a3:ab:c5:f8:6a:e6:2b:c5:4a:37:
                    c7:ca:35:40:02:60:52:04:9c:90:ad:e5:73:2d:56:
                    4d:23:30:57:f5:22:49:30:c3:d0:13:b7:70:cb:1d:
                    e3:50:da:57:ba:b7:21:2d:d1:64:09:83:31:18:b6:
                    e9:31:3f:ab:35:36:ea:d8:f6:c4:49:38:8e:7b:ae:
                    ee:18:0d:ea:24:44:47:e1:92:13:c5:b7:af:5e:de:
                    fd:e6:76:80:62:0a:12:92:2f:da:47:74:c9:49:4a:
                    c8:36:ce:02:39:92:4c:90:ad:2f:ae:e0:e4:75:0f:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:ED:47:08:F5:9F:80:97:96:71:7C:B1:80:10:DF:B5:F9:C5:23
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:06:3d:a2:ef:c7:cb:6f:d1:ae:5b:42:10:80:85:2d:af:
         b3:f0:6f:d1:86:d3:8a:f4:c0:66:c7:7c:f5:d5:6f:5d:1a:dc:
         9a:0a:3d:cb:93:b8:68:86:cd:b7:15:fa:7d:b8:bf:66:1a:d4:
         40:45:64:13:ba:db:4a:fe:1a:9a:fa:fb:4b:65:2b:97:01:5e:
         d0:22:64:55:a6:40:e4:6e:f1:5d:2d:76:91:cc:e0:38:7c:a3:
         5f:0d:44:70:d2:ab:ff:92:a1:3b:be:2a:16:ea:6c:26:01:08:
         ae:a7:23:2d:2c:cd:de:74:e9:62:41:e6:2b:52:f4:ce:df:e9:
         98:7f:6b:43:ae:4e:02:ca:25:6e:fa:98:19:06:b2:36:a0:b4:
         16:3d:19:f4:48:d0:16:39:ca:71:73:7c:ba:e7:72:60:f9:67:
         86:be:c1:99:b0:4a:ee:e2:be:f5:5f:21:2e:83:45:d7:cb:c1:
         ca:e2:f8:e8:90:bd:50:aa:53:bd:e0:4e:46:58:09:56:dd:b3:
         d8:75:fb:46:80:68:ea:50:63:0d:54:b0:3f:e3:72:86:05:bf:
         66:c5:93:84:e8:cf:5a:89:ab:a0:55:2b:c0:65:24:59:9f:8d:
         30:d8:9f:89:12:54:70:fa:69:d9:08:d7:cc:16:8c:b9:68:51:
         cd:44:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 07:11:21 2026 by rpki-client