This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
File:                     CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft (raw, json)
Hash identifier:          4ra3j/bbed2aMtT6YAvYJVimnxltp8INDWQSCbyU8/o=
Subject key identifier:   0D:61:66:39:92:2D:E5:68:C8:E3:D0:19:26:A1:71:0C:6B:9B:40:C1
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       469C477609963E4490E8C1EE4AD693B0B9F8CE7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
Manifest number:          0135
Signing time:             Wed 28 Jan 2026 09:12:44 +0000
Manifest this update:     Wed 28 Jan 2026 09:07:44 +0000
Manifest next update:     Sun 01 Feb 2026 12:47:44 +0000
Files and hashes:         1: 3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (hash: wv9bzhvqRZDHf+P78l6TYaz5VREYKd9TaLC7U4S9rPE=)
                          2: 323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (hash: 46l4d5yDbrgcXTlM1NtPYFcO+4GZfu084BTGP/Vvwuo=)
                          3: 323830333a6231303a3a2f33382d3338203d3e203237393531.roa (hash: 8jH2YPWVSph+aeAWtR2v9cZBYAvALwyoLByn9gZ8qtE=)
                          4: 3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (hash: oKxAOL2yVw8WT/7Yu3EhiJSoZXhnTX43Rx7XofxkwmA=)
                          5: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl (hash: ys3ld84VsQ+G4cBqeeJMWHakNwuMGNgIASGMJTB8bnE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 12:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:47:76:09:96:3e:44:90:e8:c1:ee:4a:d6:93:b0:b9:f8:ce:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jan 28 09:07:44 2026 GMT
            Not After : Feb  1 12:47:44 2026 GMT
        Subject: CN=0D616639922DE568C8E3D01926A1710C6B9B40C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:48:49:a6:17:8c:90:8c:3d:35:13:61:38:
                    8c:ea:09:bd:7e:50:a9:9a:2d:5f:57:88:ae:ff:69:
                    9f:87:d1:0b:26:96:5f:bb:48:c8:95:5b:6e:49:a8:
                    b6:50:42:f5:ff:f3:e8:7f:07:3f:dc:25:7f:b4:20:
                    de:93:8e:55:af:06:ba:1f:a0:9e:94:92:2a:7e:b1:
                    27:a1:ef:45:5d:54:11:f1:f6:7d:97:18:36:b9:ca:
                    2e:ca:36:5e:4c:45:5b:a7:5a:75:c3:63:86:d1:ac:
                    6b:d3:49:24:3c:71:2c:02:3e:3a:b4:92:4c:26:d5:
                    bd:c2:e5:af:f0:a1:17:b1:73:e8:8c:af:dd:93:89:
                    74:eb:d5:2a:5e:00:05:7d:6b:64:8e:bc:3d:af:f0:
                    bd:a7:31:13:8d:7b:11:8d:3c:39:e4:4f:11:f0:55:
                    1c:3f:32:ad:29:de:70:48:bc:08:c9:2d:37:9d:31:
                    80:9c:d5:05:e4:d3:99:a2:90:ee:46:a3:fd:06:49:
                    fc:af:3d:a7:36:eb:98:49:a2:19:8d:60:e5:25:85:
                    c6:66:30:1c:9b:b8:6c:47:96:6a:41:66:a3:cf:dc:
                    21:a0:dd:21:fa:3b:7a:f0:05:af:64:84:00:fb:f4:
                    26:70:19:4d:b0:08:9f:f3:7c:31:0b:7b:2f:36:09:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:66:39:92:2D:E5:68:C8:E3:D0:19:26:A1:71:0C:6B:9B:40:C1
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:6c:e3:2a:86:9d:7a:99:33:55:c9:94:8f:09:f4:d8:c9:
         8a:ed:54:be:98:df:d0:f9:93:14:e8:fe:e8:eb:e0:1c:6a:ec:
         37:6b:a0:b0:e8:5d:94:61:79:28:95:93:de:67:37:29:58:67:
         3c:06:7b:3b:b3:7d:c1:72:f5:fe:c0:dd:e7:64:bb:cd:62:fe:
         51:68:f9:65:4f:53:72:a0:3e:d1:4c:28:6d:0c:6a:c3:ea:c7:
         c0:a2:aa:66:4f:6a:4c:19:e0:ee:64:89:7b:65:65:96:ef:71:
         95:c4:1d:9a:b8:4d:47:f3:62:53:2d:43:ec:d5:ce:d4:30:e6:
         53:85:19:af:25:b3:11:b7:75:0f:fd:30:3d:90:ff:69:a6:a4:
         27:20:ff:59:7a:9e:3e:cd:ba:fd:b9:a0:aa:12:9d:8d:53:d3:
         28:6c:68:ac:78:9b:75:85:8c:bf:c7:a3:c6:7d:cb:b0:3d:46:
         db:41:7f:50:34:da:af:c5:65:92:81:39:d1:b3:d0:7e:bc:c4:
         76:05:65:6f:9d:e8:09:03:a1:a8:73:e6:4d:a2:89:66:e5:59:
         ea:b8:d2:ac:73:09:3f:5d:a3:9b:a0:3f:10:f1:49:60:e7:27:
         c8:bd:62:f7:4e:5e:dd:c4:b0:04:e2:38:a2:31:31:1d:5f:19:
         87:f7:56:07
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURpxHdgmWPkSQ6MHuStaTsLn4znowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QwMzU5QjU0NkRBQTM4REUwRTk4RTQ3Qjg1QzdCMkFF
MkM4MkQ3MTAeFw0yNjAxMjgwOTA3NDRaFw0yNjAyMDExMjQ3NDRaMDMxMTAvBgNV
BAMTKDBENjE2NjM5OTIyREU1NjhDOEUzRDAxOTI2QTE3MTBDNkI5QjQwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNukhJpheMkIw9NRNhOIzqCb1+
UKmaLV9XiK7/aZ+H0Qsmll+7SMiVW25JqLZQQvX/8+h/Bz/cJX+0IN6TjlWvBrof
oJ6Ukip+sSeh70VdVBHx9n2XGDa5yi7KNl5MRVunWnXDY4bRrGvTSSQ8cSwCPjq0
kkwm1b3C5a/woRexc+iMr92TiXTr1SpeAAV9a2SOvD2v8L2nMRONexGNPDnkTxHw
VRw/Mq0p3nBIvAjJLTedMYCc1QXk05mikO5Go/0GSfyvPac265hJohmNYOUlhcZm
MBybuGxHlmpBZqPP3CGg3SH6O3rwBa9khAD79CZwGU2wCJ/zfDELey82CdsbAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUDWFmOZIt5WjI49AZJqFxDGubQMEwHwYDVR0j
BBgwFoAUzQNZtUbao43g6Y5HuFx7KuLILXEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjU4NjVFNTc2QkY0MURENDQzQ0Q3MzA0Mzg1MENBNkVB
NkExRjIwM0MzRjI4NDA5MDk1M0FCRDg4NjI1Q0VCLzAvQ0QwMzU5QjU0NkRBQTM4
REUwRTk4RTQ3Qjg1QzdCMkFFMkM4MkQ3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDAzNTlCNTQ2REFBMzhERTBF
OThFNDdCODVDN0IyQUUyQzgyRDcxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI1ODY1RTU3NkJGNDFERDQ0M0NENzMwNDM4NTBDQTZFQTZBMUYyMDND
M0YyODQwOTA5NTNBQkQ4ODYyNUNFQi8wL0NEMDM1OUI1NDZEQUEzOERFMEU5OEU0
N0I4NUM3QjJBRTJDODJENzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/7mzjKoadepkzVcmUjwn02MmK
7VS+mN/Q+ZMU6P7o6+Acauw3a6Cw6F2UYXkolZPeZzcpWGc8Bns7s33BcvX+wN3n
ZLvNYv5RaPllT1NyoD7RTChtDGrD6sfAoqpmT2pMGeDuZIl7ZWWW73GVxB2auE1H
82JTLUPs1c7UMOZThRmvJbMRt3UP/TA9kP9ppqQnIP9Zep4+zbr9uaCqEp2NU9Mo
bGiseJt1hYy/x6PGfcuwPUbbQX9QNNqvxWWSgTnRs9B+vMR2BWVvnegJA6Goc+ZN
oolm5VnquNKscwk/XaOboD8Q8Ulg5yfIvWL3Tl7dxLAE4jiiMTEdXxmH91YH
-----END CERTIFICATE-----