This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          BnAAfLKtKAqcAup5PAgaEP3GPAYmFbrFxl4MsI6hLoE=
Subject key identifier:   EE:98:F2:0B:B7:1E:00:C7:D5:45:D1:70:FB:F4:09:9C:04:1E:87:29
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       4A6AEDC9623F61D5472FEDEBF2D0F512A0BCADA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          0163
Signing time:             Wed 28 Jan 2026 18:28:24 +0000
Manifest this update:     Wed 28 Jan 2026 18:23:24 +0000
Manifest next update:     Tue 03 Feb 2026 13:51:24 +0000
Files and hashes:         1: 34352e3137372e3130392e302f32342d3234203d3e20323637383537.roa (hash: GbEmjq+v78pS2fKbyMP7qZjAXhibk50GhbJY4JL/Tcc=)
                          2: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: 4KHdPY9GuW3oJ/GP4Q8rMrrRT4LIWAb8XYDUcewg8QA=)
                          3: 34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa (hash: WYGAE0xls6+7i2OVhuCaL0WgYP2AmxT6JrofqpGylfs=)
                          4: 34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa (hash: c3zSVEH2stc7Ga7P4dkoMP4nGJugURdM3tZR8TKq4Hg=)
                          5: 34352e3137372e3130382e302f32342d3234203d3e203237393531.roa (hash: FQOijIFL5swjZ1bxEJkHU93lGq3iBteKK5DjHs4COIY=)
                          6: 34352e3137372e3130382e302f32342d3234203d3e20323637383537.roa (hash: lYppe92oV2wxWFUc6Gq+IqdH7+oUcyKiXZjkKaSvQsE=)
                          7: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: 1/4cOPDOeKFWNK1klirp4zaGgR3ezAg3OFNHd3B3LOE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Feb 2026 13:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:ed:c9:62:3f:61:d5:47:2f:ed:eb:f2:d0:f5:12:a0:bc:ad:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Jan 28 18:23:24 2026 GMT
            Not After : Feb  3 13:51:24 2026 GMT
        Subject: CN=EE98F20BB71E00C7D545D170FBF4099C041E8729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:9c:33:1c:10:0a:2d:77:b5:cc:79:93:fd:
                    47:2f:3c:cf:91:56:24:47:fb:48:a6:6d:98:d5:f5:
                    d2:d6:83:6a:2a:52:19:0e:95:1c:6f:dd:3b:0d:c8:
                    bf:fc:e2:08:52:86:d2:41:aa:66:da:c6:cc:50:b2:
                    96:0c:8e:3f:8f:2d:46:8f:a2:da:8b:5d:45:6f:78:
                    aa:c3:fb:34:9b:0e:cc:1e:97:c0:99:34:bf:5b:6c:
                    69:ee:cc:7f:41:52:af:af:5a:b3:64:ae:52:5f:7f:
                    33:c8:3a:6d:a7:df:c3:86:ef:31:a9:58:05:43:22:
                    25:2b:4c:fa:f0:d1:2a:37:d1:d7:72:e0:ba:64:fa:
                    28:ea:76:4f:f7:b6:3d:ce:65:15:f0:0a:8b:d0:1b:
                    e9:8a:5d:e1:47:87:c6:51:3e:b1:db:55:af:e1:fb:
                    a1:9c:2a:13:95:98:d9:90:74:9b:49:f6:f7:0f:2d:
                    12:69:47:6d:dc:38:b4:c4:90:83:2f:1f:da:2b:9b:
                    8b:bf:a3:bf:e6:a9:64:06:19:9d:39:1b:32:bf:47:
                    78:95:4e:ad:e5:71:a2:73:c7:a6:72:12:e4:80:9e:
                    5e:72:bd:9c:db:a2:12:07:86:44:03:af:e8:d2:17:
                    6e:94:76:56:a7:1f:1e:d8:fd:aa:63:3d:80:01:4a:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:98:F2:0B:B7:1E:00:C7:D5:45:D1:70:FB:F4:09:9C:04:1E:87:29
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:88:57:c8:3a:e0:c3:1f:f9:0f:99:cc:c1:c6:17:9f:c4:59:
         2e:21:de:48:a1:09:3c:92:68:fc:72:a0:c5:54:71:86:40:e5:
         2d:5d:28:28:75:c9:6f:94:6b:34:ec:7b:63:7c:b3:22:50:5c:
         da:d5:ba:16:82:1f:16:bd:85:ef:10:7a:1f:26:cd:46:fc:8a:
         00:5e:41:b8:1b:1c:e9:7b:9a:a7:82:3b:7b:7e:ce:f4:54:62:
         a1:c0:d8:19:e7:b8:b1:32:f4:66:19:bb:4b:f3:5c:c9:61:b4:
         0a:ba:4e:eb:95:6f:67:07:32:dd:c3:18:43:79:d2:d9:5e:d9:
         a1:a9:a9:9a:3a:2c:74:79:36:a8:3d:da:ca:9a:fb:42:18:3a:
         a9:0e:12:e6:46:2d:1b:78:95:05:1e:b4:4d:00:2a:62:2f:be:
         22:25:85:1e:c2:72:9f:59:d2:2f:78:8a:5a:f7:0b:38:bd:77:
         9f:eb:d7:64:e9:cc:fc:a1:52:b5:f2:bb:d6:ae:c1:fa:81:05:
         d0:d3:03:cd:2d:aa:8d:06:ff:1f:38:3f:c4:61:7b:d7:18:d9:
         d4:18:17:f8:67:50:f2:e4:df:b2:dc:0a:49:4b:3c:d6:50:e7:
         c9:34:78:54:41:a3:16:12:4b:67:a2:b9:7e:e3:db:12:3a:93:
         3f:0a:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 09:16:14 2026 by rpki-client