This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          VqnGbCrAj5rSTzqzTK8Q5Pi+qxc8QZD2c/9oAVEPe7E=
Subject key identifier:   CE:B8:57:1E:12:1C:23:FE:9F:99:97:7A:66:D9:8D:34:B2:60:2D:B9
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       65E3CAF16F348E28035264714598C02E4D4974DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          0154
Signing time:             Fri 02 Jan 2026 19:01:29 +0000
Manifest this update:     Fri 02 Jan 2026 18:56:29 +0000
Manifest next update:     Thu 08 Jan 2026 01:59:29 +0000
Files and hashes:         1: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=)
                          2: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=)
                          3: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=)
                          4: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=)
                          5: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: +/LYlB1WQUCTEaAof5QJBA1ASAgOj2NP6OCCtYZ9BLM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 01:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e3:ca:f1:6f:34:8e:28:03:52:64:71:45:98:c0:2e:4d:49:74:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Jan  2 18:56:29 2026 GMT
            Not After : Jan  8 01:59:29 2026 GMT
        Subject: CN=CEB8571E121C23FE9F99977A66D98D34B2602DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e3:a6:65:89:f2:43:2a:a0:7b:b9:b0:24:94:
                    c0:15:04:dc:d8:41:ca:de:eb:cf:9e:10:d1:17:fe:
                    79:a1:d3:1e:56:40:14:f7:53:cd:d1:a9:3c:dd:44:
                    a8:8d:92:c6:3b:a8:60:9a:fc:6c:17:77:07:da:24:
                    5a:b4:15:14:7a:c5:3d:5c:a6:b4:c3:7a:8c:fc:3b:
                    0f:25:b7:b7:1d:da:fe:66:8a:c8:1f:aa:60:75:cb:
                    d4:2e:91:1a:3d:f7:98:39:10:27:78:7e:4b:ab:cf:
                    d1:b3:72:ab:94:50:2a:a3:0b:28:0c:7f:f7:41:a2:
                    fe:e5:bf:ad:65:27:a2:40:96:4f:85:0e:bd:0b:b2:
                    c1:03:1f:ba:8b:be:37:77:65:56:40:ad:8c:60:ba:
                    46:5f:f5:e4:0e:8e:c8:16:33:51:3a:36:69:26:2a:
                    92:43:30:60:f0:27:5d:58:f9:71:70:b9:42:8f:0b:
                    cd:46:28:d4:8a:ce:75:d2:11:70:b8:99:cd:8a:91:
                    b3:5b:7f:08:83:94:8c:30:30:a1:78:2a:20:7c:b9:
                    95:56:81:e1:f6:84:fb:91:8e:d5:d3:20:ea:4a:ef:
                    9d:02:e9:76:90:24:08:0f:d8:94:e7:1e:42:cc:d3:
                    c4:36:d8:33:3e:4f:60:c0:6d:5a:ac:86:36:c6:40:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:57:1E:12:1C:23:FE:9F:99:97:7A:66:D9:8D:34:B2:60:2D:B9
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:b9:52:ad:82:bb:b8:8b:ce:5e:08:95:b2:65:bd:aa:16:
         33:46:0b:ab:a7:68:32:5b:38:b9:eb:47:6b:34:f1:70:fd:0e:
         33:38:ee:ce:ce:b3:bf:38:c8:fa:a2:f1:0d:2d:ba:91:db:89:
         78:70:59:f9:9b:5b:a9:82:39:9f:18:20:c5:08:52:b3:a1:ff:
         08:3b:3c:99:77:ef:4b:23:dc:b8:22:a8:a2:df:77:cf:a5:34:
         77:ca:5c:19:b3:62:9c:65:0a:c1:46:42:3b:d6:7f:90:fc:d4:
         f5:1b:79:95:19:b4:db:27:09:06:7f:52:bd:60:ef:69:42:44:
         f7:bb:88:68:df:27:c8:dc:3e:08:6a:30:ee:7b:3c:dc:c8:83:
         e7:f8:4b:61:ff:b3:8b:e2:20:ba:7a:90:96:da:ce:bf:a0:c4:
         00:3c:0d:4f:03:90:1f:9b:ac:d8:71:f0:d3:eb:9a:1a:20:4d:
         18:3e:f1:8d:97:b3:16:fb:97:fd:f6:01:53:a3:03:b6:91:ef:
         ab:e6:90:a4:d5:e4:65:51:62:87:94:70:4a:82:c3:76:a5:d1:
         92:4f:d6:e2:bf:1d:39:58:76:e7:46:0f:3c:31:c8:17:77:d2:
         2b:73:eb:ee:d0:92:11:bc:28:30:26:80:d0:9b:84:bd:21:bb:
         b5:d9:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----