This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
File:                     2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft (raw, json)
Hash identifier:          RqFtVTagU/jZHFXFVwShGJmukZGDTHXCYeTxQciaGus=
Subject key identifier:   D2:D8:CD:DA:66:06:88:17:9E:68:7B:BF:A9:EC:23:32:C2:49:6C:37
Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
Certificate issuer:       /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Certificate serial:       404B6149CA60F0EBB3A7BAE4EC4292D84450ED6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
Manifest number:          0158
Signing time:             Tue 06 Jan 2026 19:26:18 +0000
Manifest this update:     Tue 06 Jan 2026 19:21:18 +0000
Manifest next update:     Sat 10 Jan 2026 22:18:18 +0000
Files and hashes:         1: 3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa (hash: kekAefjg44ubLHxcMUb+fpLgUFPLBr67kikQmAwgiYI=)
                          2: 323830333a346463303a3a2f33322d3438203d3e20323635373231.roa (hash: wVlfCpPlnpQuVTCVExjQINBGC8BwvTS8GpWkNX/snjE=)
                          3: 2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl (hash: tvgOXD28Lr0LWYw5BVXmCCkAfGAvAUM2Jbyut8dxq0Q=)
                          4: 34352e36352e3234342e302f32322d3234203d3e20323635373231.roa (hash: NzS4KMwhqJfh4rHAAuvHkzAakNoXA9Oy7b5sVekCy70=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 22:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:61:49:ca:60:f0:eb:b3:a7:ba:e4:ec:42:92:d8:44:50:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
        Validity
            Not Before: Jan  6 19:21:18 2026 GMT
            Not After : Jan 10 22:18:18 2026 GMT
        Subject: CN=D2D8CDDA660688179E687BBFA9EC2332C2496C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:46:af:86:bb:df:67:98:a3:d0:5c:52:74:27:
                    31:9f:e1:81:1d:58:1c:47:03:51:02:83:fe:4f:a9:
                    9d:78:f4:6d:a2:9f:30:bb:a6:80:45:1f:36:51:af:
                    c9:25:05:59:eb:05:63:7d:17:6a:f4:82:ab:8d:e7:
                    f9:a9:48:40:66:21:e5:85:f2:ab:a2:f0:98:27:4d:
                    72:f5:7d:19:ef:89:0f:e2:64:f6:9c:7b:23:ab:e5:
                    72:48:41:a0:06:5b:45:1b:b1:09:ae:c5:1b:08:f7:
                    f4:26:3b:89:6d:89:68:f9:91:7f:a1:3a:31:72:a5:
                    4a:f0:35:0a:cc:4e:a0:4b:88:bf:26:a0:1b:d8:9c:
                    7f:4f:90:c8:ed:be:7d:13:da:f6:ae:53:85:95:93:
                    f6:2c:96:69:4c:f7:89:da:ea:cb:83:49:65:af:b9:
                    76:c3:da:85:76:7a:7b:b5:55:65:c5:3c:e9:1d:da:
                    ab:fe:f9:2b:96:fb:5e:b0:ea:4b:78:a3:fc:41:db:
                    75:b5:07:2a:48:af:ab:2f:f4:f1:29:62:dc:8d:9c:
                    e7:dd:b2:b7:73:4b:78:e1:2b:46:cf:83:0c:6a:8f:
                    75:0d:c9:c7:4a:4d:71:b5:91:f5:95:d3:d2:74:58:
                    f3:77:03:05:80:77:2b:14:c7:77:05:f7:d3:1d:fd:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:CD:DA:66:06:88:17:9E:68:7B:BF:A9:EC:23:32:C2:49:6C:37
            X509v3 Authority Key Identifier:
                keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:5a:7a:01:09:30:cf:d2:67:29:97:b3:92:aa:1f:f4:de:
         5b:51:5e:42:67:91:e8:62:e6:83:63:a0:f6:66:2a:82:19:70:
         41:53:90:32:82:6c:66:10:b3:9b:38:9e:21:3a:7f:62:5f:c3:
         d0:62:13:e9:61:47:84:1e:f1:2b:f3:52:64:c1:52:d7:62:65:
         96:f9:1c:f6:3a:37:b1:64:c4:2c:3d:91:6a:4a:39:5c:4d:6b:
         6b:fd:fb:6c:0b:50:14:ed:cb:7f:b4:31:67:14:8c:99:93:26:
         5f:2a:60:84:58:dd:7c:43:34:24:88:3e:ae:ed:0e:9c:c1:4b:
         b0:1c:f9:7a:46:3d:68:4e:6f:5d:fb:5d:b5:d6:4f:13:e6:1d:
         f9:ea:67:86:f7:d3:6f:e6:7b:b0:6c:4a:ee:b9:ba:c2:72:24:
         6a:15:98:b2:61:66:1e:d2:a0:d1:a8:d4:28:b1:28:79:fe:b2:
         ce:31:5b:7a:da:e1:94:3f:77:9c:3f:f1:b2:18:b6:78:70:38:
         33:9b:6c:38:92:a7:e5:b2:1a:b1:6a:61:0a:ce:fa:94:76:03:
         e4:ab:b8:8f:66:40:3e:e3:e9:97:a6:58:3c:38:2a:d6:71:39:
         50:24:7c:42:94:aa:fc:2e:49:f5:9d:a0:ce:5c:c5:05:0c:a9:
         11:4f:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 17:18:22 2026 by rpki-client