This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
File:                     3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft (raw, json)
Hash identifier:          tYqjnNX/3Np1b7qQsYCoVh8/CG6iItdYPF9pX7ZJ8Hg=
Subject key identifier:   43:C7:7E:90:51:E5:31:F5:6E:92:D5:07:8C:06:83:AA:5C:8A:D6:56
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       3C59A2918ED55A1F20B979562BF17782265E475B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
Manifest number:          0163
Signing time:             Sat 24 Jan 2026 20:12:30 +0000
Manifest this update:     Sat 24 Jan 2026 20:07:30 +0000
Manifest next update:     Fri 30 Jan 2026 16:49:30 +0000
Files and hashes:         1: 34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (hash: 55y8w5nGfteYDiB9xn3/+qJUqCZI0qRnGOKq7worFws=)
                          2: 34352e3233382e31332e302f32342d3234203d3e20323636383337.roa (hash: T2hd+7l6ymAZs0ExpiGtu8k0b3XkiE3vmQEQiUUViL0=)
                          3: 34352e3233382e31352e302f32342d3234203d3e20323636383337.roa (hash: VKHd2QI67Urln+Z5S1rpU4WP8wB49u86isCystO0iMs=)
                          4: 34352e3233382e31342e302f32342d3234203d3e20323636383337.roa (hash: CFq5dJ5b6iMTiEmGm39PVxnX/fhYWyK/rAly20OIpOI=)
                          5: 34352e3233382e31322e302f32322d3232203d3e20323636383337.roa (hash: z6ZNfxPF9Bx8FjrSZCOvspvzZheEDC89pqHuq8MSxr0=)
                          6: 3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl (hash: oE0/ba+Df+JGOh82ejZmV20thrp3tRix3LB++PD9bLQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:59:a2:91:8e:d5:5a:1f:20:b9:79:56:2b:f1:77:82:26:5e:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Jan 24 20:07:30 2026 GMT
            Not After : Jan 30 16:49:30 2026 GMT
        Subject: CN=43C77E9051E531F56E92D5078C0683AA5C8AD656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:a7:85:f4:5d:0c:48:1a:a5:53:61:70:e0:
                    23:1d:8a:e2:37:28:86:ba:44:b8:db:45:9f:2f:b2:
                    03:8a:e4:83:2c:25:e4:14:7d:18:b3:41:77:3d:52:
                    65:ec:4f:7f:30:a9:4c:7b:fa:da:dc:90:22:6f:96:
                    56:91:fe:25:f8:7e:68:33:79:23:2b:69:23:4a:3f:
                    2a:b0:ce:40:1e:ba:8d:c4:08:a2:39:7f:a2:bb:ec:
                    1c:0b:f2:de:da:4c:39:53:2d:4b:05:c0:57:87:d5:
                    eb:da:ff:f1:25:9d:3e:c6:d9:12:24:94:6c:21:3a:
                    68:97:cf:08:2b:78:d7:6b:d9:b6:6b:ee:55:5c:ae:
                    60:d2:41:83:7b:77:e0:a9:3a:ea:af:08:a6:e3:57:
                    fa:66:d2:5c:fe:cd:f5:fa:58:b3:66:b6:36:70:c3:
                    2a:78:29:04:a1:72:b4:4e:f9:2c:3d:59:ce:d7:d4:
                    46:ae:d6:51:6e:a9:2c:ef:57:dd:64:92:c5:23:ea:
                    c3:44:3d:62:bb:20:94:87:28:2b:51:dd:a2:8f:12:
                    7d:28:93:8e:94:66:64:12:55:c0:a0:dc:28:83:05:
                    e3:8a:f6:2b:71:d5:b0:42:62:05:7a:3e:49:cb:b2:
                    22:f5:ea:a3:de:03:23:b9:bf:aa:da:8b:37:31:f3:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C7:7E:90:51:E5:31:F5:6E:92:D5:07:8C:06:83:AA:5C:8A:D6:56
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:48:1b:2c:c0:f9:68:63:3a:65:6c:47:0c:15:9d:c0:b2:
         df:41:4b:17:d2:0d:ec:f9:84:be:e5:fe:c3:11:77:cd:b9:0d:
         1a:65:3f:f3:eb:d1:50:a9:5f:9a:c5:46:38:42:43:e8:8b:07:
         85:1e:41:b9:57:ad:64:ac:5e:36:da:04:a7:b3:e5:e4:b0:cf:
         6a:56:bb:42:93:7d:7b:db:89:70:72:64:a6:70:44:5a:f5:26:
         88:43:8c:9c:ee:82:c0:00:7a:19:dd:63:5a:ed:a7:e2:c3:34:
         82:12:26:14:8f:34:e8:44:25:5b:57:1b:6f:83:57:1c:9a:fb:
         45:b3:28:1d:ff:22:3a:60:8c:bb:20:89:9e:c9:6d:92:c2:f9:
         f0:e4:b2:c0:0a:99:63:34:3b:12:0b:f3:8c:8a:d1:70:84:f8:
         20:1b:ad:0c:b8:9c:74:62:6a:2d:04:90:88:0a:c1:d6:ba:6e:
         07:fc:7c:3b:69:b4:fd:97:c2:e4:d2:7e:e8:3b:1a:cb:70:13:
         20:56:81:46:69:7a:a6:3f:f9:0a:67:0e:1b:28:f7:d6:04:fd:
         a8:7f:ce:86:51:c1:23:f7:55:4b:75:cb:ef:e7:14:4d:18:79:
         c1:29:9b:e0:07:61:ea:cf:0e:e3:6d:d1:20:7e:a1:b0:e9:29:
         45:b8:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:40 2026 by rpki-client