This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
File:                     35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft (raw, json)
Hash identifier:          CMOLvpfsgdOihGEypJIl0qZvqNbBMwLSv0Qt+iNK5vY=
Subject key identifier:   FC:D9:EF:0F:7E:C3:1D:20:32:18:BC:FC:78:6C:13:1E:A5:F6:17:46
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       4CB5A8C6D4AB522F7DB1C4700FCD13606669F9AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
Manifest number:          015D
Signing time:             Sat 24 Jan 2026 13:38:15 +0000
Manifest this update:     Sat 24 Jan 2026 13:33:15 +0000
Manifest next update:     Wed 28 Jan 2026 21:48:15 +0000
Files and hashes:         1: 323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa (hash: DHqSeMF3VN8sYowL9DwJCYOKjBojOD4JDPl3dyHtkjY=)
                          2: 3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (hash: w+tzvI9TgYnU7TClWBfdzg8LDTuR38YKrBIL1x5f/g0=)
                          3: 3230302e31342e36332e302f32342d3234203d3e20323731383935.roa (hash: qijEU1GZ6oFZg4ManRGZ56u9R9vyJJpFjvKFO4ANHys=)
                          4: 35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl (hash: ihUZPO++xsd/qy6HbahofXnYDiimArDOPq8FTs3Na80=)
                          5: 3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (hash: GVO4EuNr0Xvu9oQ8AMyWbI3HzptWNRDA5lofWYmww/M=)
                          6: 3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (hash: FACaiEZS1Qcaz3f3cn0fajUomb3KQqkKrRIJElhdnCg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:a8:c6:d4:ab:52:2f:7d:b1:c4:70:0f:cd:13:60:66:69:f9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Jan 24 13:33:15 2026 GMT
            Not After : Jan 28 21:48:15 2026 GMT
        Subject: CN=FCD9EF0F7EC31D203218BCFC786C131EA5F61746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:14:18:bc:69:85:19:c1:77:31:52:13:66:
                    58:9c:62:09:62:53:d2:e5:a0:2c:f0:86:c3:61:f4:
                    b7:95:11:f9:20:4e:38:cb:b3:a9:44:b1:86:dd:dd:
                    12:ce:5f:07:f9:36:ff:dd:44:8c:70:0b:18:d5:76:
                    16:08:79:7d:8d:36:9f:8e:a2:44:33:84:a2:fc:d7:
                    6f:cb:ba:8b:c6:be:f5:8f:0c:d8:5e:f2:f5:b2:55:
                    9f:8c:1d:eb:72:c5:a5:98:f7:10:08:a1:16:85:b9:
                    69:d1:b1:b4:56:49:32:b7:5c:97:8e:67:40:a9:66:
                    bb:ae:b5:0b:3f:6a:34:4d:f6:69:92:6f:60:66:91:
                    f5:04:ae:9b:9c:ae:cf:3d:d0:ce:df:4c:06:78:c9:
                    0e:25:55:a0:20:f7:19:3b:91:b4:9b:ec:b1:ce:08:
                    7d:fa:58:92:3a:cf:15:99:ce:bf:e4:60:23:14:8d:
                    22:f1:9e:c1:68:5a:26:1b:57:af:4d:ff:dd:45:62:
                    7d:e2:7c:a4:f9:e9:ce:17:2c:cc:da:19:e3:51:bb:
                    90:32:97:37:6b:c9:4e:50:44:9f:d8:74:8a:bb:ca:
                    77:f1:0b:c3:fa:b4:3c:7a:91:c8:f5:fb:01:d4:8c:
                    c5:e6:80:e3:0f:54:40:89:5d:bb:c7:66:2b:54:17:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:EF:0F:7E:C3:1D:20:32:18:BC:FC:78:6C:13:1E:A5:F6:17:46
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:ba:24:b2:34:9f:3b:45:de:73:85:a9:fa:f9:fc:35:11:
         1a:95:3e:40:7f:c2:37:1b:dd:3e:25:a4:4a:80:26:c6:d2:de:
         92:0e:26:3d:1e:91:a4:ba:5c:ce:f1:c6:33:30:4c:e8:8c:82:
         04:88:ed:b5:d3:c1:f8:bb:f7:c7:3e:38:65:51:9b:cd:cc:af:
         70:ee:66:71:cd:d3:c3:c4:a3:ac:82:68:7f:ef:89:28:cd:f0:
         98:c9:e8:31:f9:14:e9:d8:56:21:7e:d0:c8:dd:38:6b:94:48:
         1e:57:88:07:87:ef:5f:ac:9d:bf:6e:34:60:34:31:e0:22:1a:
         56:b1:ef:cb:19:41:34:64:72:fd:2d:6b:24:47:64:83:7b:70:
         70:71:76:33:35:80:c2:e2:1d:49:63:64:8b:a0:88:4d:11:d4:
         9a:b6:4e:d7:42:5a:0b:05:c8:60:55:16:60:2b:bd:29:d7:10:
         06:3f:61:58:2a:83:2b:44:24:37:c2:56:91:86:ef:eb:9e:c1:
         b2:b8:db:99:df:c0:3a:a6:6c:70:fd:27:26:ee:95:4d:81:17:
         a8:12:d6:29:92:50:52:75:36:40:dd:69:08:20:c4:03:41:67:
         02:b7:4f:6f:7e:fa:9a:0c:76:dd:46:8c:23:08:78:54:ee:3b:
         db:52:25:fa
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTLWoxtSrUi99scRwD80TYGZp+a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVERENCQkI4MTY4Q0FCNDBBNTNEOEI1RDNGOENERjg1
OEQzQTk5QzAeFw0yNjAxMjQxMzMzMTVaFw0yNjAxMjgyMTQ4MTVaMDMxMTAvBgNV
BAMTKEZDRDlFRjBGN0VDMzFEMjAzMjE4QkNGQzc4NkMxMzFFQTVGNjE3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUhQYvGmFGcF3MVITZlicYgli
U9LloCzwhsNh9LeVEfkgTjjLs6lEsYbd3RLOXwf5Nv/dRIxwCxjVdhYIeX2NNp+O
okQzhKL812/LuovGvvWPDNhe8vWyVZ+MHetyxaWY9xAIoRaFuWnRsbRWSTK3XJeO
Z0CpZruutQs/ajRN9mmSb2BmkfUErpucrs890M7fTAZ4yQ4lVaAg9xk7kbSb7LHO
CH36WJI6zxWZzr/kYCMUjSLxnsFoWiYbV69N/91FYn3ifKT56c4XLMzaGeNRu5Ay
lzdryU5QRJ/YdIq7ynfxC8P6tDx6kcj1+wHUjMXmgOMPVECJXbvHZitUF35xAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU/NnvD37DHSAyGLz8eGwTHqX2F0YwHwYDVR0j
BBgwFoAUNd3Lu4FoyrQKU9i10/jN+FjTqZwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDEyN0JCREYxMjg4Q0QwQkE1MzkwMTIyMTJDNkY1QUMw
NUYxQTMyQkRDOUE4MkZBRDAxQ0Y5NDM1QzE2MTVDLzAvMzVERENCQkI4MTY4Q0FC
NDBBNTNEOEI1RDNGOENERjg1OEQzQTk5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUREQ0JCQjgxNjhDQUI0MEE1
M0Q4QjVEM0Y4Q0RGODU4RDNBOTlDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxMjdCQkRGMTI4OENEMEJBNTM5MDEyMjEyQzZGNUFDMDVGMUEzMkJE
QzlBODJGQUQwMUNGOTQzNUMxNjE1Qy8wLzM1RERDQkJCODE2OENBQjQwQTUzRDhC
NUQzRjhDREY4NThEM0E5OUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCB9LoksjSfO0Xec4Wp+vn8NREa
lT5Af8I3G90+JaRKgCbG0t6SDiY9HpGkulzO8cYzMEzojIIEiO2108H4u/fHPjhl
UZvNzK9w7mZxzdPDxKOsgmh/74kozfCYyegx+RTp2FYhftDI3ThrlEgeV4gHh+9f
rJ2/bjRgNDHgIhpWse/LGUE0ZHL9LWskR2SDe3BwcXYzNYDC4h1JY2SLoIhNEdSa
tk7XQloLBchgVRZgK70p1xAGP2FYKoMrRCQ3wlaRhu/rnsGyuNuZ38A6pmxw/Scm
7pVNgReoEtYpklBSdTZA3WkIIMQDQWcCt09vfvqaDHbdRowjCHhU7jvbUiX6
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:55:10 2026 by rpki-client