This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
File:                     CF2E2C753A200707CD61AACD7110A7372C505538.mft (raw, json)
Hash identifier:          B81eXle8Cnvm1BZv7nFt4K1WnphVuuR8voe+uENuaH8=
Subject key identifier:   F6:14:4B:04:64:7C:6A:39:F0:A5:C3:19:47:AC:AF:D8:75:96:B5:8E
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       3A65BE1A956EC5FF0D72682C32254E053037987D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
Manifest number:          0152
Signing time:             Sun 25 Jan 2026 10:52:45 +0000
Manifest this update:     Sun 25 Jan 2026 10:47:45 +0000
Manifest next update:     Sat 31 Jan 2026 00:02:45 +0000
Files and hashes:         1: 3138362e3138392e3234342e302f32342d3234203d3e20323634373538.roa (hash: BG+24Hw3MhpMmWLT9ajXYnmvy4L3rRESVs+ad/lUWV8=)
                          2: 3138362e3138392e3234352e302f32342d3234203d3e20323633373236.roa (hash: V3zCFxqDd+g8v/dU5mynO8IKLMbv79z3vmnz8bbnSf8=)
                          3: 3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (hash: o++tbVYNGfXTgG2ZM4JDkbYUOlez3yG+fLJv7M6G6mk=)
                          4: 3138362e3138392e3234342e302f32332d3233203d3e20323633373236.roa (hash: NgBPQazejyVb7dpLb8G2ndQyaNvK906bKF8pAgj0UXQ=)
                          5: CF2E2C753A200707CD61AACD7110A7372C505538.crl (hash: LgrxGTN4dd3YSY2h1UpUy+aQrS68l/PdQzibWt30uRE=)
                          6: 3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa (hash: XXAb4s56oObfUvBVgYNZC8yyf5inJnjYBfKroaRCvtE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:be:1a:95:6e:c5:ff:0d:72:68:2c:32:25:4e:05:30:37:98:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Jan 25 10:47:45 2026 GMT
            Not After : Jan 31 00:02:45 2026 GMT
        Subject: CN=F6144B04647C6A39F0A5C31947ACAFD87596B58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:d0:15:d7:78:ac:2b:9b:8e:3f:69:62:f0:
                    28:fb:6d:bb:f8:51:21:50:db:e9:a4:57:4c:c5:ad:
                    50:98:5c:a5:e6:e9:70:32:de:ff:ae:94:70:67:cb:
                    32:17:4a:ad:ed:a9:a9:53:08:a2:eb:b9:b7:fb:a8:
                    6a:46:cc:0f:60:4e:2c:d7:0f:6c:b6:78:5b:cf:74:
                    94:14:05:63:01:55:47:0f:9a:ff:93:83:80:01:4e:
                    16:cf:ac:a0:9a:8a:1a:0f:0f:15:00:07:76:d3:56:
                    ae:28:5b:80:f9:d0:2c:e6:7d:6c:8c:d3:7b:ba:e8:
                    40:9d:59:d3:9e:16:8d:d2:46:1e:08:9b:1f:c7:df:
                    e1:b7:b1:6c:52:86:c0:86:81:cc:f2:6a:c2:47:c3:
                    f8:69:d2:9e:ed:b6:f2:90:38:a9:4f:53:ef:4e:bd:
                    34:a3:20:ea:c5:cb:35:3a:98:1e:83:bd:d2:4a:0f:
                    a8:a8:87:b4:c4:5a:5a:77:e8:98:a1:cf:f1:6d:cc:
                    86:15:aa:10:53:9a:73:f2:21:c6:0b:bb:c8:53:02:
                    e1:d9:29:1c:c6:cb:94:e2:12:3e:28:bb:34:fc:30:
                    40:eb:83:fb:15:4e:fb:eb:b4:d2:0a:5d:f5:4c:10:
                    61:d3:b2:6b:99:64:6a:d7:17:07:8a:35:e9:c1:33:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:4B:04:64:7C:6A:39:F0:A5:C3:19:47:AC:AF:D8:75:96:B5:8E
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:67:8b:22:ad:80:44:43:08:23:ef:f2:7d:a5:6b:69:52:
         4e:e8:80:92:42:ec:33:10:da:41:2f:46:d5:18:59:bc:2c:4e:
         ce:37:87:f6:56:f1:55:dc:5f:1a:82:62:3a:1e:74:f9:d6:9f:
         88:52:1a:91:4b:d0:34:86:83:2e:86:d7:d6:a9:5b:fd:1f:42:
         28:e7:42:7f:8b:ab:1a:0f:45:f0:13:29:8a:32:6c:24:c7:8d:
         aa:88:11:91:65:3e:29:f1:9c:3c:5a:7d:3b:8d:a5:21:f5:3c:
         64:b7:8f:86:3b:32:5b:af:b2:71:34:d0:1c:4e:80:63:6a:a1:
         f1:4e:95:31:a0:e9:e9:9c:de:e2:cc:45:60:69:47:40:c0:7e:
         1f:36:cd:6e:99:3b:b0:00:60:a7:c4:8a:33:d4:4e:6a:7d:4f:
         1c:86:a5:d3:20:93:ad:9e:e4:00:c2:8b:2c:b6:5c:84:5e:d6:
         c4:b9:b8:55:25:2b:f3:f1:bb:40:9a:de:c0:e0:d7:a6:24:f7:
         2b:b1:d0:b9:1f:aa:13:6d:74:c2:85:95:94:e7:3c:38:0e:ee:
         a7:b8:c3:1c:a3:b7:bd:89:4a:5f:da:76:71:39:11:aa:e1:39:
         0b:7d:b0:1d:cc:f2:fc:2f:ff:44:db:77:bb:3c:c0:8f:71:2e:
         ed:62:14:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOmW+GpVuxf8NcmgsMiVOBTA3mH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyRTJDNzUzQTIwMDcwN0NENjFBQUNENzExMEE3Mzcy
QzUwNTUzODAeFw0yNjAxMjUxMDQ3NDVaFw0yNjAxMzEwMDAyNDVaMDMxMTAvBgNV
BAMTKEY2MTQ0QjA0NjQ3QzZBMzlGMEE1QzMxOTQ3QUNBRkQ4NzU5NkI1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl+tAV13isK5uOP2li8Cj7bbv4
USFQ2+mkV0zFrVCYXKXm6XAy3v+ulHBnyzIXSq3tqalTCKLrubf7qGpGzA9gTizX
D2y2eFvPdJQUBWMBVUcPmv+Tg4ABThbPrKCaihoPDxUAB3bTVq4oW4D50CzmfWyM
03u66ECdWdOeFo3SRh4Imx/H3+G3sWxShsCGgczyasJHw/hp0p7ttvKQOKlPU+9O
vTSjIOrFyzU6mB6DvdJKD6ioh7TEWlp36Jihz/FtzIYVqhBTmnPyIcYLu8hTAuHZ
KRzGy5TiEj4ouzT8MEDrg/sVTvvrtNIKXfVMEGHTsmuZZGrXFweKNenBMx81AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU9hRLBGR8ajnwpcMZR6yv2HWWtY4wHwYDVR0j
BBgwFoAUzy4sdTogBwfNYarNcRCnNyxQVTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDhFMjZGRjRCNTcwRTNCMENBODhFODQwRjU3ODcwQzJB
NDY1OEVDMENGODM1QTNDRjQ5QjNCNTMwQTU4Mzc0LzAvQ0YyRTJDNzUzQTIwMDcw
N0NENjFBQUNENzExMEE3MzcyQzUwNTUzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjJFMkM3NTNBMjAwNzA3Q0Q2
MUFBQ0Q3MTEwQTczNzJDNTA1NTM4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA4RTI2RkY0QjU3MEUzQjBDQTg4RTg0MEY1Nzg3MEMyQTQ2NThFQzBD
RjgzNUEzQ0Y0OUIzQjUzMEE1ODM3NC8wL0NGMkUyQzc1M0EyMDA3MDdDRDYxQUFD
RDcxMTBBNzM3MkM1MDU1MzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/JWeLIq2AREMII+/yfaVraVJO
6ICSQuwzENpBL0bVGFm8LE7ON4f2VvFV3F8agmI6HnT51p+IUhqRS9A0hoMuhtfW
qVv9H0Io50J/i6saD0XwEymKMmwkx42qiBGRZT4p8Zw8Wn07jaUh9Txkt4+GOzJb
r7JxNNAcToBjaqHxTpUxoOnpnN7izEVgaUdAwH4fNs1umTuwAGCnxIoz1E5qfU8c
hqXTIJOtnuQAwosstlyEXtbEubhVJSvz8btAmt7A4NemJPcrsdC5H6oTbXTChZWU
5zw4Du6nuMMco7e9iUpf2nZxORGq4TkLfbAdzPL8L/9E23e7PMCPcS7tYhRz
-----END CERTIFICATE-----