This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier:          NKirjp5AAjDwDhX3ETDbXGH+fGVBOaihC+wracFLXqM=
Subject key identifier:   B7:6F:CC:A0:AE:44:6E:3C:76:FA:5B:EC:FF:D3:C2:D4:B5:C4:81:31
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       0BE54933634071D706636CE96738AD8875F3684C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number:          0161
Signing time:             Fri 23 Jan 2026 05:15:59 +0000
Manifest this update:     Fri 23 Jan 2026 05:10:59 +0000
Manifest next update:     Wed 28 Jan 2026 11:04:59 +0000
Files and hashes:         1: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: Xru0tyfTBqsCBtEBgMj9rb0HrtrkaAwaQK0dfPR3nsQ=)
                          2: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: 77pdNkxxa965XrZs5ZAxZoSqZfXURgIQwoEk4eh5Z3A=)
                          3: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: Ez6wUNBZQYl4+Unjzg1QwfEX6tFGdMC/oA80uKot2qU=)
                          4: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: a0RZ+Wbk9evTYv8qKajiTtMoZgeuy0ceyKk9rIeyFtI=)
                          5: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: uaTXBPq4Xt48jKQMR/Y0Qj0kXZDdabwweiE3+uOO6ck=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e5:49:33:63:40:71:d7:06:63:6c:e9:67:38:ad:88:75:f3:68:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Jan 23 05:10:59 2026 GMT
            Not After : Jan 28 11:04:59 2026 GMT
        Subject: CN=B76FCCA0AE446E3C76FA5BECFFD3C2D4B5C48131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:ee:bb:13:59:b9:43:69:2b:37:76:61:9a:
                    10:5f:95:16:d1:e8:6c:c7:3c:05:94:30:b4:18:d6:
                    81:08:98:16:bc:40:9e:0b:56:d4:d2:5d:4d:f1:08:
                    80:fd:7a:d4:f3:8f:27:bf:1a:b8:c6:64:f1:99:86:
                    d4:68:ef:d0:87:3f:5e:52:40:41:84:a1:63:aa:51:
                    51:b6:43:11:44:7d:a8:93:eb:3f:e5:dd:d2:7f:43:
                    b9:d7:3d:9b:8c:67:12:20:13:09:31:23:73:1f:eb:
                    fe:ae:d8:7c:c3:31:49:b9:ea:d2:35:73:cd:6c:57:
                    bd:44:00:22:53:40:4b:3d:bf:e1:f0:7a:cc:6a:aa:
                    64:f8:a0:7a:79:63:4c:09:73:24:95:15:a8:25:05:
                    f7:86:9e:41:04:38:9c:d8:99:28:97:da:48:5f:be:
                    d2:07:d6:b0:80:a8:47:5b:22:00:dd:43:24:77:89:
                    4b:32:e3:5c:d6:9a:2e:3b:3f:cd:72:21:c2:dc:b5:
                    2d:9d:bd:29:a5:f2:62:60:db:b7:c7:ab:63:d1:9f:
                    69:2a:ee:29:08:62:e4:80:33:41:d9:bd:35:16:a0:
                    01:db:a2:5e:b1:b9:5c:26:28:21:97:2e:55:fb:f8:
                    1f:4a:f1:1a:33:d0:e4:13:49:e3:22:a6:66:99:52:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:CC:A0:AE:44:6E:3C:76:FA:5B:EC:FF:D3:C2:D4:B5:C4:81:31
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:ca:ab:28:ff:46:85:06:7b:f1:b6:aa:7a:3a:96:68:40:
         71:11:03:d5:81:65:06:24:25:6d:ec:1c:53:ba:75:84:07:60:
         3c:6d:30:80:4e:19:78:99:04:85:44:89:15:41:75:1f:44:7a:
         a6:37:9e:b3:bf:81:d1:22:ba:1a:fd:0a:bd:b6:e9:14:aa:40:
         74:51:c1:2c:ae:41:54:23:1c:f7:d4:5a:fc:ea:3c:08:60:a6:
         d5:ad:c0:f7:dc:6c:29:3c:44:66:d4:ac:ac:2c:94:52:93:22:
         52:65:cc:fd:67:b2:2d:a5:9c:00:4d:1c:91:de:ba:14:12:f0:
         82:8e:a9:bd:61:e5:5e:3d:15:48:cd:dd:28:fd:45:59:a4:bb:
         53:0e:84:6d:c9:aa:03:bf:84:83:0f:51:db:68:3d:e3:d9:e2:
         29:6a:f7:1b:9a:ca:57:2b:48:04:75:e0:57:10:17:4a:a2:72:
         5f:3f:3c:3f:2f:d6:2a:05:77:d6:d9:86:32:37:b0:c1:55:68:
         ba:85:a5:32:20:55:47:b1:7b:e2:61:17:8d:fb:0f:d9:ab:d3:
         7e:f9:a7:06:d5:25:29:45:48:7f:3d:8c:7a:7d:07:87:38:0d:
         0d:e0:ce:c6:d4:2c:be:2e:35:17:4f:50:a8:4a:ab:cb:9e:7a:
         a4:2e:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----