This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
File:                     D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json)
Hash identifier:          jfjr18NLuKsnhlNQAz4OImI4lgIa/LsV5sHFhNKbnRo=
Subject key identifier:   8D:A0:27:0A:38:DF:9D:E2:56:4F:C7:6A:5F:D7:7E:F2:BB:D4:86:A1
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       402F30EB71C2CB885B1A9B307EC8767C529BF2E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
Manifest number:          015C
Signing time:             Sat 24 Jan 2026 16:35:10 +0000
Manifest this update:     Sat 24 Jan 2026 16:30:10 +0000
Manifest next update:     Fri 30 Jan 2026 11:04:10 +0000
Files and hashes:         1: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=)
                          2: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: BQdwxtgo5L1T0UilqKluFvqRRHzFjkB9p9gPX/wbUVY=)
                          3: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: 7nyWFZqmWXQSgc2vMkGLZsiUj1TT6vu46INlTokJIIs=)
                          4: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: 22IIcViPVQrq8s8qz+AVX6gEV7PwXar+cKyEKta5HCc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2f:30:eb:71:c2:cb:88:5b:1a:9b:30:7e:c8:76:7c:52:9b:f2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Jan 24 16:30:10 2026 GMT
            Not After : Jan 30 11:04:10 2026 GMT
        Subject: CN=8DA0270A38DF9DE2564FC76A5FD77EF2BBD486A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:2a:b7:0b:c0:36:af:d1:75:ba:2b:8c:d3:
                    f5:f3:c9:ed:76:28:5b:48:9b:70:8c:54:ba:09:6e:
                    c9:c3:0f:18:b7:23:3b:d1:b4:28:89:3b:48:47:45:
                    2a:ba:09:eb:53:10:59:fc:89:cb:5f:e0:56:9b:9c:
                    17:5e:3c:25:55:cc:fe:d2:4a:7c:37:61:b6:47:93:
                    14:7a:ac:3a:d9:a1:23:e0:dd:74:37:76:5a:21:fc:
                    7a:3c:9e:9c:b5:4c:82:8c:5e:bd:ed:2b:8b:d9:38:
                    c8:8c:54:52:0e:a8:87:a8:fa:d1:ca:02:2c:41:04:
                    aa:b0:9c:99:4f:77:13:36:38:4f:df:01:fd:2a:a5:
                    4c:59:d9:ea:84:74:7a:69:97:b8:79:30:f7:35:c1:
                    95:1a:96:3a:6f:06:74:90:f5:ff:29:5f:79:1b:15:
                    04:96:3e:72:d5:5c:46:69:6d:56:81:f2:4b:1a:0d:
                    38:5c:51:6a:15:f3:2b:53:c6:25:6d:62:97:24:e7:
                    06:4e:24:2e:f3:0f:83:3d:e4:98:71:a0:31:67:d1:
                    8d:53:92:71:fc:c8:7e:29:d3:e1:87:f8:f1:a3:4d:
                    cc:4b:43:fa:9f:ee:f4:06:8d:dc:64:d2:42:d9:b9:
                    43:98:f1:e4:d7:d2:09:72:5a:d6:c4:06:28:b4:67:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:27:0A:38:DF:9D:E2:56:4F:C7:6A:5F:D7:7E:F2:BB:D4:86:A1
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:4a:f8:09:c3:cc:72:21:07:f9:e4:25:1a:4b:f5:d1:50:
         d0:d1:81:15:7c:15:ab:c4:61:22:56:36:bb:50:25:e8:a6:08:
         4d:81:9b:2d:5f:d3:f0:02:00:d7:f6:8c:91:2f:46:29:9e:ea:
         30:84:a1:6f:4f:f6:05:a8:38:85:f6:e3:d3:0d:12:48:53:89:
         24:bc:25:4e:c5:f6:3a:ed:ff:70:0e:13:d0:d6:d5:39:8b:de:
         dd:65:b2:87:0a:1b:d5:31:fd:b6:b4:43:88:96:84:58:46:b9:
         cb:63:be:f9:80:ca:90:64:0d:ac:97:d9:f4:36:12:46:7f:e5:
         35:37:9d:50:c9:e6:d6:24:1b:6d:f3:d7:66:f1:b4:30:45:63:
         dd:e5:48:d0:2b:f7:d0:78:e4:07:bd:a3:de:bd:1e:b8:06:ea:
         e7:c5:12:a7:37:27:41:38:2f:a2:cc:c4:5d:5a:be:6c:24:d9:
         9b:70:10:ff:6a:57:74:c9:5a:18:df:72:56:0f:e0:6d:a7:36:
         b0:91:2b:94:26:14:d0:1a:71:f9:ff:0c:1d:d7:82:cb:6a:5e:
         16:6a:cc:5d:6e:9e:ad:d8:1b:03:fe:1f:13:9f:ed:8c:50:00:
         c2:71:87:81:ea:3d:5c:6a:66:27:9a:43:3a:ae:e7:21:db:79:
         f9:99:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:21 2026 by rpki-client