This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
File:                     209A4B66D92052DAA8A5358DB465449F02D52BAB.mft (raw, json)
Hash identifier:          Vjfo8ddhg2PnboT1R1CHYKpah3KEVzZsF9TUgV6P9IQ=
Subject key identifier:   33:CE:CD:29:A8:B7:8B:AF:8A:1B:40:84:C1:20:1F:28:78:69:76:BE
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       6539697F8EC48D9B684E2234F282FCDEDA830BCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
Manifest number:          0163
Signing time:             Fri 23 Jan 2026 18:04:27 +0000
Manifest this update:     Fri 23 Jan 2026 17:59:27 +0000
Manifest next update:     Wed 28 Jan 2026 10:34:27 +0000
Files and hashes:         1: 3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (hash: XZCPYZansHH8pQplKmG06znAEblG1rjfxBWlD//B4BA=)
                          2: 3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa (hash: 8+boctzqfyfnVa1UI5DKkkyWZd7W2yDzp24h4BvgrKM=)
                          3: 209A4B66D92052DAA8A5358DB465449F02D52BAB.crl (hash: txO90KgsthLuRVxN8iQfTh+c1L8RVuQzKJKGqyNTmCA=)
                          4: 3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (hash: NUdz4gbcT5LHKEevirDOxHI3aG86rzyIgDzbT8buVfQ=)
                          5: 3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa (hash: 5dsf4hX0TZDPvBoN40dwgZfcow7Us3qJgeuLLriY/0U=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 10:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:39:69:7f:8e:c4:8d:9b:68:4e:22:34:f2:82:fc:de:da:83:0b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Jan 23 17:59:27 2026 GMT
            Not After : Jan 28 10:34:27 2026 GMT
        Subject: CN=33CECD29A8B78BAF8A1B4084C1201F28786976BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:71:b1:31:ae:5c:b0:12:6b:c3:e1:9e:a5:
                    95:b3:e6:f4:02:b5:05:26:fe:f0:b0:0e:87:fe:3b:
                    5d:9a:17:46:af:47:84:d9:79:87:28:69:0a:04:e9:
                    11:f5:94:32:48:6c:75:47:71:55:50:1b:57:15:28:
                    f0:54:10:5b:af:cf:00:17:3c:7c:6f:ef:66:04:75:
                    96:0b:c5:29:37:4a:f0:f7:45:bb:a7:2f:c9:df:13:
                    33:4f:d1:1a:16:1f:98:53:21:97:50:41:73:82:59:
                    77:8b:ca:c5:d8:18:33:e4:d2:2c:a9:d8:34:61:86:
                    0c:d1:dc:db:1d:8a:be:cd:a0:df:37:61:4a:58:84:
                    86:40:6b:e2:53:51:90:c1:65:e7:98:c2:07:1b:e2:
                    bc:76:3c:41:15:7d:3f:70:cb:8f:af:4e:d9:92:5b:
                    da:b4:82:18:a9:58:ea:ca:de:09:9f:39:a2:5b:44:
                    ff:cc:f9:7a:dc:42:72:0b:57:ff:6c:5f:95:f2:8e:
                    0e:b8:bf:c1:1f:8b:62:a1:dd:e0:5a:8b:ab:6f:59:
                    65:a1:f3:76:27:83:79:bd:f2:99:ab:c7:68:a1:81:
                    0c:79:87:7b:a5:38:eb:71:3e:9f:13:e7:08:08:0d:
                    6b:a3:67:e4:1d:2e:39:29:d2:bd:5a:e4:a3:82:42:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CE:CD:29:A8:B7:8B:AF:8A:1B:40:84:C1:20:1F:28:78:69:76:BE
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:97:33:77:42:c9:92:82:eb:2d:d0:af:b5:82:17:8b:8f:
         f5:fd:2c:56:aa:c9:f4:88:bd:a8:4b:20:9f:2b:2d:56:27:a1:
         97:5a:75:4f:32:25:7c:34:d1:6e:d2:e4:e1:6f:55:25:fa:db:
         3c:02:08:e4:c6:11:69:2b:3b:77:7c:03:c8:14:03:68:96:7c:
         f9:66:87:76:08:84:00:3b:0c:cd:83:a7:2a:22:bd:2d:bf:97:
         08:07:19:99:70:1f:33:fb:7a:1a:8d:e2:bd:58:e1:fb:5e:21:
         25:88:5b:86:61:3a:f7:4a:46:c5:36:4f:5f:7e:10:17:0b:81:
         89:97:b5:a0:61:fc:60:3f:57:3a:8a:77:01:00:b2:13:50:47:
         94:75:dc:36:ae:c9:d1:ac:b0:56:69:37:77:4e:b9:42:bf:b1:
         3f:25:d7:56:4e:4a:43:de:9c:66:d7:78:3c:a8:e0:d1:97:6b:
         9c:a3:11:4b:4e:af:16:2e:1b:10:31:9f:04:cd:61:44:dc:1e:
         60:56:f5:7a:20:19:e2:cc:7c:cb:d8:c2:1f:ac:30:51:aa:28:
         74:a5:09:bd:34:14:26:ef:80:c5:f8:37:7e:16:bf:f2:7e:85:
         4b:d5:08:57:ab:a4:51:5e:82:4f:8c:ec:56:bd:1d:99:ca:04:
         9d:d0:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:16 2026 by rpki-client