This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          mCjRnUGFSDn9UrWm5n3/LzUcqDSeLzU8OE6gUBATt/s=
Subject key identifier:   01:46:74:17:7A:34:A6:FB:A4:3C:12:07:52:68:57:79:C5:D5:4D:81
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       75FC2B609A9550BC983A08BD33AE158BE5A75B16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          0157
Signing time:             Sun 25 Jan 2026 03:47:39 +0000
Manifest this update:     Sun 25 Jan 2026 03:42:39 +0000
Manifest next update:     Thu 29 Jan 2026 11:09:39 +0000
Files and hashes:         1: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: LkCZxCyAuIrADNbDworLC+OdX9XvaBOSze8dj/27xsI=)
                          2: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: Wd3wmpUkGK4PN7wED6TFiUVR7l4D/Zs91tzppMzHtOY=)
                          3: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: KfCwacbp9eH9hJb9ZGCMfC5QzcFXtkIAZsp5iOIs0Ic=)
                          4: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: r/2mVZsjY64qv+odHhZ1YzATnWCDhY1Z2dOYpA3mEoI=)
                          5: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: SpfcZUQi77eBwB6czggXOfLrkFAYjmUxFOItmPslgf0=)
                          6: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: u2ZvMdhwZAssXBxw58EFni6m+O1DDLR6gZFw+/rCTeE=)
                          7: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: E5eo8MMklIeYQBWAJkmTZjSBHIb80W4f0MfsVyxQVVo=)
                          8: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: KqEDgK6dPR5pezxaXmPeaJ8fMkW3dzyGrMJP0llK+Uc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:2b:60:9a:95:50:bc:98:3a:08:bd:33:ae:15:8b:e5:a7:5b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Jan 25 03:42:39 2026 GMT
            Not After : Jan 29 11:09:39 2026 GMT
        Subject: CN=014674177A34A6FBA43C120752685779C5D54D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:10:0e:86:03:38:5a:90:96:e0:d1:86:1e:
                    b0:60:f3:b9:fc:7b:29:f3:c7:1a:21:c1:67:19:58:
                    4f:01:8e:0b:d7:d7:13:cb:7e:ef:98:27:d4:4b:46:
                    a0:2a:c8:44:b4:a6:85:c6:1b:45:6d:d0:35:8d:29:
                    56:bb:8e:62:ec:ca:04:be:27:59:62:49:ec:6e:c2:
                    24:03:7e:3b:19:35:3a:70:d6:7d:a5:20:02:15:8b:
                    a7:3c:3a:bf:d8:c2:1f:77:a8:d8:f9:9d:0a:e3:f2:
                    f6:b2:23:0c:29:c8:8e:9a:74:21:3f:3a:dc:fa:44:
                    d6:cb:6b:41:57:26:4d:85:08:ec:b4:a5:f9:7e:33:
                    e5:c5:30:c2:d1:45:64:fc:60:39:ed:1b:40:6a:19:
                    b6:8a:e5:e5:c7:2e:9c:5b:9c:1c:1a:57:e9:9f:9a:
                    ac:8f:5a:e8:9d:ef:2a:3a:5b:ca:5c:eb:de:85:7d:
                    26:64:71:bf:de:df:28:7b:bc:4b:a0:25:b6:32:e4:
                    84:c4:95:ae:9e:34:8d:cc:0a:4a:fd:7b:bd:5b:59:
                    56:ce:98:e9:42:ac:57:bf:0f:2b:6b:5a:6f:82:f3:
                    78:fe:61:12:56:5b:c8:ca:4b:18:95:28:e5:34:f2:
                    fe:a6:12:55:a3:1d:f4:a1:28:74:0a:b7:90:19:12:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:46:74:17:7A:34:A6:FB:A4:3C:12:07:52:68:57:79:C5:D5:4D:81
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:10:6a:25:f0:41:ee:e8:d3:4a:a9:41:4c:8c:0c:4f:b9:c2:
         c3:dc:63:d7:4c:3b:07:49:1c:c5:a2:0a:8a:78:cf:d4:91:79:
         c0:30:cc:34:43:8e:7e:65:52:37:8f:9d:e0:03:cf:41:2a:b2:
         f7:26:e2:9b:27:dd:a9:fc:de:d1:1a:20:c6:7d:9d:3e:b5:72:
         3f:a1:a8:f2:56:d0:20:90:fa:1c:ae:26:55:d6:70:ff:e2:ed:
         da:7b:78:4e:7b:ac:27:97:25:a5:a3:02:b4:1b:6f:ff:c3:08:
         e2:88:53:79:18:64:4f:a9:b9:e1:44:1f:94:b6:9b:9a:2f:70:
         4b:de:58:b9:ab:9e:20:33:3c:0a:6b:b0:54:79:23:07:3e:3c:
         78:04:15:5f:29:24:7c:ba:57:4e:b5:f5:92:61:72:b6:89:55:
         d5:c5:9a:81:7a:ea:6b:44:1a:82:45:d2:e3:15:2b:96:e3:0e:
         38:8b:14:99:8b:ea:cb:6f:4a:0a:f3:21:8c:e7:2b:36:2a:cf:
         3e:e6:af:49:ff:60:0f:92:5d:57:50:00:47:4a:44:74:67:c8:
         fc:55:9a:24:23:8a:45:56:df:59:06:da:b5:0e:7a:2d:d5:26:
         59:35:f8:63:63:83:28:5a:df:d9:07:0f:4e:1b:fc:83:d2:6a:
         8a:09:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:38 2026 by rpki-client