This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
File:                     89FBB987F4762D9626E55719EF46050943DEE51C.mft (raw, json)
Hash identifier:          2uLrm+Sx2sfSwgCYoyDS8L3i+8xX0FmEpp5hgGclfUY=
Subject key identifier:   12:32:3F:CB:42:8B:F7:64:63:EC:22:32:85:F7:DE:79:C3:2A:33:25
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       41D2B3922998AC7A2E0D218E5E105006D75EA2F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
Manifest number:          0156
Signing time:             Thu 22 Jan 2026 10:58:32 +0000
Manifest this update:     Thu 22 Jan 2026 10:53:32 +0000
Manifest next update:     Wed 28 Jan 2026 08:49:32 +0000
Files and hashes:         1: 3230302e36332e39342e302f32342d3234203d3e20323637383139.roa (hash: G3catBT100/CfBI3THAjqqwYqbcSIhUzmfIZeEpa07c=)
                          2: 3230302e36332e39352e302f32342d3234203d3e20323732303436.roa (hash: VxXQ3d17rMyqlGzdL1/hUWFKi60x62IChtbQspAiiQc=)
                          3: 3230302e36332e38302e302f32312d3234203d3e203532343331.roa (hash: 9LZPXGwCVkRPl1r9vclA6dvx0l4XnEJKSo8m9OQyOi0=)
                          4: 3230302e36332e39332e302f32342d3234203d3e20323637383139.roa (hash: PwDC9egcPDq08UqMRwNYQO5bDjw83//Pehj3wDWDDvg=)
                          5: 3230302e36332e36342e302f32302d3234203d3e203532343331.roa (hash: s0+ScZPTR8aF+svEqWGihuEv81ALg2H8LXOcoqgRTdY=)
                          6: 3230302e36332e38382e302f32322d3234203d3e203131303134.roa (hash: 7Y/6rc7TJ0i3iDk/CTfBthEgOSbg9NpwXJA3o9IS3gk=)
                          7: 89FBB987F4762D9626E55719EF46050943DEE51C.crl (hash: +PKoMCkKWcBbo85JcXEQ5HpQEb+C0wDV9o7cMr6v7c0=)
                          8: 3230302e36332e39322e302f32342d3234203d3e2037333033.roa (hash: /Q1c1/JJ4RQsF/hwZgu8cD+xVm1rYv3ZPhsCt/PcU/c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 08:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d2:b3:92:29:98:ac:7a:2e:0d:21:8e:5e:10:50:06:d7:5e:a2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Jan 22 10:53:32 2026 GMT
            Not After : Jan 28 08:49:32 2026 GMT
        Subject: CN=12323FCB428BF76463EC223285F7DE79C32A3325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:52:53:7e:ac:c1:79:e6:a7:dd:74:69:a5:
                    97:bc:af:b0:db:56:f9:9b:3e:73:26:04:d9:28:09:
                    14:45:06:ab:ea:93:68:f2:64:52:f5:42:76:39:ec:
                    c8:a3:2b:ac:1e:9d:0a:4a:23:0d:07:3d:16:4a:71:
                    79:c4:05:9c:ba:68:6b:50:91:2b:85:60:49:ce:79:
                    5f:c7:10:05:7a:24:ec:98:e0:b5:fb:ca:ab:68:ca:
                    af:7f:d7:7f:ea:2b:4c:ea:b0:7b:4b:a0:8c:18:de:
                    61:97:83:f3:fc:56:ad:44:7c:84:2a:2e:80:32:fa:
                    23:f1:cd:31:27:32:7a:c8:e7:76:78:ad:10:25:66:
                    1e:35:31:3c:3b:a8:33:f0:cd:be:92:87:3b:1a:aa:
                    d0:70:da:36:67:09:c0:02:fe:86:1a:e1:59:4b:29:
                    3f:98:44:ea:11:15:d0:16:b7:4c:64:64:a3:70:f6:
                    92:2d:4a:a5:61:49:50:50:cc:56:d9:73:2b:8b:fe:
                    0e:92:39:07:82:ba:54:51:8b:fa:96:54:4d:a5:ea:
                    6a:e8:8d:9b:d1:3c:24:46:24:a6:6f:68:e2:00:82:
                    ba:31:69:27:f3:b3:da:3b:c7:e5:31:43:23:bd:8d:
                    6b:36:59:f9:14:89:36:b6:0a:78:14:df:0d:0e:cc:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:3F:CB:42:8B:F7:64:63:EC:22:32:85:F7:DE:79:C3:2A:33:25
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:14:80:ae:2c:01:01:2a:be:e6:48:66:57:18:63:36:80:26:
         6b:9d:b4:68:c6:80:85:7a:47:2e:0d:1d:0e:b0:06:b6:9e:a3:
         9e:63:ec:62:0e:3d:4d:58:fe:58:84:5f:71:c7:96:ad:51:9a:
         ad:19:0e:50:94:4e:e5:36:28:85:03:4d:68:ad:d1:28:10:33:
         e4:1a:f0:68:52:33:d9:dc:20:a8:de:c1:f0:d5:1b:be:1b:09:
         89:75:43:e5:a3:2a:42:89:27:2b:eb:ce:36:77:fa:3a:95:6b:
         ad:14:96:23:6e:aa:66:00:f3:68:51:c7:e1:73:05:09:05:eb:
         38:a8:c9:77:87:fc:4b:8d:e2:a6:5e:16:1b:a4:b2:c4:38:2f:
         72:14:31:01:74:75:76:4c:13:53:05:94:8c:71:de:8f:db:2f:
         f5:2d:7d:1f:d4:ea:71:19:26:44:3e:2b:30:0c:31:bc:34:59:
         2e:ef:54:71:bc:f3:ab:3d:6d:e0:0c:06:e6:23:f0:1a:c2:d1:
         1b:e8:68:01:8c:bf:db:55:db:04:81:06:3b:fc:cd:12:12:4e:
         82:7a:1e:e8:d7:29:48:77:10:6e:ce:e7:cd:4d:07:22:0d:b1:
         92:e0:b6:15:09:72:26:df:42:ce:cf:5f:8f:e6:8a:04:c5:48:
         88:8d:e2:18
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUQdKzkimYrHouDSGOXhBQBtdeovkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGQkI5ODdGNDc2MkQ5NjI2RTU1NzE5RUY0NjA1MDk0
M0RFRTUxQzAeFw0yNjAxMjIxMDUzMzJaFw0yNjAxMjgwODQ5MzJaMDMxMTAvBgNV
BAMTKDEyMzIzRkNCNDI4QkY3NjQ2M0VDMjIzMjg1RjdERTc5QzMyQTMzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6H1JTfqzBeean3XRppZe8r7Db
VvmbPnMmBNkoCRRFBqvqk2jyZFL1QnY57MijK6wenQpKIw0HPRZKcXnEBZy6aGtQ
kSuFYEnOeV/HEAV6JOyY4LX7yqtoyq9/13/qK0zqsHtLoIwY3mGXg/P8Vq1EfIQq
LoAy+iPxzTEnMnrI53Z4rRAlZh41MTw7qDPwzb6ShzsaqtBw2jZnCcAC/oYa4VlL
KT+YROoRFdAWt0xkZKNw9pItSqVhSVBQzFbZcyuL/g6SOQeCulRRi/qWVE2l6mro
jZvRPCRGJKZvaOIAgroxaSfzs9o7x+UxQyO9jWs2WfkUiTa2CngU3w0OzJCzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUEjI/y0KL92Rj7CIyhffeecMqMyUwHwYDVR0j
BBgwFoAUifu5h/R2LZYm5VcZ70YFCUPe5RwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QkFBRUZBQkZGQjQwNzdCMDJGMzdBNkNBNEVBQzUzOUI0
MDc5NDgxQzgwQzgzRjZGOUQyQkZGMzA3NDRDRkFBLzAvODlGQkI5ODdGNDc2MkQ5
NjI2RTU1NzE5RUY0NjA1MDk0M0RFRTUxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUZCQjk4N0Y0NzYyRDk2MjZF
NTU3MTlFRjQ2MDUwOTQzREVFNTFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkJBQUVGQUJGRkI0MDc3QjAyRjM3QTZDQTRFQUM1MzlCNDA3OTQ4MUM4
MEM4M0Y2RjlEMkJGRjMwNzQ0Q0ZBQS8wLzg5RkJCOTg3RjQ3NjJEOTYyNkU1NTcx
OUVGNDYwNTA5NDNERUU1MUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnFICuLAEBKr7mSGZXGGM2gCZr
nbRoxoCFekcuDR0OsAa2nqOeY+xiDj1NWP5YhF9xx5atUZqtGQ5QlE7lNiiFA01o
rdEoEDPkGvBoUjPZ3CCo3sHw1Ru+GwmJdUPloypCiScr6842d/o6lWutFJYjbqpm
APNoUcfhcwUJBes4qMl3h/xLjeKmXhYbpLLEOC9yFDEBdHV2TBNTBZSMcd6P2y/1
LX0f1OpxGSZEPiswDDG8NFku71RxvPOrPW3gDAbmI/AawtEb6GgBjL/bVdsEgQY7
/M0SEk6Ceh7o1ylIdxBuzufNTQciDbGS4LYVCXIm30LOz1+P5ooExUiIjeIY
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:59 2026 by rpki-client