This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
File:                     CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft (raw, json)
Hash identifier:          IDdPzld7J5W1FkMA7y90oMHMXe9t7EV2UXiPjUHcvZE=
Subject key identifier:   9E:CA:EB:9B:E5:62:EC:E3:FC:D3:1B:C6:D3:88:E5:6F:EA:2D:00:03
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       1EBF50C4891870883F0F3D1B0851B0E18852B473
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
Manifest number:          015D
Signing time:             Sat 24 Jan 2026 18:01:04 +0000
Manifest this update:     Sat 24 Jan 2026 17:56:04 +0000
Manifest next update:     Wed 28 Jan 2026 23:01:04 +0000
Files and hashes:         1: 3133382e39392e3133362e302f32322d3234203d3e203631343937.roa (hash: HaAGY+Z0Iuf0Qkt2AQxufSJ76VURJRZsBTvZU6XxQxc=)
                          2: 3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (hash: I/KJd2Zdz4QYX3AqagWc5jDLSBu5YbvZCRePbr1en1Y=)
                          3: 323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (hash: ZCN1q5Il+7ybydk1RSPz4zlDfcSmAflpXZ8AIeRYnSk=)
                          4: CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl (hash: 7w3bPAb+5SCtIyzq0Vh1ZFx7nxSCR5sd0sHFg+0/77E=)
                          5: 323830333a643034303a3a2f33322d3438203d3e203631343937.roa (hash: Tb9KAgGFSZfXvRbWFvaAWz3cLsJtoYmjcvVEegj0Gos=)
                          6: 3133382e39392e3133362e302f32342d3234203d3e203631343937.roa (hash: 66Mp1mwI0Ozu4MA+k5Omg8oG5nZmFd+zKeSUVSzEiys=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bf:50:c4:89:18:70:88:3f:0f:3d:1b:08:51:b0:e1:88:52:b4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Jan 24 17:56:04 2026 GMT
            Not After : Jan 28 23:01:04 2026 GMT
        Subject: CN=9ECAEB9BE562ECE3FCD31BC6D388E56FEA2D0003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:8a:72:5e:03:0f:bf:db:36:98:93:e0:71:
                    a1:8f:71:b9:d2:0a:eb:c6:3b:eb:40:02:34:47:fc:
                    66:02:9d:6b:18:20:88:75:47:91:ed:42:e1:ad:7f:
                    66:37:f8:80:83:30:a1:e1:29:ba:99:64:fc:99:ed:
                    ea:b7:9e:7c:9a:2a:55:db:49:44:8d:ec:35:fa:47:
                    65:86:a3:ca:1b:5e:fa:48:34:b3:96:c4:9d:ad:94:
                    49:14:a7:d0:b9:65:f8:db:37:1c:40:4c:ec:14:21:
                    5f:6c:cf:7e:3c:9c:3c:67:7e:4a:29:02:91:73:84:
                    52:ba:ad:b9:b8:ac:9e:3d:fb:c7:95:a7:49:3d:e1:
                    23:bb:3f:40:86:01:ca:de:31:d5:01:5c:f7:e7:7f:
                    4f:73:6e:f2:3f:e0:4d:57:d8:70:9c:56:81:57:30:
                    af:ee:30:15:5a:bc:37:c9:c5:10:d2:43:c1:c2:f5:
                    59:23:78:4d:0f:46:47:d7:58:9e:ac:ae:5f:74:3f:
                    10:74:7a:25:e9:56:06:70:ee:b9:5a:5f:c6:74:0c:
                    bb:db:38:ff:a4:c5:74:6e:61:bb:fc:d2:87:60:8e:
                    ea:c7:39:4c:dc:ba:e9:ba:51:ff:c6:22:48:eb:6d:
                    63:18:01:35:e2:5b:53:24:0b:f1:6c:35:d8:d2:ef:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CA:EB:9B:E5:62:EC:E3:FC:D3:1B:C6:D3:88:E5:6F:EA:2D:00:03
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:4d:80:1d:83:3b:44:dd:aa:95:37:d3:2d:8e:b6:77:07:
         7e:9d:55:ae:c6:7b:33:85:3e:e5:90:60:62:16:98:4c:be:85:
         58:92:b3:1b:3c:b8:77:05:08:40:91:bf:23:10:bb:4f:a7:fe:
         05:90:14:33:d5:5b:7c:ff:79:9d:6f:82:31:67:a8:97:d2:3c:
         c0:f5:f6:24:74:69:0c:fa:ff:48:ea:e5:1a:0e:26:01:5e:3f:
         a4:70:1c:3b:d6:2b:bd:5a:25:fa:57:24:69:48:10:5e:28:32:
         01:d6:e8:ff:97:aa:6c:ab:7d:45:11:57:b8:de:f2:36:d8:34:
         e8:97:f0:1c:d1:47:4b:22:06:38:6f:4f:3e:85:ba:e2:49:1a:
         4a:af:f0:0c:a1:df:6c:8b:45:55:3b:1e:e6:c1:5d:67:f1:9f:
         8d:07:13:27:a2:89:03:85:70:54:6a:a3:6d:13:04:aa:25:18:
         63:51:82:9d:5e:0f:fe:83:19:83:45:df:63:c8:14:13:dc:fb:
         fb:2e:75:c3:56:d5:42:0b:d8:72:29:4c:ba:ce:d5:6b:fc:dc:
         20:22:a3:8c:d6:89:6b:8a:5f:0f:20:bc:36:65:ab:f4:38:8b:
         45:f6:1c:b9:90:27:13:89:e0:00:8f:14:07:80:97:4a:fc:b0:
         52:01:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:44 2026 by rpki-client