This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
File:                     BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft (raw, json)
Hash identifier:          6f5KvjtqeDkvLLqJd6MQzITwJKGUvBsHXwRs55IJiUA=
Subject key identifier:   19:A6:A7:39:45:BB:18:1F:44:40:A7:E9:4C:EF:30:D1:38:51:76:84
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Certificate issuer:       /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial:       151B2DF3C2F89330EB3B0FCD2116B58B28773D13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
Manifest number:          0162
Signing time:             Sat 24 Jan 2026 13:28:09 +0000
Manifest this update:     Sat 24 Jan 2026 13:23:09 +0000
Manifest next update:     Fri 30 Jan 2026 02:42:09 +0000
Files and hashes:         1: 323830333a353763303a3a2f33322d3438203d3e20323634363638.roa (hash: 6EQI1iB1QtECSSuW964On6b1cQ2GjpGSHisaImT2+U0=)
                          2: 3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa (hash: J2mlWujl4pCpWEE94ESEPPniojCJsj022+FHUBcYhS0=)
                          3: 323830333a353763303a3a2f33322d3438203d3e203532343638.roa (hash: Ao0JBAqVTgE1tylfYPJhIHDqJ3tmyBYy+v7gdgLyxWU=)
                          4: BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl (hash: 5SsZsUDjm3pQ9jcVgT7c1emaqGh/0tbYvVxFi1ZjmgU=)
                          5: 3136342e3136332e3133322e302f32322d3234203d3e20323634363638.roa (hash: AwP2f/TmRBJrdlyCjP3+p85dsw6oD812YWiADREI7LY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1b:2d:f3:c2:f8:93:30:eb:3b:0f:cd:21:16:b5:8b:28:77:3d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
        Validity
            Not Before: Jan 24 13:23:09 2026 GMT
            Not After : Jan 30 02:42:09 2026 GMT
        Subject: CN=19A6A73945BB181F4440A7E94CEF30D138517684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:54:cc:f8:25:6d:b4:04:d9:ae:bc:e3:b5:
                    48:0d:0c:56:ad:67:80:50:10:54:8e:f5:ac:91:83:
                    3d:25:f4:14:be:4b:a0:7d:e9:a9:6c:6e:4f:24:01:
                    33:4a:cc:f3:7b:c7:f7:ca:30:6c:93:20:fd:e0:61:
                    66:c7:2e:08:aa:1b:55:dd:a0:09:a0:df:69:62:e0:
                    22:1d:dc:6a:8c:0e:cf:30:f0:d9:c4:86:95:b1:19:
                    72:94:95:5a:a0:94:9b:ba:34:ab:0c:ed:7f:19:ea:
                    88:03:3a:0d:4f:ad:84:fe:7d:7d:24:aa:34:01:68:
                    36:fb:d3:61:92:b9:6c:04:23:74:d7:de:d0:ef:88:
                    44:5e:2f:c9:99:62:50:16:b0:ff:b3:63:dd:ab:3d:
                    66:30:7e:64:a6:31:d6:53:1e:ba:de:67:b3:d8:09:
                    48:61:b7:5d:be:41:85:d1:d8:74:da:6c:4c:3d:30:
                    3b:33:6e:46:71:87:25:0d:e2:74:a3:5f:df:b2:d5:
                    d6:d9:18:2b:78:ca:8c:4a:2a:a0:4a:4a:87:d9:7f:
                    d1:ac:d7:f9:84:fa:55:60:ec:b2:28:d8:65:46:fd:
                    21:fe:d2:fd:2f:62:33:55:6c:85:d8:4e:bf:40:49:
                    55:4f:71:61:b1:3c:33:d3:1b:39:fe:38:bf:30:45:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A6:A7:39:45:BB:18:1F:44:40:A7:E9:4C:EF:30:D1:38:51:76:84
            X509v3 Authority Key Identifier:
                keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:69:0e:d0:72:7c:65:5b:09:97:d1:64:29:26:55:69:55:
         c3:d0:cb:f0:12:7f:a3:a1:22:5b:4a:91:cc:0b:be:69:56:59:
         07:c8:74:a9:79:b5:af:6a:fc:eb:e8:40:52:63:0e:0e:a7:67:
         f8:f9:30:d3:0e:ed:1f:2b:5d:c5:eb:18:da:cd:54:04:d6:b2:
         c7:6b:a9:b6:f8:19:b4:6a:e2:f0:f3:c5:3a:b7:a9:aa:ca:70:
         20:c0:8f:fc:be:2a:b5:21:ba:7f:7a:b7:7c:7c:0d:8f:a9:27:
         56:91:c5:f2:ac:fe:f0:a2:ad:3f:8f:dc:97:38:63:21:91:d0:
         1f:41:78:44:a1:1f:cf:04:a6:31:16:ca:34:11:9c:7f:db:7d:
         5c:e4:03:97:c4:b4:21:dc:c8:a7:13:72:db:6f:3c:c7:fc:e7:
         df:94:71:4d:44:25:0d:34:a5:35:93:4e:ca:d2:6d:f4:44:58:
         72:e9:43:2f:d1:9c:fa:7f:90:ca:d9:25:84:3f:77:3f:1b:03:
         64:3c:17:88:db:b8:97:70:22:87:c3:a0:c2:9a:0c:85:df:f7:
         e3:35:c1:87:11:2b:33:10:77:f8:32:1b:3f:39:38:6f:7c:14:
         7a:e2:1a:12:74:0c:fc:10:2e:3f:55:d2:08:b9:61:64:60:67:
         65:bf:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----