This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
File:                     089B798E1BD051786195E5F9D02238D550A5EAD7.mft (raw, json)
Hash identifier:          H2SJCOoulmxmFFT5IDvd517tHdBh48FGe77v2URMcjI=
Subject key identifier:   1B:D6:7E:FF:CE:2D:F8:20:A7:E2:F8:5C:E4:54:88:B6:41:42:93:72
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       17B0936A2CB64CCCCC916510BADF19C4DA9418DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
Manifest number:          015B
Signing time:             Fri 23 Jan 2026 21:36:44 +0000
Manifest this update:     Fri 23 Jan 2026 21:31:44 +0000
Manifest next update:     Wed 28 Jan 2026 23:06:44 +0000
Files and hashes:         1: 323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (hash: BTHQafdBEPDCY/Q+rdg91ZIKAkaUR5QqmUs/7O8aOuQ=)
                          2: 3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (hash: FC0A4kYMN+12KDsouBYRhnvcA+jC3RVPfkSzue4aikM=)
                          3: 3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (hash: loJqd3G/MODOFR3/tfP5odCacMKuW9gaAkd3VDEwPUk=)
                          4: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (hash: zdAvATBlONXSyPO3fSZiZA/3ZSEseiY0fJaxc36QJ6k=)
                          5: 089B798E1BD051786195E5F9D02238D550A5EAD7.crl (hash: L6EHGcdmli5+ADiqMr62aEK/3BAqIG4/rtvYbqfnwok=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b0:93:6a:2c:b6:4c:cc:cc:91:65:10:ba:df:19:c4:da:94:18:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Jan 23 21:31:44 2026 GMT
            Not After : Jan 28 23:06:44 2026 GMT
        Subject: CN=1BD67EFFCE2DF820A7E2F85CE45488B641429372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:4d:db:5c:68:5e:74:7a:0d:fb:b8:a9:93:
                    07:7f:bd:42:c6:ba:ab:23:fb:e8:6d:8d:61:85:a7:
                    6e:c9:f0:50:6f:2e:b3:29:94:a2:e3:bb:a8:e6:65:
                    69:66:29:6e:b7:00:b3:22:b5:29:cf:3b:f7:83:8d:
                    4b:e0:f6:e6:b4:37:27:9f:33:c8:0e:49:4c:d1:e3:
                    ff:71:fd:07:28:78:26:c5:23:4f:55:47:43:b0:25:
                    2f:f7:72:e8:d4:ef:ed:1e:6b:f5:d3:ef:6e:03:08:
                    f7:0d:f9:dd:fb:b3:43:62:97:f5:6d:96:06:99:ce:
                    79:c2:55:40:b6:91:3e:fd:6b:4a:ff:c7:5c:81:c6:
                    3b:16:27:1e:35:40:b1:70:57:dc:df:23:30:63:1d:
                    d3:9a:61:e7:99:75:f3:46:90:a9:1d:74:3a:d2:f0:
                    df:66:38:67:18:f6:61:19:8c:b4:21:e5:dc:0e:e3:
                    ab:fe:6c:e4:23:ff:09:42:3f:7a:9e:26:af:cd:c0:
                    86:b7:d1:2c:6e:da:3c:97:3c:0e:6e:81:f5:cd:ca:
                    ae:c7:47:9d:e0:42:6b:e3:d1:ae:47:d7:27:78:53:
                    04:89:04:ac:e4:b7:93:11:0e:5d:28:6e:81:eb:bc:
                    68:1f:b8:10:16:5f:8d:18:1c:76:8f:d3:02:29:dc:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D6:7E:FF:CE:2D:F8:20:A7:E2:F8:5C:E4:54:88:B6:41:42:93:72
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:91:6c:bd:86:db:51:72:ff:06:cb:f0:2c:fb:2e:fd:67:93:
         14:b1:55:0b:a9:01:5e:b1:fa:4c:e4:27:90:64:73:43:3d:a4:
         de:79:ae:9a:14:40:ec:56:08:01:2e:45:21:b1:f3:38:c3:f0:
         94:56:11:4a:c2:84:89:0d:df:72:c1:84:71:7e:35:86:4d:53:
         6e:3c:27:45:7f:6c:08:85:17:10:57:c1:e3:dd:80:df:0f:40:
         5b:15:e5:93:77:d7:23:3f:98:75:e7:cb:e8:19:54:bb:7a:d8:
         88:5d:16:ae:2a:89:12:39:2f:0f:21:05:b2:d6:6e:06:a9:11:
         9d:02:65:5b:d0:82:0d:9e:53:b3:49:c5:46:17:f4:04:8e:17:
         e9:7a:62:31:7c:a7:2c:d0:ee:79:10:17:7b:0b:22:d5:c5:2e:
         e0:f3:78:68:7f:e4:6a:04:37:31:f7:85:99:da:de:7d:41:38:
         4b:dd:b5:19:1d:23:7f:25:64:d6:c0:64:d9:f3:a0:55:58:3c:
         b9:7f:77:78:91:91:c5:bf:f9:83:21:a0:64:83:75:ff:36:37:
         6b:4c:9a:49:98:db:81:ad:a5:03:be:59:6e:77:94:b1:c9:ed:
         fc:f4:bd:8e:55:5f:e6:78:f0:46:d9:27:30:f2:fd:ee:38:a3:
         65:94:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----