This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
File:                     DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json)
Hash identifier:          7R9bUMdasmzWZkt01OSRhyzpwbQ+hlkhCSNjwFS8Zn8=
Subject key identifier:   C5:D0:5C:2C:7A:8B:E2:CC:99:B4:CF:64:C1:65:6F:C0:D4:E0:58:EB
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       515EF765B943DFCE18F8FF9C44F4018428C6C238
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
Manifest number:          0165
Signing time:             Thu 22 Jan 2026 11:23:49 +0000
Manifest this update:     Thu 22 Jan 2026 11:18:49 +0000
Manifest next update:     Wed 28 Jan 2026 09:57:49 +0000
Files and hashes:         1: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=)
                          2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=)
                          3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: QUQBpo9Mz68Bai84l+4qQcjXUiDjJtQeChYNs8Avr3Q=)
                          4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=)
                          5: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:f7:65:b9:43:df:ce:18:f8:ff:9c:44:f4:01:84:28:c6:c2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Jan 22 11:18:49 2026 GMT
            Not After : Jan 28 09:57:49 2026 GMT
        Subject: CN=C5D05C2C7A8BE2CC99B4CF64C1656FC0D4E058EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:d5:fd:44:f5:27:d7:e6:4d:a1:a2:f0:45:
                    9c:cc:bb:54:f1:e6:0d:6f:e0:bb:3b:ae:0a:bb:0d:
                    f1:79:2f:0e:38:fa:9f:2d:8c:a3:a9:08:dc:d1:bf:
                    f4:9b:6b:cc:10:c5:e1:01:86:6a:86:42:36:12:6d:
                    02:d5:74:f9:c7:83:84:10:e1:60:84:99:54:92:e5:
                    d5:0d:f7:79:79:14:48:32:d9:87:86:a1:b4:6d:c6:
                    50:bd:5e:96:fc:40:5f:73:94:9b:88:64:90:b4:05:
                    a6:0b:80:ee:3c:18:42:cc:85:9b:9d:51:28:bf:ac:
                    8b:4b:be:b3:df:4d:e2:4e:c3:ca:80:00:f8:6f:59:
                    05:29:12:1a:08:da:39:90:0e:6a:74:79:a3:ac:28:
                    45:5b:20:00:95:f3:1b:5c:97:73:2b:82:46:10:d5:
                    b2:a4:d6:d1:99:14:84:63:63:09:25:67:77:10:ca:
                    8e:f1:94:bc:63:ff:c1:64:10:58:80:d4:e7:13:1f:
                    8f:88:72:1c:f7:19:88:3e:6a:06:e3:14:ac:91:e4:
                    17:05:74:5a:7c:ab:12:46:dd:3b:ee:6a:22:c6:18:
                    f8:bf:94:f7:8f:47:b6:b7:f4:72:a4:2e:50:7a:e2:
                    8f:60:75:68:53:17:f8:d0:43:d9:f4:c2:c0:5f:2e:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D0:5C:2C:7A:8B:E2:CC:99:B4:CF:64:C1:65:6F:C0:D4:E0:58:EB
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:c1:2b:d8:37:14:3d:d0:31:db:16:3e:d1:c6:95:c4:7c:
         5e:00:0e:99:94:76:13:0e:6a:6f:84:b9:9b:01:a8:f9:93:4d:
         6e:f1:ec:ab:2e:23:e5:5f:8b:da:f9:ac:70:02:21:a3:fb:eb:
         26:62:ee:1f:47:44:2f:e6:07:ea:59:12:6e:dc:5d:a0:54:43:
         8f:20:5d:7a:d1:05:e4:06:25:1f:4c:46:ac:fc:8b:f3:bd:7d:
         80:a5:b5:35:15:1a:c4:ea:b5:7c:7e:d3:cb:df:3d:fa:9c:dd:
         fc:76:e2:47:25:6b:c6:08:20:05:7e:9d:d0:63:0f:50:a4:98:
         09:b9:db:c3:50:5c:d3:c6:a5:f0:e4:64:79:87:a6:7d:14:f5:
         85:ff:5b:c0:d0:45:9e:13:d9:20:8c:e0:aa:f1:43:76:0b:5e:
         21:7f:b6:5c:03:ce:ab:96:02:55:2f:49:5c:59:b4:80:e7:83:
         27:80:84:14:19:de:9d:e0:a0:22:03:16:ec:28:1f:f4:ab:c8:
         34:ce:4d:10:9c:1f:b2:0e:8a:11:cd:ba:fa:36:6c:e5:ac:24:
         8c:96:d8:2b:6c:1c:38:e2:19:25:d5:9f:27:8a:51:f0:2c:91:
         81:b5:89:f6:3d:f3:0c:e3:a7:2c:ad:ca:d4:04:f0:b0:4f:dc:
         3a:9a:8f:f3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUUV73ZblD384Y+P+cRPQBhCjGwjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD
M0E0Q0QyOTAeFw0yNjAxMjIxMTE4NDlaFw0yNjAxMjgwOTU3NDlaMDMxMTAvBgNV
BAMTKEM1RDA1QzJDN0E4QkUyQ0M5OUI0Q0Y2NEMxNjU2RkMwRDRFMDU4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBk9X9RPUn1+ZNoaLwRZzMu1Tx
5g1v4Ls7rgq7DfF5Lw44+p8tjKOpCNzRv/Sba8wQxeEBhmqGQjYSbQLVdPnHg4QQ
4WCEmVSS5dUN93l5FEgy2YeGobRtxlC9Xpb8QF9zlJuIZJC0BaYLgO48GELMhZud
USi/rItLvrPfTeJOw8qAAPhvWQUpEhoI2jmQDmp0eaOsKEVbIACV8xtcl3MrgkYQ
1bKk1tGZFIRjYwklZ3cQyo7xlLxj/8FkEFiA1OcTH4+Ichz3GYg+agbjFKyR5BcF
dFp8qxJG3TvuaiLGGPi/lPePR7a39HKkLlB64o9gdWhTF/jQQ9n0wsBfLjwlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUxdBcLHqL4syZtM9kwWVvwNTgWOswHwYDVR0j
BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB
NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE
Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5
RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4
MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3
MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGL8Er2DcUPdAx2xY+0caVxHxe
AA6ZlHYTDmpvhLmbAaj5k01u8eyrLiPlX4va+axwAiGj++smYu4fR0Qv5gfqWRJu
3F2gVEOPIF160QXkBiUfTEas/IvzvX2ApbU1FRrE6rV8ftPL3z36nN38duJHJWvG
CCAFfp3QYw9QpJgJudvDUFzTxqXw5GR5h6Z9FPWF/1vA0EWeE9kgjOCq8UN2C14h
f7ZcA86rlgJVL0lcWbSA54MngIQUGd6d4KAiAxbsKB/0q8g0zk0QnB+yDooRzbr6
NmzlrCSMltgrbBw44hkl1Z8nilHwLJGBtYn2PfMM46csrcrUBPCwT9w6mo/z
-----END CERTIFICATE-----