This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
File:                     2AE59E62324C453AEB84910F81FFB3247C715B49.mft (raw, json)
Hash identifier:          7S0/Hw6J1TaaZYKbLI9ngVnUj9JbJ/2oB28QzJgnfPI=
Subject key identifier:   BF:58:BF:AA:53:88:D4:D9:30:FB:AC:1C:F6:61:20:A4:C8:0C:3D:42
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       0481206B70CBCCEA5260E41F8331BBF04C227D8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
Manifest number:          012C
Signing time:             Fri 23 Jan 2026 09:38:52 +0000
Manifest this update:     Fri 23 Jan 2026 09:33:52 +0000
Manifest next update:     Wed 28 Jan 2026 22:50:52 +0000
Files and hashes:         1: 3137302e38312e3235322e302f32342d3234203d3e20323634383432.roa (hash: WY9oipZaIBtZwqa0minJNuf34ue+yj5fWCFrzEokXes=)
                          2: 3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa (hash: G84WJ7zJtH7wvjCZCz3Qc2EbLd4Hs5OFu9kxWdJGKf4=)
                          3: 3137302e38312e3235342e302f32342d3234203d3e20323634383432.roa (hash: swFyWshSCHbF3iB7VL/miyHMTgzBzKLCyJbgbi9Roh8=)
                          4: 3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa (hash: gBJonLpm850/MioMMSniIu7oe+IdUUueUSXf/irAAdU=)
                          5: 2AE59E62324C453AEB84910F81FFB3247C715B49.crl (hash: +/nSJNVLBLXcrvJck+ddO/JKBr5Wsz8D77uDVHVHBu8=)
                          6: 3137302e38312e3235332e302f32342d3234203d3e20323634383432.roa (hash: XPN4XrD1Bbbwt3YQ4/Cw82LzkU0H84M6KayDT9zJNrQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:81:20:6b:70:cb:cc:ea:52:60:e4:1f:83:31:bb:f0:4c:22:7d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Jan 23 09:33:52 2026 GMT
            Not After : Jan 28 22:50:52 2026 GMT
        Subject: CN=BF58BFAA5388D4D930FBAC1CF66120A4C80C3D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:ff:f7:be:e4:9a:55:c7:30:87:62:ea:b1:
                    de:f8:81:62:34:f8:8f:35:49:44:93:ae:d3:6d:c2:
                    67:0a:57:07:22:fd:22:f7:cb:71:82:a6:d7:c7:27:
                    d0:20:61:35:8e:97:32:64:5e:94:f4:10:da:44:4c:
                    db:c6:ae:2c:52:fc:44:10:d9:29:79:3b:e0:a0:0d:
                    b0:df:ae:67:fa:79:6e:25:2c:b2:8b:25:34:5b:37:
                    36:05:8c:81:81:23:d0:47:f3:e3:07:01:35:95:bf:
                    a9:a6:0d:db:54:58:c6:d7:e2:6b:82:fe:c6:b2:a0:
                    2e:07:ef:ca:d0:3c:d8:92:8a:af:9d:20:fb:72:16:
                    ad:91:6b:aa:d6:ea:1c:22:13:0e:6c:6c:e3:4b:1f:
                    9f:2d:98:34:b6:6b:d3:77:7a:d5:d2:99:68:b2:f1:
                    61:07:18:cd:50:2f:66:0b:f4:68:7e:a1:3b:3f:04:
                    fc:9b:26:42:64:f7:dd:66:d6:3e:3e:6c:ce:4d:03:
                    7a:f5:2e:22:ee:5a:07:d4:a9:94:ff:b4:8d:4e:c4:
                    4d:71:60:82:49:e0:7b:91:3d:e5:51:c6:de:89:e0:
                    3d:e9:fe:b6:6d:83:63:1c:59:d1:69:ee:92:b2:36:
                    a5:00:b7:ec:37:9d:43:bc:3d:52:e4:c8:9a:82:92:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:BF:AA:53:88:D4:D9:30:FB:AC:1C:F6:61:20:A4:C8:0C:3D:42
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:93:dc:1f:3b:39:6e:61:9e:08:a3:2f:cf:8d:33:90:71:33:
         db:2c:fb:e5:45:56:68:5b:6b:97:04:5c:63:4c:78:14:38:16:
         2f:e3:15:c0:76:0a:ff:e8:d0:fe:59:9d:3a:2f:4d:5e:99:3e:
         48:ba:43:ad:3c:d3:e1:63:1e:77:9c:78:67:94:f2:99:2e:9c:
         f7:42:32:39:c2:38:fc:e2:09:2c:39:7e:1a:12:86:16:02:d4:
         2e:fc:92:28:3b:9e:02:2e:78:d6:3a:48:8b:fc:66:5d:e5:d2:
         d6:ab:d5:e8:1d:00:91:65:40:fe:30:66:30:f7:37:d5:8c:d8:
         76:7e:2a:e2:c4:6d:16:68:86:17:02:15:75:57:32:de:a6:00:
         0d:55:b2:5a:1d:30:c9:be:3f:b9:f0:dc:ab:61:0f:ab:51:78:
         e0:4d:0e:ad:96:57:15:b8:ea:31:c7:e4:35:6e:8b:78:2c:cd:
         8a:98:a5:7f:43:f8:88:fb:41:ff:3c:32:d2:02:9a:24:d4:22:
         af:eb:65:4f:18:6b:4e:2f:94:ab:65:fc:3e:51:e1:22:51:38:
         58:69:29:9d:d6:81:05:99:ab:d2:bc:f7:73:42:9f:75:82:45:
         e5:1a:17:20:c5:70:70:1b:07:fb:45:bd:ff:65:e1:5c:cc:a4:
         ea:97:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:30 2026 by rpki-client