This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          WlN7w3PrB9Pkl3lW7m4IfbS8qiCX4v3JGXLhMwPCBPI=
Subject key identifier:   DC:EB:55:04:48:20:A2:A5:B5:0A:28:0F:68:2A:98:E6:3F:6D:6D:3F
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       52468C310D050E32CA6A913732CF4AE3A182AFE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          0160
Signing time:             Sat 24 Jan 2026 09:35:29 +0000
Manifest this update:     Sat 24 Jan 2026 09:30:29 +0000
Manifest next update:     Thu 29 Jan 2026 09:25:29 +0000
Files and hashes:         1: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
                          2: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
                          3: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA=)
                          4: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
                          5: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: CoJ2URxznlUKBtYBHE3M/9zNlenBnnPahmyi3jknJP4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:8c:31:0d:05:0e:32:ca:6a:91:37:32:cf:4a:e3:a1:82:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Jan 24 09:30:29 2026 GMT
            Not After : Jan 29 09:25:29 2026 GMT
        Subject: CN=DCEB55044820A2A5B50A280F682A98E63F6D6D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:2f:f0:32:f4:b6:fc:7e:48:38:d2:6a:0c:
                    f9:6c:47:dc:8c:49:b0:18:68:e6:c8:19:40:4a:38:
                    5e:41:ff:3a:85:aa:e5:33:c7:2e:e6:34:a9:ec:a8:
                    6f:ed:cd:47:d3:be:00:d3:f5:20:f4:ce:d2:7f:2c:
                    d9:27:81:65:34:b8:78:b7:42:6c:4f:38:2a:0c:ea:
                    db:39:6d:96:d7:cc:4d:5d:cc:d1:7e:2b:33:cb:39:
                    86:50:d4:a1:03:af:80:70:1f:86:b3:22:32:c2:73:
                    7a:19:be:cd:08:dd:d2:f8:fd:65:ed:45:3f:75:0a:
                    0e:70:29:50:ee:cc:9a:1b:58:7d:42:b1:09:a2:5f:
                    fa:c8:6b:96:e7:37:3b:39:78:19:c1:05:a5:c1:ae:
                    6a:d5:d5:0d:dd:91:73:61:ed:fd:77:c3:67:e0:1d:
                    f6:45:7a:23:69:f9:3e:27:61:f0:86:11:b2:85:23:
                    8c:14:0f:ba:b1:5f:09:ec:75:0e:9e:7e:3b:b5:20:
                    21:3c:00:bb:6b:91:73:a8:6f:99:c8:cd:12:80:02:
                    84:7b:64:a5:07:34:11:be:aa:66:cb:8d:c4:34:6e:
                    4c:a3:bc:8a:29:4a:48:98:c3:b3:1e:32:5f:37:4c:
                    74:e6:0f:e3:8d:cf:3e:69:d3:19:11:32:e3:e3:32:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:55:04:48:20:A2:A5:B5:0A:28:0F:68:2A:98:E6:3F:6D:6D:3F
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6d:d5:12:ad:c4:45:c9:5e:20:63:46:af:a8:e6:03:07:6d:
         1d:b1:db:b4:e3:2a:7d:13:12:ff:40:37:d0:90:d3:3a:c5:8c:
         e6:10:81:3b:15:e6:e3:57:00:39:ba:f1:bd:61:59:ce:62:20:
         e3:ed:8d:d1:2b:62:16:5e:a3:a3:62:08:1a:db:ad:51:df:28:
         d4:e6:a1:db:be:4c:72:c2:97:2d:fa:c3:ea:8e:7e:6b:d9:19:
         da:5f:81:e4:29:1c:5d:46:72:f8:7a:e4:88:ce:d7:8c:1f:61:
         7a:cc:48:12:82:17:aa:1d:fd:97:64:2b:d0:f3:77:2e:65:c7:
         51:16:e0:69:cb:76:2f:11:23:c2:a8:c9:63:85:29:c7:30:84:
         5c:67:2d:c0:33:ca:99:20:f9:aa:0d:42:0d:f3:ff:1b:55:94:
         3a:48:b9:78:67:af:f2:04:c1:ee:16:d2:c9:90:84:23:4b:dc:
         36:fc:d6:6b:d2:c8:5f:5b:de:17:e4:89:2d:d5:df:5c:c7:3d:
         fd:bd:23:d1:ce:bf:84:3c:03:89:9f:e8:7a:0f:8b:c9:fa:5c:
         5a:ee:cd:90:cc:06:bc:00:9a:1d:34:27:2d:a7:24:e3:c1:0e:
         b8:46:44:af:33:a6:1e:7e:fb:d8:d8:c1:95:b4:20:68:a3:07:
         ff:5e:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----