This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
File:                     3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft (raw, json)
Hash identifier:          n1SQ79nbDVt57IWCm9qDntadRAgJKo+3jqE60eBsvFI=
Subject key identifier:   CE:67:1E:16:FA:84:D8:AB:80:BA:99:9D:0F:7D:E9:35:8F:83:3B:AC
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       0A0F70644E68E9401F03E13AC40B7F435C907E66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
Manifest number:          0154
Signing time:             Sat 24 Jan 2026 21:08:10 +0000
Manifest this update:     Sat 24 Jan 2026 21:03:10 +0000
Manifest next update:     Fri 30 Jan 2026 17:25:10 +0000
Files and hashes:         1: 3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa (hash: WgbiAmxVAnJN8mu92BrYGpkpltajdzf6gA/D9q2Rp78=)
                          2: 3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa (hash: TnN/eFAzSZTqquLfFlYpUXRutHK2HxOTUt2etVc2rXQ=)
                          3: 3138312e3139312e32352e302f32342d3234203d3e203532343235.roa (hash: 5GFOZlUR6JvcdJ5gL82KyBq2YA5dCMDE+aop88tVGNE=)
                          4: 3138312e3139312e32372e302f32342d3234203d3e203532343235.roa (hash: sJHrn4yDBN+N5Rhpw6N7oSSMyrs17fR59Nls8dnotZU=)
                          5: 3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl (hash: ifI2MwKsEw136PkHBUzGgA6fSKvn1IWhv3SC/W7Mn7w=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0f:70:64:4e:68:e9:40:1f:03:e1:3a:c4:0b:7f:43:5c:90:7e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Jan 24 21:03:10 2026 GMT
            Not After : Jan 30 17:25:10 2026 GMT
        Subject: CN=CE671E16FA84D8AB80BA999D0F7DE9358F833BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:76:8a:15:13:9f:ce:a1:a5:24:59:e5:f7:
                    61:05:0e:e7:66:d3:ab:22:24:3b:fe:1f:d5:7d:8c:
                    bc:79:f3:09:cc:96:49:1c:0d:7b:48:86:31:9b:f4:
                    da:36:3b:d8:99:d3:6f:4b:34:f9:6a:ba:25:43:d4:
                    c0:71:0b:9f:93:7a:a5:f6:2e:97:ce:e5:4b:5c:69:
                    b8:b3:58:11:aa:31:dc:7c:67:4b:cc:5a:a1:01:0e:
                    7c:8e:e0:6f:07:9e:3a:3d:78:80:f0:d3:93:11:08:
                    82:f4:46:c1:58:5f:92:66:e5:2f:97:77:5f:17:37:
                    04:c2:74:bd:4c:ba:87:f8:c1:7f:34:23:82:2d:ec:
                    a0:fc:1d:d5:cb:63:d4:b6:e1:61:b0:16:60:e0:bc:
                    7e:b6:02:49:fe:d9:31:49:0f:a1:14:72:79:2b:f4:
                    ae:4c:5c:e4:0b:80:e1:be:49:7c:bc:64:28:28:0f:
                    35:3e:b7:de:ba:48:b5:84:f0:7c:86:10:55:9d:97:
                    bb:9d:72:3a:e6:aa:1e:da:2a:7b:04:04:8d:c2:ca:
                    87:9a:77:ef:bf:3a:cf:c0:63:65:76:63:a0:8b:a4:
                    d2:59:89:a2:f3:7c:3d:f7:7f:a4:69:f7:13:10:74:
                    df:a2:80:0b:74:ae:dd:42:4a:f8:85:82:bd:7e:72:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:67:1E:16:FA:84:D8:AB:80:BA:99:9D:0F:7D:E9:35:8F:83:3B:AC
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:00:c1:f4:fb:c7:c8:6e:de:32:b0:b4:61:d2:47:6a:f2:
         c7:a8:a3:8e:a6:d7:81:f4:9c:49:7f:2f:d8:38:39:ff:25:66:
         6c:97:77:ef:e0:d1:68:69:17:75:51:b7:ef:89:c9:02:1f:6d:
         53:fa:0a:62:1c:77:18:31:e4:57:14:ea:1c:a3:37:b1:58:6c:
         ad:d0:9d:0f:ac:2d:81:76:10:97:23:ef:c7:13:ea:e2:fd:e4:
         93:48:08:e1:75:f0:2f:70:0b:55:ee:a6:81:5d:48:53:6c:10:
         4d:6a:82:bb:77:79:6c:7d:0d:96:ee:3e:c6:4c:7f:0c:db:28:
         a1:d7:13:43:2b:80:93:a4:48:d2:51:42:51:e8:25:9c:c4:cd:
         45:97:93:dc:fc:0f:1c:bc:1b:d5:1f:5a:d5:b9:6b:6d:83:6d:
         eb:b9:84:31:59:99:d2:71:55:86:9d:5a:3c:6c:eb:b5:0d:29:
         ff:59:48:56:38:87:59:b0:40:b5:98:b3:a9:ae:00:f2:af:c3:
         91:52:fb:ff:e0:2d:58:85:c2:e6:74:39:c1:0f:cd:39:f1:45:
         25:0e:68:20:40:63:28:1c:db:95:99:b1:e5:7b:86:06:4e:34:
         c6:d9:07:59:07:33:20:55:3c:18:57:41:bf:8e:8b:1a:73:9f:
         4e:67:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----