This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          4rYozfrV0jcrP9uGNgE/idyURqqukb123ibNI1uFUoA=
Subject key identifier:   3B:8E:06:66:41:B4:D9:40:60:9E:CE:64:9C:48:35:E9:5B:3A:68:A5
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       52AE8F54073D38DF8D28F0CD59186FA3F3E48186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 00:15:47 +0000
Manifest this update:     Sun 25 Jan 2026 00:15:47 +0000
Manifest next update:     Thu 29 Jan 2026 00:15:47 +0000
Files and hashes:         1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: 9nyP7+JJv9dsQVSDnGOqt4X7mFIy70A6ElsR/8TWEnM=)
                          2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 083EbNIPLx/FZlgKIk8j1vrc55JmKY8yDiaMatQXzSw=)
                          3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: Tq4ScTt5sZy/7OwKLK33QIkU9tFun9P117HC92IKj8w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ae:8f:54:07:3d:38:df:8d:28:f0:cd:59:18:6f:a3:f3:e4:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Jan 25 00:15:47 2026 GMT
            Not After : Jan 29 00:15:47 2026 GMT
        Subject: serialNumber=c0211e0f5be67b309dad24da094870645c956dbf5960e066b66993c10e21ae87, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:3e:a0:bb:17:f6:88:2c:0f:fb:35:01:76:
                    79:3e:ac:e0:5d:d4:77:9b:f7:e7:e8:07:3f:33:7c:
                    f0:25:15:17:aa:09:cb:14:57:e3:d1:54:2f:6d:33:
                    01:6f:79:3e:c9:dd:d7:a5:1e:9a:f0:cb:17:d0:71:
                    5f:b9:38:28:db:5f:bf:2d:45:96:cc:59:7f:5d:17:
                    5c:a5:ca:1b:f3:e3:45:47:ba:ac:38:8d:3c:d7:44:
                    9c:8e:17:76:2f:d0:61:71:71:30:1a:b4:14:89:38:
                    02:7f:87:6c:dd:b7:f3:e0:3e:b0:75:96:b8:32:c4:
                    2a:e0:22:5c:2c:23:75:b0:b4:29:78:b6:23:a2:bb:
                    c5:f1:8e:ec:0d:2a:13:9f:de:20:e5:09:f4:83:cd:
                    55:bb:48:1e:df:5a:93:5e:e9:a3:c1:14:c4:b1:de:
                    da:ef:85:d0:66:4f:34:f2:46:78:35:f7:0c:e2:96:
                    86:45:4d:f3:0e:df:8e:02:ff:36:f4:5d:3a:75:fe:
                    9b:f3:55:61:44:95:49:41:47:24:0b:f4:67:f1:10:
                    95:82:3a:18:25:8a:24:9c:bf:41:f6:59:2b:14:29:
                    d9:e0:35:f0:5d:00:2f:3d:1f:08:ef:85:c2:fe:18:
                    11:7d:7d:b1:4f:ad:8b:28:bf:76:22:08:89:bd:08:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:06:66:41:B4:D9:40:60:9E:CE:64:9C:48:35:E9:5B:3A:68:A5
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:22:78:6b:fe:ac:a1:34:92:08:7e:8a:00:2c:df:5d:f4:de:
         fe:51:5e:cd:39:5d:44:8a:1e:60:c3:87:fa:6a:4a:bc:28:0f:
         f3:64:5a:e8:85:70:28:48:ed:5e:29:38:bf:27:19:20:ab:75:
         5b:ee:e8:4d:c4:be:25:d5:e2:56:db:3f:b5:df:40:79:92:04:
         7f:4c:57:9e:0c:42:32:71:a2:29:91:bb:4d:af:75:b3:51:07:
         65:0f:ec:79:74:da:1a:20:46:0f:ee:df:86:f9:ec:e4:89:9f:
         63:af:5f:9b:4f:bd:f8:aa:8e:d8:6f:76:1b:24:b5:a8:b0:03:
         c7:e2:71:ac:81:57:6e:ed:df:97:3a:c5:5d:36:8f:99:6d:5f:
         84:d0:0e:7e:79:0b:99:4f:0a:72:46:e8:c0:ca:66:77:95:4e:
         28:48:ce:2c:8e:e6:2f:dc:76:3b:7a:1a:dd:b2:b5:f1:c3:44:
         62:b4:d1:4f:fa:1c:d1:ce:f1:5e:9f:0a:e0:a1:b1:57:1a:77:
         a4:cb:0b:b4:a4:54:5d:fd:4b:1e:54:68:fd:75:de:ac:00:90:
         09:21:87:eb:ac:20:20:bc:c9:3d:36:e4:8a:cd:7d:a2:18:cf:
         6a:a5:4a:c2:6b:9e:81:2a:30:db:02:0d:0d:61:85:5e:38:12:
         03:c8:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----