This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
File:                     1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft (raw, json)
Hash identifier:          j9URtjerjuG2ORUtwfrMBNTvlqa2MB01SiVHQRT4G4Q=
Subject key identifier:   01:96:D4:67:86:73:7F:E4:44:AC:66:E4:B2:23:D0:EA:AB:82:B2:82
Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6
Certificate issuer:       /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
Certificate serial:       4FFC76807294B60CA22980A3D0B431FB38F7C891
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
Manifest number:          34
Signing time:             Mon 29 Dec 2025 13:38:17 +0000
Manifest this update:     Mon 29 Dec 2025 13:33:17 +0000
Manifest next update:     Sat 03 Jan 2026 19:11:17 +0000
Files and hashes:         1: 323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa (hash: oYljaO0LPmxAIquLiYMmqUilwBnNGEbSo+fPawmsi9g=)
                          2: 323830333a376639303a353430303a3a2f34302d3430203d3e20323732383136.roa (hash: 1B0O0CFA1bz2rDk67Ez30f5fpC1qeB2RHq4nkB9j85U=)
                          3: 1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl (hash: rVBcxxGXEVbc312pUKNKFotqLLal1YLMPqf91ST8R84=)
                          4: 323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa (hash: Bpd0ZqBlcBZNg215pqCEYBGPS/8wTCZEwffTt91osX4=)
                          5: 323830333a376639303a353830303a3a2f34302d3430203d3e20323732383136.roa (hash: BpTGJurnm/bfPm44Dbjc2KurVzjPRldqprtxirW4e9E=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 19:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fc:76:80:72:94:b6:0c:a2:29:80:a3:d0:b4:31:fb:38:f7:c8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
        Validity
            Not Before: Dec 29 13:33:17 2025 GMT
            Not After : Jan  3 19:11:17 2026 GMT
        Subject: CN=0196D46786737FE444AC66E4B223D0EAAB82B282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:e0:65:27:05:20:13:2b:a1:6e:15:e1:74:
                    f0:b8:b7:3e:e0:c7:d8:03:a1:15:d5:77:75:cf:bb:
                    a6:91:0a:35:77:ed:58:e8:5f:dd:0b:3f:c7:0d:6b:
                    15:6d:f8:72:18:ca:20:3a:b8:1d:f0:d2:ac:0e:34:
                    8c:4c:e2:9f:09:bb:93:ba:5d:23:1f:0e:3b:7d:68:
                    33:80:88:90:e7:80:b0:7c:78:7f:84:c6:04:f1:43:
                    f5:b8:7e:1b:5a:21:8b:00:61:40:28:ef:aa:0c:07:
                    ff:e6:7e:08:b5:9b:06:d8:a9:c2:90:99:a7:d7:59:
                    fd:ed:74:26:b7:82:08:dc:67:3d:a4:5c:96:cf:c0:
                    41:92:f7:b9:c5:88:0c:09:36:fa:cb:19:b5:2b:35:
                    ca:ec:b2:4a:21:2f:57:d4:79:f0:25:86:a6:cc:f4:
                    6a:a9:95:71:46:f1:d1:a9:34:64:42:d8:52:f0:b4:
                    70:de:12:5f:26:85:99:d0:c8:b8:05:de:05:f6:f4:
                    57:4e:30:41:db:c0:fa:15:74:89:f4:64:1b:bf:f5:
                    ee:c8:f3:d7:74:90:a4:fc:90:ca:e4:89:12:45:20:
                    ab:93:57:34:04:bd:41:8e:08:24:c7:48:c5:26:7a:
                    80:b3:09:bf:13:d3:36:13:eb:7d:66:fd:e7:d5:4b:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:96:D4:67:86:73:7F:E4:44:AC:66:E4:B2:23:D0:EA:AB:82:B2:82
            X509v3 Authority Key Identifier:
                keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:a7:ee:09:6f:2c:01:22:61:d4:c2:07:49:3a:13:52:fd:
         b1:c1:96:2f:d8:50:62:36:48:c4:10:d5:47:2c:94:9a:b4:96:
         85:c7:76:36:e4:18:76:76:04:0e:3e:98:2f:82:c7:f7:d9:ce:
         a7:9b:e4:eb:e9:ca:0d:ea:e0:eb:dc:06:25:5c:00:16:34:1f:
         f0:06:cc:f0:81:a4:f7:ae:79:d6:e0:95:d1:fc:da:a1:64:5d:
         e9:7a:9c:f7:9a:85:79:1e:ff:63:12:4d:76:8d:98:64:08:68:
         e2:5c:e9:57:47:be:a2:fb:6e:22:c5:cb:b3:ec:6f:fd:77:75:
         ef:d6:84:1d:0c:c4:6f:38:a3:21:64:2c:27:81:d0:29:9b:0c:
         fa:bf:20:0b:d2:06:af:ec:36:6f:92:28:74:86:7e:65:76:38:
         0b:a9:3b:57:d1:51:1a:65:5b:47:f4:c3:75:99:13:23:34:9d:
         fa:53:10:68:2b:cf:63:ae:79:c8:25:4e:1f:4e:08:85:8c:f8:
         ac:76:cb:95:86:2d:50:8d:02:94:1b:97:80:14:a6:66:ab:23:
         4e:21:05:05:04:34:df:55:7f:7f:1f:05:d6:64:bc:7b:5e:fe:
         0f:a8:f9:70:68:90:66:d1:93:df:8f:b8:f7:1e:80:12:c3:b7:
         ee:7a:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 13:59:54 2025 by rpki-client