This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
File:                     3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft (raw, json)
Hash identifier:          IiTnzeBbMnqPgZi1uFoF87Ae4nWwxhTrfpunVPIlIYA=
Subject key identifier:   14:25:2A:3E:74:3F:F7:DA:2E:57:66:98:50:33:72:1D:06:8F:BB:1F
Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
Certificate issuer:       /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Certificate serial:       4CEC4F2EE9812D9BEE34F2CA67D555EA5C6EBD5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
Manifest number:          0159
Signing time:             Sun 11 Jan 2026 09:44:36 +0000
Manifest this update:     Sun 11 Jan 2026 09:39:36 +0000
Manifest next update:     Fri 16 Jan 2026 21:44:36 +0000
Files and hashes:         1: 3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa (hash: TdvEnv4MS81Gx8826iv4eE5GqnqeR0GsSBKaSPYvSVs=)
                          2: 3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa (hash: AlH9YL3QTUpM/N1keQky7E8OyhBebmQ0bqamUovVKSM=)
                          3: 3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa (hash: Nb8KOptWGNzGyez8VM8SSQRMFJibt6WMXvsRQr+yzWA=)
                          4: 3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl (hash: ndXRbi20E6kjWeBYURVDACKcTxfteBYff+OyhmrDBGk=)
                          5: 3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa (hash: fUhZVgQqKsldfnnAQqGDQYskTpNHNl24oPWXOk2G/jo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ec:4f:2e:e9:81:2d:9b:ee:34:f2:ca:67:d5:55:ea:5c:6e:bd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
        Validity
            Not Before: Jan 11 09:39:36 2026 GMT
            Not After : Jan 16 21:44:36 2026 GMT
        Subject: CN=14252A3E743FF7DA2E5766985033721D068FBB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:80:aa:cc:c7:69:fd:eb:0a:8e:f5:7c:ea:
                    df:54:8a:ba:03:a9:f5:20:b8:56:e9:50:e8:8d:6c:
                    78:76:a5:12:d1:28:eb:a8:2e:6b:9d:9d:c4:e5:1c:
                    01:32:72:81:45:9b:5d:9f:47:fb:e9:ba:db:4d:ac:
                    89:c9:8d:6c:11:de:2c:5c:80:e5:10:db:89:eb:ce:
                    78:cc:b6:cf:31:15:22:87:e9:ac:e7:59:18:74:32:
                    6a:74:09:6a:09:71:0c:2e:b6:53:3b:ff:53:0a:08:
                    d6:3c:d8:d7:e4:27:90:59:b8:07:20:aa:e3:49:76:
                    1a:52:3e:93:45:81:b5:4d:38:55:2f:44:40:7c:2d:
                    58:40:31:00:ce:f2:f1:dd:93:55:95:05:6d:ea:b2:
                    ac:f4:a5:63:ae:5e:48:55:8a:42:c1:8a:55:42:73:
                    77:26:d2:2b:c6:e1:96:1d:76:41:a0:75:02:42:6e:
                    60:f9:01:01:37:3f:ca:4b:ef:05:a0:17:2f:dd:01:
                    52:a8:de:8e:a4:38:bf:82:22:59:e7:59:95:8c:df:
                    e3:19:93:4b:6f:e4:34:4d:c6:91:c7:2a:21:80:98:
                    70:79:0c:db:30:92:27:f4:15:f5:3b:8e:8d:3c:4f:
                    fa:52:68:49:ae:a1:cb:62:36:83:7c:e2:f6:cf:1d:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:25:2A:3E:74:3F:F7:DA:2E:57:66:98:50:33:72:1D:06:8F:BB:1F
            X509v3 Authority Key Identifier:
                keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:4b:79:94:5e:40:8f:f7:c1:2f:00:05:d9:c8:72:42:3d:
         83:55:5d:1d:97:a0:7b:0a:e0:4b:d8:5f:5e:71:34:d6:0e:a0:
         92:28:2a:83:bf:ff:95:70:82:5e:e6:71:e3:15:28:5c:e5:38:
         90:e9:c3:8f:73:f3:e6:29:9f:92:35:31:7e:ab:6f:db:9e:fa:
         1a:84:3d:75:af:97:2f:9a:5f:de:ab:1b:0b:29:a3:b9:42:06:
         c8:35:08:53:1a:88:2c:82:a4:44:83:60:7d:72:d3:39:b7:df:
         79:39:8b:96:68:d3:b8:a9:ef:ae:7e:8f:3d:15:7d:b6:bd:af:
         5d:45:20:72:88:dc:c4:64:8b:fd:ca:02:be:b2:87:b5:86:50:
         8d:cb:99:ac:f3:f0:78:cd:81:aa:95:80:28:e9:91:32:54:cd:
         66:cf:86:e1:a4:30:bc:a5:44:17:53:a0:c0:38:ab:b1:89:1c:
         00:91:d9:1b:40:b7:58:28:ce:4d:c7:cd:13:81:2a:87:b1:22:
         f1:be:03:f6:e5:80:c6:9c:cb:ef:db:50:83:fb:ed:4a:5b:79:
         15:a6:65:50:4a:e7:f8:e9:4a:3a:a0:c1:40:c5:a1:e7:5a:99:
         d6:25:f4:fd:5b:52:9e:e4:9f:ad:f6:16:c8:da:b3:a4:3c:fb:
         84:34:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----