This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
File:                     BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft (raw, json)
Hash identifier:          sc13AlOpWS6PCqaHqBrFVJheyYcRnUkbPRIAmQdDnS8=
Subject key identifier:   FB:12:E5:31:70:B0:C3:E0:8C:0B:B7:FA:4A:C7:33:4D:3F:FF:B8:E4
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       7C64A0109858E9522815039CF43C24549BCAB784
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
Manifest number:          0153
Signing time:             Tue 06 Jan 2026 19:04:40 +0000
Manifest this update:     Tue 06 Jan 2026 18:59:40 +0000
Manifest next update:     Mon 12 Jan 2026 15:41:40 +0000
Files and hashes:         1: BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl (hash: vmIotEmyuMrVNHsxt1QbvJY+DNQmpfyCmh87YUI+1pQ=)
                          2: 323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (hash: Oj3yEEt8meXrJMUCeAvcPo1DVTGxACbZmZcAViK59xc=)
                          3: 3133382e3138352e33312e302f32342d3234203d3e20323633383137.roa (hash: Cwnl6RqLSCgGqfDtzxaDk3H22GaRUTtiAkHfzzBFMSA=)
                          4: 3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (hash: s11zXRTEFefDg7yLU3/zO/pzBv0q8PSmB7/FhqDc+vE=)
                          5: 3133382e3138352e33302e302f32342d3234203d3e20323633383137.roa (hash: zokksGHBAQztEtlEqkt07dkkHeq+dfhsixqBoybod/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:a0:10:98:58:e9:52:28:15:03:9c:f4:3c:24:54:9b:ca:b7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Jan  6 18:59:40 2026 GMT
            Not After : Jan 12 15:41:40 2026 GMT
        Subject: CN=FB12E53170B0C3E08C0BB7FA4AC7334D3FFFB8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:c3:e4:6b:ad:0b:41:3c:c6:df:f7:90:80:
                    1f:9a:8d:8c:15:43:1d:f6:b3:b7:27:66:bc:70:52:
                    7e:81:33:cb:63:b1:e7:c3:d2:f9:81:7a:f1:1a:2c:
                    77:96:c9:de:14:e4:34:50:45:a5:4e:2c:65:49:01:
                    e2:59:aa:9c:d3:67:d1:16:57:be:55:5f:41:fa:a9:
                    49:c8:07:69:05:ac:08:08:bf:72:e3:02:ac:a1:de:
                    68:85:bf:19:23:82:82:37:91:57:64:1a:b0:90:d2:
                    b1:75:5e:2b:55:94:78:6b:fe:02:ce:8e:1e:7a:95:
                    d2:e5:04:d1:b1:b0:f1:6c:bb:79:44:19:5f:48:9f:
                    c5:f4:50:bc:11:ac:05:98:7b:13:30:2c:10:03:07:
                    08:87:c1:a5:a0:ef:bd:08:fc:69:d7:c5:ce:07:f8:
                    90:eb:d2:ab:70:aa:2f:8a:e2:df:45:6f:6e:21:a7:
                    43:52:e1:6b:1c:34:00:7a:53:a3:57:06:23:fc:3a:
                    ff:54:24:3f:da:c4:c8:1b:29:03:b1:94:2a:78:9c:
                    a3:00:a7:2e:cc:fd:8f:eb:1b:28:a4:33:f8:6a:bb:
                    bc:5f:91:96:c5:e1:20:e9:c1:22:c9:67:b5:20:f1:
                    9c:40:a5:1d:63:30:ac:99:0e:da:94:24:e0:1c:1e:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:12:E5:31:70:B0:C3:E0:8C:0B:B7:FA:4A:C7:33:4D:3F:FF:B8:E4
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:7b:c8:f1:39:4c:9f:58:e3:6d:57:73:f0:0e:4d:83:57:
         09:4e:85:2c:ed:6e:7b:73:c7:de:06:41:a3:f2:79:95:78:7c:
         15:44:d8:27:54:2b:9a:2f:25:5f:89:e4:57:b6:ce:e5:60:38:
         f4:95:7c:87:d0:ca:2e:e1:7e:9a:a8:ef:2c:ea:f8:68:23:e4:
         66:d8:94:d8:37:29:8c:f4:9f:8c:7b:8d:ec:91:0e:2f:10:46:
         e6:38:1d:25:df:b2:98:36:a0:f3:2c:28:7b:47:42:17:26:59:
         91:94:59:97:22:78:aa:0a:23:c7:05:b3:26:30:7e:bf:f7:94:
         d0:20:c9:d0:5a:e5:7c:8e:a1:12:e3:73:fc:b1:f3:5d:04:58:
         52:4d:15:3c:e5:66:62:66:3d:72:2a:1a:85:74:4c:f2:08:96:
         fc:f9:a1:eb:9f:76:4f:a8:1b:70:4c:ca:57:8b:a0:8f:e3:2d:
         7c:4d:97:3a:47:0d:ee:5a:b0:b3:8e:b2:92:65:15:e2:bd:4a:
         07:39:53:23:68:0f:58:f2:6a:13:1f:b7:3e:6b:52:a0:13:8d:
         7a:3a:e1:db:b6:95:a4:da:59:43:22:59:af:ce:71:e4:fd:db:
         8e:95:ee:82:35:55:71:0d:08:4e:a5:41:09:82:e0:99:a2:04:
         ae:5f:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:20:33 2026 by rpki-client