This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.mft
File:                     9239EE97C6B39C11732B535303D9279F94576DA0.mft (raw, json)
Hash identifier:          8FIhzanmPRmEBySbrKiBaRAQAs/PdIyruttZxsYLT4k=
Subject key identifier:   9D:95:91:5B:15:F9:D9:7C:06:4E:E5:C8:88:D6:16:23:10:97:A6:10
Authority key identifier: 92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0
Certificate issuer:       /CN=9239EE97C6B39C11732B535303D9279F94576DA0
Certificate serial:       255A7EA62843109ADA5A316302BD0DD9912CF607
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.mft
Manifest number:          0153
Signing time:             Sun 11 Jan 2026 11:43:02 +0000
Manifest this update:     Sun 11 Jan 2026 11:38:02 +0000
Manifest next update:     Sat 17 Jan 2026 06:07:02 +0000
Files and hashes:         1: 3230302e31342e33342e302f32342d3234203d3e203236363133.roa (hash: hulTd0szahM8bM2/X3yCVsy2r+gwk0722u6/y3Zilns=)
                          2: 3230302e31342e33342e302f32342d3234203d3e2033333536.roa (hash: OaKtYrmu5YB3Rdhsvdsj/5N646lou9cbU2UzSZCr9dE=)
                          3: 3230302e31342e33342e302f32342d3234203d3e2036313430.roa (hash: iKlafwk37QjunS7FiRyH9R8kRU1aUbOEEE5R4JycpkE=)
                          4: 9239EE97C6B39C11732B535303D9279F94576DA0.crl (hash: aBzR12qP2Vcs1yWm0rZXYQmVmWdOQySUg/4e0X/C2CU=)
                          5: 3230302e31342e33342e302f32342d3234203d3e2033353439.roa (hash: ynNMtdCepZjb+rewGEnLoO8EwvZ1E9gIaqXY1Qn9e/Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5a:7e:a6:28:43:10:9a:da:5a:31:63:02:bd:0d:d9:91:2c:f6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9239EE97C6B39C11732B535303D9279F94576DA0
        Validity
            Not Before: Jan 11 11:38:02 2026 GMT
            Not After : Jan 17 06:07:02 2026 GMT
        Subject: CN=9D95915B15F9D97C064EE5C888D616231097A610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:0e:9c:36:9c:01:b2:29:d9:5d:b2:5b:e9:
                    2f:82:02:28:82:d3:45:73:64:c1:07:9e:5c:7a:d7:
                    bc:19:cc:10:83:21:a9:4d:2a:61:90:fc:48:37:cf:
                    4e:cd:c4:35:18:e6:66:92:f3:b8:df:9c:3b:04:30:
                    42:22:29:ca:65:61:28:65:b4:c6:05:1b:99:03:e1:
                    44:d0:6b:9e:62:f5:2e:1e:af:24:0a:df:fc:23:d0:
                    49:7a:20:5c:03:65:90:1f:f6:4b:0a:a5:28:1c:bd:
                    8b:ea:c8:0a:27:7b:26:2d:11:d7:bb:7d:e1:b3:d7:
                    5f:fc:41:06:54:d8:4e:bd:17:53:bd:53:27:47:48:
                    2b:c4:13:f8:a6:e3:d9:75:fa:a5:88:c2:db:85:58:
                    ff:61:36:66:a9:98:16:69:fb:70:37:be:6f:70:78:
                    08:08:f1:3f:cb:04:e9:d4:92:0d:3e:9b:a2:79:03:
                    38:f7:59:2c:ec:36:89:ac:2c:49:2b:6a:58:34:0b:
                    9f:73:ce:1b:6c:3c:15:1e:ce:1f:9d:04:89:72:c2:
                    c7:6c:32:0e:36:b0:32:05:86:f4:e4:31:a3:48:0c:
                    ce:ef:8c:c2:3d:fc:8c:8f:d4:00:f9:3b:d4:f5:a2:
                    6e:89:b4:8d:d7:9f:89:c1:42:a1:5e:23:22:c1:26:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:91:5B:15:F9:D9:7C:06:4E:E5:C8:88:D6:16:23:10:97:A6:10
            X509v3 Authority Key Identifier:
                keyid:92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:00:99:03:e2:23:21:a2:fb:ea:43:d7:47:2b:4b:07:5d:
         16:5b:ad:80:30:3b:09:4d:0e:ae:e6:6c:ab:2f:5e:f1:f5:29:
         92:9f:fc:b4:54:a9:28:ff:71:73:c3:84:22:b9:77:0c:fd:e3:
         b6:79:ae:d7:1d:a8:16:0c:13:9b:f6:d5:0e:7b:40:b8:bc:be:
         11:20:ae:5c:d0:9f:e9:50:d8:b8:8a:fe:ca:6c:0d:d3:a3:f4:
         0a:53:58:18:83:66:5c:5f:0d:12:bd:5e:f6:a6:36:6a:34:18:
         d6:85:36:1b:0a:07:b1:c4:79:2d:0a:13:98:d3:52:e7:5b:fa:
         c0:9c:c0:dc:73:0f:54:9f:db:8a:41:9b:78:4b:69:94:43:70:
         14:1d:67:08:c7:f3:98:5a:68:3d:11:70:4f:7f:3a:bc:65:a6:
         91:bd:24:58:6e:64:18:81:d6:7c:fc:6a:64:fc:1a:9c:0f:6e:
         d2:ce:b3:fd:72:7b:83:c1:b2:76:98:98:3e:ef:1d:2c:ad:ff:
         db:75:6a:bc:21:dc:69:17:0c:1a:24:5c:48:77:47:b4:8f:9e:
         32:a6:1f:a4:07:4a:66:a9:27:55:61:b6:a4:ad:fe:e9:90:cd:
         68:74:2f:51:83:69:69:05:d1:4d:9e:6a:4b:6f:b6:34:56:5a:
         4c:cf:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----