This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File:                     AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier:          3e0xY1p45Ygxr8Ubsfnfy0229/CvAKfma436Wq9yG1M=
Subject key identifier:   5B:00:84:CE:84:95:1D:70:D1:30:BC:65:45:DA:EA:C2:8B:39:0F:A1
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer:       /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial:       27F774EB197B450A37C5633887EE5A76463C95CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number:          0156
Signing time:             Fri 09 Jan 2026 13:07:26 +0000
Manifest this update:     Fri 09 Jan 2026 13:02:26 +0000
Manifest next update:     Thu 15 Jan 2026 09:04:26 +0000
Files and hashes:         1: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=)
                          2: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: /0Y/XVN9pkW+s3yM7K0FHkRnkMxilXQxG9LBKBIWu4w=)
                          3: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=)
                          4: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: aEGy+JuqWdeLkgDdEey8ybOcwxkk9yf2avFHqhytgMs=)
                          5: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f7:74:eb:19:7b:45:0a:37:c5:63:38:87:ee:5a:76:46:3c:95:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
        Validity
            Not Before: Jan  9 13:02:26 2026 GMT
            Not After : Jan 15 09:04:26 2026 GMT
        Subject: CN=5B0084CE84951D70D130BC6545DAEAC28B390FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:6b:fc:f3:b3:2f:9f:1f:14:f7:8f:d2:d8:
                    c4:6b:bb:95:95:66:87:d8:32:a1:02:35:dd:07:e8:
                    89:8c:ae:b2:f1:30:5c:35:8b:68:83:ea:a6:5e:15:
                    d1:25:ab:f2:e7:ed:df:be:b9:65:e8:7a:76:ac:fe:
                    f5:99:71:d1:25:83:ca:97:a2:67:bf:18:41:37:c8:
                    16:cf:fd:96:33:56:95:f7:a2:6b:a8:fe:9f:98:6e:
                    50:2c:49:72:e1:30:14:f0:f5:ab:6b:57:e2:db:ab:
                    42:d2:de:06:64:2c:62:7b:4c:ae:29:b7:7f:65:d0:
                    89:60:9a:97:ac:0c:f8:47:79:24:66:63:63:2d:54:
                    8f:3f:5a:de:d9:3c:b8:f1:bd:96:7c:23:e8:c3:b6:
                    ff:8a:41:10:5a:34:44:e0:68:32:de:a2:d5:8b:dd:
                    ff:f4:78:25:b5:5b:bb:6e:9f:96:bc:c6:61:c0:38:
                    1a:ee:48:8b:0b:79:40:33:44:96:a9:0e:18:1b:28:
                    92:aa:6f:6c:b2:32:28:dc:30:70:0e:f6:51:69:f5:
                    9e:f0:58:0f:c5:a3:b0:3e:ee:69:f5:b0:7f:9c:90:
                    0e:a1:08:a4:48:ea:95:98:99:f2:24:80:0f:f0:35:
                    0d:a1:10:75:03:ef:64:3e:9f:c2:63:b6:6b:c7:3d:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:84:CE:84:95:1D:70:D1:30:BC:65:45:DA:EA:C2:8B:39:0F:A1
            X509v3 Authority Key Identifier:
                keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:17:8c:59:5a:86:38:f2:e1:15:ce:15:91:50:1d:24:b2:
         3d:73:27:b1:25:ad:15:0b:ab:ea:0d:09:18:e9:bd:81:f8:e5:
         e5:c5:d5:35:16:e2:e8:2b:93:32:9b:75:ef:e0:b1:12:49:6c:
         ca:57:bc:99:3d:33:be:41:13:28:48:1c:60:47:99:fd:15:d4:
         b5:a3:ba:09:75:4b:05:f2:ab:0e:74:e3:87:49:04:58:1d:94:
         e0:b8:51:f1:e6:b7:4c:76:90:c7:e4:0f:44:cd:6e:d8:41:77:
         21:4d:95:f6:b0:d5:34:9a:b1:40:54:dc:36:ca:56:66:05:6a:
         de:31:fe:cc:57:f2:fd:d3:b8:dd:da:b7:6d:07:2d:0b:20:8a:
         50:f0:ac:8b:f4:48:f3:c4:a1:87:7a:77:e8:34:52:2c:1c:6e:
         1d:6d:6b:32:be:d6:f9:31:40:05:69:fa:59:d8:8b:02:9c:4c:
         1c:bb:ba:53:42:5e:57:30:62:e6:82:dc:8c:b8:0e:d8:f4:a2:
         00:26:0c:e6:01:dc:76:bf:0a:91:66:4f:4a:e5:93:c9:be:0a:
         35:14:89:9c:10:6c:68:98:8c:50:c9:12:31:3c:89:2c:2d:be:
         f0:f9:7c:f6:45:33:2c:af:ca:95:fd:e2:5f:3d:33:c5:5d:dd:
         bb:54:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:56 2026 by rpki-client