This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
File:                     DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft (raw, json)
Hash identifier:          +ViFqBPUfqiAdrh+2Y7hPlGcUbRE94TJX8smkNQMR8E=
Subject key identifier:   BE:F6:64:27:12:BC:C1:BB:55:02:BE:97:76:FD:19:DB:5C:02:A5:E3
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Certificate issuer:       /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial:       5A6108415A519C277A5DC90909E99A71AF95E53A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
Manifest number:          0155
Signing time:             Sun 11 Jan 2026 21:34:29 +0000
Manifest this update:     Sun 11 Jan 2026 21:29:29 +0000
Manifest next update:     Fri 16 Jan 2026 13:53:29 +0000
Files and hashes:         1: DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl (hash: QQx/kVkPgbHA/oR448lAWEIw/bnJq+g3d3kNuntEsNI=)
                          2: 3136362e37352e3130302e302f32342d3234203d3e203532333936.roa (hash: nabQnGEcPTXVdIMwOJ509rL6J9aAAjinl1qVYLfhpfY=)
                          3: 3136362e37352e302e302f31362d3234203d3e203136363239.roa (hash: cHd3JmUJ9GLDMTr0JsUaWzW62efaxyAQgBvwKKzUWiU=)
                          4: 3136362e37352e352e302f32342d3234203d3e203532333936.roa (hash: NZfrPWmweux9ZewBYQ8EZt3M374RPfi2K9iYT6p4R5c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:08:41:5a:51:9c:27:7a:5d:c9:09:09:e9:9a:71:af:95:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
        Validity
            Not Before: Jan 11 21:29:29 2026 GMT
            Not After : Jan 16 13:53:29 2026 GMT
        Subject: CN=BEF6642712BCC1BB5502BE9776FD19DB5C02A5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:7e:e3:fc:cb:34:9c:2a:00:db:35:6b:b1:
                    25:11:0f:af:7e:fb:e9:ba:7d:f6:e1:c2:42:27:47:
                    18:21:13:ef:b4:e1:da:0a:e7:6d:5a:6b:43:96:05:
                    28:25:90:3e:b0:9d:32:6c:af:bb:ad:58:b3:30:37:
                    82:22:30:bf:76:68:fc:93:02:0e:f5:be:bb:00:31:
                    77:23:eb:c5:a9:76:f2:6f:2e:ef:29:22:7b:e8:36:
                    dc:4b:99:40:ce:8b:7b:5d:5a:67:bd:4c:75:50:8e:
                    d5:6a:ca:48:cd:a9:82:aa:e3:45:83:9d:82:b6:08:
                    81:a1:b2:b7:bc:fb:f4:26:bf:be:98:4b:f5:df:3c:
                    26:9f:98:01:06:4c:5f:dc:4c:5b:60:93:58:f6:cd:
                    9d:5a:90:32:29:1f:03:80:0d:59:a8:d0:86:26:10:
                    d4:66:32:2e:87:6a:84:c1:65:94:44:53:e8:10:82:
                    72:c2:03:55:4e:f8:c5:df:ce:96:73:56:4e:25:fe:
                    5b:27:86:2a:17:17:17:12:5a:6a:47:8e:b9:ba:f1:
                    98:5e:40:4a:89:82:a1:b7:66:80:79:0a:62:80:91:
                    c6:fe:ba:1b:14:71:34:c0:2f:71:2c:6f:c6:99:2d:
                    6e:f3:d4:0e:36:0c:c1:64:9e:09:35:d1:fc:2e:1b:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F6:64:27:12:BC:C1:BB:55:02:BE:97:76:FD:19:DB:5C:02:A5:E3
            X509v3 Authority Key Identifier:
                keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:38:9c:d8:5d:a4:8a:bb:bb:cb:e0:66:35:d0:36:f9:80:50:
         9f:ac:a5:2c:db:f2:1a:f0:9e:f3:4c:77:e9:8f:4f:82:e8:c7:
         af:cd:01:a0:27:37:43:f3:83:2c:53:be:60:21:03:3b:d1:74:
         ec:8e:ad:8b:8b:1e:f0:82:a3:22:65:63:80:4e:6a:ce:fc:4a:
         b9:82:f8:c8:4f:4f:d6:c7:97:77:fb:50:0a:d0:3d:43:e9:f8:
         f8:fd:ca:c0:d7:a1:f8:cc:a1:55:e0:ad:4f:71:b5:0d:f4:47:
         a6:b1:90:a8:65:56:75:40:b6:84:af:51:da:09:10:81:bb:c6:
         95:a0:08:82:d8:1d:1d:36:57:c9:17:08:4a:b1:e3:a2:9a:e7:
         72:94:3d:8d:24:f2:3c:f4:38:4d:2f:f9:a6:97:5f:1a:c8:d4:
         c4:5c:10:0b:ab:27:0a:21:6e:26:0e:ec:d4:40:6b:04:d2:87:
         02:ef:06:12:98:27:8b:f8:fa:61:44:94:65:c4:10:69:b5:c4:
         47:cc:1a:04:07:af:33:85:de:7f:d2:b4:82:61:53:2e:6f:df:
         49:d5:1e:82:56:0c:19:60:4f:89:0a:aa:58:e4:03:a4:db:9b:
         59:ee:95:f9:1a:4d:fd:73:30:a4:6a:6d:63:50:0a:fa:2a:de:
         18:5d:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:58 2026 by rpki-client