This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
File:                     CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft (raw, json)
Hash identifier:          pFwa+DvluRLONb71nhpqCcjuVU8pIUIy/qFfo9TaW80=
Subject key identifier:   40:17:0F:DD:F1:B4:CB:32:92:5F:6B:9B:DC:88:7B:D0:A8:45:73:EE
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       37DBD5588DA20F63EF97D9964AC77125F6268A3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
Manifest number:          0158
Signing time:             Tue 06 Jan 2026 19:07:53 +0000
Manifest this update:     Tue 06 Jan 2026 19:02:53 +0000
Manifest next update:     Sun 11 Jan 2026 11:38:53 +0000
Files and hashes:         1: CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl (hash: l3xy4vHwGPV1RqUE3yp22dmbBr20wJZbd1/4vC8YDvE=)
                          2: 323830303a6161303a3a2f33322d3438203d3e203532333530.roa (hash: v5MWi3PEzCc2QK1PIivbbazHvW4t8Eaeo2B41jJ/hug=)
                          3: 3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (hash: gj7mdmlG0KY0B6SdkX6V2ZISubEkbJtJbVzLX74lCfA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 11:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:d5:58:8d:a2:0f:63:ef:97:d9:96:4a:c7:71:25:f6:26:8a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Jan  6 19:02:53 2026 GMT
            Not After : Jan 11 11:38:53 2026 GMT
        Subject: CN=40170FDDF1B4CB32925F6B9BDC887BD0A84573EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:a8:da:cc:37:c3:f4:64:9e:92:a9:e7:f7:
                    0d:b9:eb:8b:0c:7a:d1:79:52:d5:49:e5:98:8e:e6:
                    c3:af:92:b6:78:2b:dd:a2:db:9e:b8:a9:fd:35:57:
                    02:d8:82:a8:f6:04:e1:b4:0a:2f:13:e8:45:6c:83:
                    df:19:f8:15:9a:fb:c7:13:4e:33:22:20:c1:89:6d:
                    47:be:79:47:6d:80:5e:7f:c9:f9:fe:42:5b:51:11:
                    33:cb:ca:0a:3e:18:99:93:4e:00:e8:b8:6a:8c:cb:
                    e1:58:cf:f0:c9:69:ed:97:39:6c:9b:82:9a:57:42:
                    37:97:5d:09:d3:f3:c3:37:7c:93:ce:ab:32:67:ee:
                    38:3b:1c:fa:1e:b3:97:80:84:f2:c5:76:43:6f:54:
                    84:06:4f:03:58:57:44:a4:52:24:15:5e:2f:29:d5:
                    e2:19:87:10:bf:8b:93:3b:5e:b9:86:a1:2d:d6:fd:
                    45:0f:e5:96:52:ad:aa:f1:29:04:2c:77:b2:68:d9:
                    8a:13:46:d5:5f:40:0d:6e:e1:fc:4d:39:79:e9:a0:
                    bd:a2:0a:36:71:35:c7:0c:f9:37:e7:e4:ea:ec:df:
                    d2:42:61:85:71:a3:6d:11:f8:0d:bf:f3:41:fc:f2:
                    00:fd:8e:98:8c:4e:16:35:8d:29:34:45:a3:3e:13:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:0F:DD:F1:B4:CB:32:92:5F:6B:9B:DC:88:7B:D0:A8:45:73:EE
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:e8:75:8e:7a:8c:31:df:0d:bf:71:b2:d2:25:47:3f:68:
         69:de:29:c4:ef:19:7a:22:45:6f:52:64:01:f3:4d:f2:71:cc:
         09:b7:d7:95:b2:b3:91:91:05:f5:a7:65:6f:03:15:c5:87:4e:
         51:6e:3c:15:97:e8:ac:70:97:34:ae:c0:12:13:be:7e:5c:c2:
         b8:b8:11:46:6e:75:53:a3:8a:c8:88:7b:8c:01:bb:97:f3:c6:
         63:1d:e1:99:3d:19:35:9c:5b:48:90:f9:67:cc:97:f7:01:ef:
         6a:be:cc:63:1d:42:6f:14:38:d7:76:3e:98:bd:66:90:cb:fa:
         f7:bb:01:d6:80:ef:23:03:83:fe:2b:f1:2f:f5:2e:18:33:0d:
         64:f1:81:4e:7d:05:fa:d8:41:ba:4b:f2:57:85:b3:ed:86:1a:
         04:f8:aa:7f:9a:65:06:11:14:ca:b1:79:5d:c5:f0:b4:b6:57:
         ee:58:32:67:bf:c8:7f:8d:46:0b:17:a6:19:23:52:1c:ff:36:
         0e:f4:c3:00:f7:8b:ce:70:89:b4:79:15:6b:d5:9b:95:d7:6d:
         54:df:7a:fc:b5:16:0e:5a:a7:5b:14:02:96:29:12:e0:cc:b0:
         01:24:38:50:a2:ea:88:7a:ce:75:21:e0:13:95:c7:45:50:30:
         1e:90:3c:8d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUN9vVWI2iD2Pvl9mWSsdxJfYmij4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxRkM5M0EzRjIwMzI2QkU4M0I2NDI0RjY3OEUyRUE2
NzE0NDMzQzAeFw0yNjAxMDYxOTAyNTNaFw0yNjAxMTExMTM4NTNaMDMxMTAvBgNV
BAMTKDQwMTcwRkRERjFCNENCMzI5MjVGNkI5QkRDODg3QkQwQTg0NTczRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v6jazDfD9GSekqnn9w2564sM
etF5UtVJ5ZiO5sOvkrZ4K92i2564qf01VwLYgqj2BOG0Ci8T6EVsg98Z+BWa+8cT
TjMiIMGJbUe+eUdtgF5/yfn+QltRETPLygo+GJmTTgDouGqMy+FYz/DJae2XOWyb
gppXQjeXXQnT88M3fJPOqzJn7jg7HPoes5eAhPLFdkNvVIQGTwNYV0SkUiQVXi8p
1eIZhxC/i5M7XrmGoS3W/UUP5ZZSrarxKQQsd7Jo2YoTRtVfQA1u4fxNOXnpoL2i
CjZxNccM+Tfn5Ors39JCYYVxo20R+A2/80H88gD9jpiMThY1jSk0RaM+E9ilAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQBcP3fG0yzKSX2ub3Ih70KhFc+4wHwYDVR0j
BBgwFoAUzh/JOj8gMmvoO2Qk9nji6mcUQzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjdENEY0MkNDM0FENkFERkMzNkE0ODU3RTREOEEyOUU3
MjJBNjkwOUE4NTNGMEU2QzExOEUwMzcwQTFBOTZGLzAvQ0UxRkM5M0EzRjIwMzI2
QkU4M0I2NDI0RjY3OEUyRUE2NzE0NDMzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTFGQzkzQTNGMjAzMjZCRTgz
QjY0MjRGNjc4RTJFQTY3MTQ0MzNDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODY3RDRGNDJDQzNBRDZBREZDMzZBNDg1N0U0RDhBMjlFNzIyQTY5MDlB
ODUzRjBFNkMxMThFMDM3MEExQTk2Ri8wL0NFMUZDOTNBM0YyMDMyNkJFODNCNjQy
NEY2NzhFMkVBNjcxNDQzM0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATW+h1jnqMMd8Nv3Gy0iVHP2hp
3inE7xl6IkVvUmQB803yccwJt9eVsrORkQX1p2VvAxXFh05RbjwVl+iscJc0rsAS
E75+XMK4uBFGbnVTo4rIiHuMAbuX88ZjHeGZPRk1nFtIkPlnzJf3Ae9qvsxjHUJv
FDjXdj6YvWaQy/r3uwHWgO8jA4P+K/Ev9S4YMw1k8YFOfQX62EG6S/JXhbPthhoE
+Kp/mmUGERTKsXldxfC0tlfuWDJnv8h/jUYLF6YZI1Ic/zYO9MMA94vOcIm0eRVr
1ZuV121U33r8tRYOWqdbFAKWKRLgzLABJDhQouqIes51IeATlcdFUDAekDyN
-----END CERTIFICATE-----
Generated at Tue Jan 6 21:41:13 2026 by rpki-client