This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
File:                     88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft (raw, json)
Hash identifier:          tzZjDusU339W89JJrH/RPbbkmzwL5/5378/QrNJBO9U=
Subject key identifier:   F2:BF:5D:B7:44:2C:DF:73:39:3D:E6:68:F2:39:33:A1:F2:0A:2A:78
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       5B6F9023F54810971AB834F3FB2AC57F8F7DF878
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
Manifest number:          0124
Signing time:             Sun 11 Jan 2026 04:05:17 +0000
Manifest this update:     Sun 11 Jan 2026 04:00:17 +0000
Manifest next update:     Fri 16 Jan 2026 10:32:17 +0000
Files and hashes:         1: 323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa (hash: jznJpg1ahba2NYH40zBUUhcsREyg2dJ7rPGCDNh6CLg=)
                          2: 88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl (hash: yXhW4f4kElkt95eH1J1J9KP0F+LBx1M1jx9qR4or9NY=)
                          3: 323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (hash: qkyZxltVVFUxcd48BM3ODxVwLPXAJM95O5CCVBZvOSU=)
                          4: 323030313a313230373a653030303a3a2f33362d3336203d3e203238343539.roa (hash: E9sIC+WjAF1izlOZUGsYo/RvkXviK7NEOXo8UY3P9hs=)
                          5: 323030313a313230373a663030303a3a2f33362d3336203d3e203238343539.roa (hash: 2QyY88RI+evTUmpoyMRoWg/UkJSWQyMqdL02ZSXkVww=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6f:90:23:f5:48:10:97:1a:b8:34:f3:fb:2a:c5:7f:8f:7d:f8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Jan 11 04:00:17 2026 GMT
            Not After : Jan 16 10:32:17 2026 GMT
        Subject: CN=F2BF5DB7442CDF73393DE668F23933A1F20A2A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:97:ab:0c:bf:d7:1d:02:79:d5:d1:07:2f:
                    08:fb:ee:5d:59:99:7c:79:81:76:3b:d8:23:cb:ed:
                    25:f7:7d:93:41:f5:39:5c:dd:89:7c:39:b5:8e:e2:
                    09:a3:bf:7f:a2:93:19:8b:b6:49:f7:45:a0:31:09:
                    2c:ce:af:8b:82:05:19:a2:0b:79:1d:e7:99:f5:ce:
                    1b:a0:3a:86:38:b0:77:a3:f0:d8:26:fb:50:1d:b1:
                    19:fe:7b:e5:24:a8:98:c5:2a:ca:1c:50:89:0a:3b:
                    c8:12:7e:a8:2a:e9:62:e8:e0:87:f8:74:ed:39:22:
                    64:d8:93:a2:ec:91:cd:ce:79:75:04:a7:63:bd:ae:
                    70:a7:d8:ee:6c:c4:81:b8:f2:94:21:86:f8:3c:3c:
                    af:b7:5d:ff:96:ce:a0:4c:87:af:e9:48:8c:d6:71:
                    ab:ad:45:22:b7:1e:cb:45:eb:da:02:53:f3:47:94:
                    f4:12:51:35:c9:16:d3:12:12:9d:ef:db:2d:43:6e:
                    32:13:92:46:78:75:d0:b3:cc:45:63:f4:f1:f3:f1:
                    fd:fd:d3:6c:48:73:30:db:8a:d6:1e:0f:27:c9:08:
                    0b:15:1b:53:3b:f0:73:f1:e3:4a:0f:05:61:d9:8b:
                    7c:e0:4b:bd:b9:a7:fe:5e:d8:f6:cf:24:a6:d3:31:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:5D:B7:44:2C:DF:73:39:3D:E6:68:F2:39:33:A1:F2:0A:2A:78
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:02:d9:cd:bf:82:81:83:9a:df:74:02:9e:6a:27:da:34:
         5c:4e:05:8e:4f:0d:70:57:a8:3b:a8:e8:58:d0:60:46:ed:77:
         00:de:9e:fe:37:f9:35:3f:34:d8:dd:40:c2:41:72:fc:8a:25:
         e2:30:b9:23:23:a1:5e:cc:02:17:bb:4f:6a:19:4a:1f:aa:22:
         aa:3a:27:9a:6c:f4:91:65:e8:2f:3e:61:5f:00:7d:c4:88:da:
         13:db:ea:80:12:0e:90:0a:4f:f9:fe:86:83:c0:55:2a:a6:d3:
         c9:7d:71:bf:c1:ba:20:bc:27:88:e6:88:c7:78:aa:1a:60:5d:
         d9:a2:e7:1f:28:dd:d9:86:8c:cf:f9:69:cf:61:3e:16:ff:4c:
         73:f8:b6:bb:83:55:0a:01:4b:c1:3e:89:5c:94:76:07:16:aa:
         24:c4:ba:54:8b:47:7f:05:76:c1:fc:6d:ea:b9:cd:05:db:e2:
         63:c8:1a:cc:26:e3:5c:37:8f:f0:7f:22:69:25:aa:fc:3f:ff:
         be:8d:07:4c:98:1b:1a:f7:87:61:b4:ca:70:21:73:bb:55:83:
         82:47:cb:b3:9e:0e:76:ea:64:e1:f8:fc:6f:25:a0:16:a6:6f:
         be:dd:7e:90:79:fb:9b:cc:ae:45:0c:f3:9e:90:9c:e3:35:5d:
         f4:50:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:59:46 2026 by rpki-client