This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
File:                     5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft (raw, json)
Hash identifier:          rPT+Lg9qgTAFAJkxwPVA7QZzxldmXbPPZXmVjeCO7FM=
Subject key identifier:   39:49:3D:A4:1A:B4:B8:A4:5C:8B:7C:3B:B9:E2:22:D8:00:C4:D7:1E
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       20DC11742E3D8EF35D031CE037A30F1175E7D463
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
Manifest number:          0128
Signing time:             Wed 31 Dec 2025 23:13:43 +0000
Manifest this update:     Wed 31 Dec 2025 23:08:43 +0000
Manifest next update:     Mon 05 Jan 2026 09:47:43 +0000
Files and hashes:         1: 3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa (hash: j6Cgyh3QeFe2ifLKwIDeMaUZ0r5vruBxYcx+SMlxyd4=)
                          2: 5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl (hash: 095+iOIv1uRFjurXeanotLhf8Xrx4oCn1qlfZ0l5/X8=)
                          3: 323830333a333965303a3a2f33322d3332203d3e20323730303233.roa (hash: o4IQLUPQIEMuLpUo0+feh4FoDO4YoK87IUw/kO9Rngg=)
                          4: 323830333a333965303a3a2f33322d3438203d3e20323730303233.roa (hash: EWJ9dI5o/LGamUw9xQ3M3op3mV3jzKc70BA7/SFRgGI=)
                          5: 3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (hash: 8fvvqNp7+cbeKwqAqt8Ix0DndOn8jTw3tWcikLTL0EQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Jan 2026 09:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dc:11:74:2e:3d:8e:f3:5d:03:1c:e0:37:a3:0f:11:75:e7:d4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Dec 31 23:08:43 2025 GMT
            Not After : Jan  5 09:47:43 2026 GMT
        Subject: CN=39493DA41AB4B8A45C8B7C3BB9E222D800C4D71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d1:b5:e4:63:ae:a1:7e:a3:ec:27:c5:95:05:
                    14:79:7a:a2:6e:f2:aa:11:3a:d8:73:46:ec:f6:2b:
                    7e:54:4b:aa:dd:6c:de:dc:49:2f:4a:0b:30:5e:73:
                    18:0d:72:ba:cc:68:11:6d:2d:ad:00:cb:3f:f8:14:
                    b2:b7:4a:d7:82:7b:8f:94:79:3a:8d:1d:3e:93:25:
                    2e:0e:60:e3:9e:79:ea:a0:8d:ab:be:4d:9e:a2:23:
                    fe:41:75:43:4b:bd:80:3b:3f:cf:db:26:a1:20:14:
                    01:ec:a6:1f:42:36:b3:41:61:3a:97:fd:f1:e8:b4:
                    77:3d:0b:22:e9:c8:22:91:9f:81:23:08:ca:5b:05:
                    b7:6c:0f:8f:ab:5a:65:73:64:42:5f:11:37:88:26:
                    fd:e1:a9:b1:fb:df:64:df:2a:a4:cb:0c:ef:e8:6f:
                    da:42:38:d8:a1:1b:b8:30:4b:11:96:83:e4:5c:f9:
                    5d:00:e2:20:aa:5e:0b:f8:c9:2e:be:93:e0:28:6c:
                    72:8b:0c:2d:7d:70:e8:0f:c8:c0:30:52:30:7d:65:
                    7d:73:c8:64:ba:fa:c0:23:9a:0e:c4:10:02:1a:2d:
                    83:a4:ef:fe:03:03:24:b7:65:e3:b4:dc:2f:c4:75:
                    d8:a5:04:12:d6:6c:4f:99:d5:9a:04:2e:00:1f:cb:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:3D:A4:1A:B4:B8:A4:5C:8B:7C:3B:B9:E2:22:D8:00:C4:D7:1E
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:f4:26:0f:81:6c:d2:9a:7b:cd:91:aa:e3:3e:77:02:6f:
         23:9e:d4:91:79:02:90:05:cf:c2:a5:13:8e:94:b3:24:e8:4d:
         8c:fb:21:ba:42:7f:bb:1a:33:54:56:25:29:63:13:30:6a:ee:
         98:42:97:a6:49:89:6e:2e:35:a8:82:c4:b0:e4:3c:24:8b:ee:
         27:e3:82:ba:e5:81:ce:27:72:e8:79:ad:bc:27:cb:5e:e5:c0:
         5b:6f:9c:21:fa:60:d8:91:12:50:ae:b5:79:e8:2b:69:10:6b:
         01:95:50:87:8b:3a:11:05:ab:55:6b:1a:f4:2b:60:1f:4d:12:
         20:21:9e:8e:a5:45:f7:b7:ab:89:e3:e2:00:d2:5a:13:d9:5b:
         fa:0e:a3:f9:cf:88:9d:07:5d:6e:3d:19:a6:74:db:56:dc:5d:
         c3:74:d6:64:67:01:4f:28:a8:5b:81:50:84:6f:6b:28:6f:d2:
         39:c2:e8:19:f7:d2:88:17:78:d3:5b:2c:52:bf:32:54:b0:3b:
         46:a9:95:97:c0:79:82:a7:d9:c6:5f:ff:88:bc:b4:64:9c:5e:
         10:61:94:d3:7b:4f:06:81:33:87:dd:40:3a:5c:82:e2:9e:6b:
         7f:09:73:aa:1c:d2:27:ce:a5:8d:cf:59:ff:d1:56:cc:ef:5c:
         35:aa:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:18:56 2026 by rpki-client