This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
File:                     BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft (raw, json)
Hash identifier:          E+DLtooqJ6WplGKTd9ykLgcNGjGgMzKEwteyqO+mwYA=
Subject key identifier:   F0:17:9C:34:AC:20:20:64:E0:C8:5E:1B:01:DD:2A:91:83:A3:3E:28
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       201743B143B19503BDDE2886ED2CC5A1DB13A8B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
Manifest number:          0153
Signing time:             Sun 11 Jan 2026 10:42:21 +0000
Manifest this update:     Sun 11 Jan 2026 10:37:21 +0000
Manifest next update:     Fri 16 Jan 2026 05:01:21 +0000
Files and hashes:         1: 323830333a383038303a3a2f33322d3332203d3e203437383639.roa (hash: H7nYtTqubKlyBG3604RWavV9e6u23YkmNXFw3ZEhg+I=)
                          2: 3133382e33362e31362e302f32322d3232203d3e203437383639.roa (hash: 13TNtR/WGSGh8MJomJjPH9myBAD9uF0BUhwSbPjDR+o=)
                          3: 3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa (hash: X0F5rMa2PW+Pn/sjhzHZGF9USMQDIhdzFjp34YCnID8=)
                          4: BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl (hash: GZbrMJmDJ4vE1Z0Lnh19HlVXLqSEPBjVUwhZI4hcUy4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:17:43:b1:43:b1:95:03:bd:de:28:86:ed:2c:c5:a1:db:13:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Jan 11 10:37:21 2026 GMT
            Not After : Jan 16 05:01:21 2026 GMT
        Subject: CN=F0179C34AC202064E0C85E1B01DD2A9183A33E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:f2:a6:54:6c:ed:52:80:b6:ac:01:b7:15:
                    3e:20:b6:3a:f0:8e:3a:ea:92:72:55:48:ec:17:13:
                    d6:29:3c:d2:0c:97:f7:ee:5b:5b:79:96:c4:58:6c:
                    80:90:ba:80:b5:1c:e9:3c:7f:51:e2:b0:69:f6:58:
                    b9:92:33:25:42:c0:58:d5:72:dd:eb:70:59:21:16:
                    1d:1f:e9:55:6b:b7:b4:f3:ad:17:d1:cb:1c:16:ea:
                    8e:52:9f:19:1f:ed:c2:a8:b0:cf:f7:44:07:57:cc:
                    62:7a:ac:a3:81:4d:ad:98:d9:9f:06:b1:61:53:64:
                    d1:73:28:7d:9d:53:5a:72:1c:6d:9a:14:06:02:60:
                    93:70:52:8d:a1:47:09:1e:17:7c:e3:ae:5b:11:19:
                    60:da:bc:78:50:38:1e:e2:e3:ac:61:b1:d1:46:ce:
                    97:74:6e:10:13:4b:50:3e:63:60:41:04:77:96:2c:
                    5e:2b:9d:c3:e9:a0:fb:45:46:a7:80:62:6c:1e:dc:
                    db:62:e7:f5:ec:a5:17:21:ef:cf:02:c1:0d:f8:3d:
                    45:06:3a:3a:65:de:33:b0:6c:11:c3:43:88:b3:30:
                    fc:d1:70:19:ac:cc:1f:7c:16:24:a7:ea:d9:28:2b:
                    e7:34:9c:6d:6b:82:08:60:08:d8:7a:82:d0:92:d4:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:9C:34:AC:20:20:64:E0:C8:5E:1B:01:DD:2A:91:83:A3:3E:28
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:68:c2:2c:a6:78:ea:b3:3f:8c:d7:ec:18:b2:d6:d5:e8:
         8d:91:d7:e7:f6:59:8d:13:3c:89:3a:f6:02:6e:5f:64:d3:ab:
         ab:2d:af:53:cd:2f:19:4a:f8:b6:a3:bc:23:7d:80:38:51:b3:
         80:e1:43:5a:a0:ac:d3:d8:2a:99:33:2e:c6:15:54:49:ab:af:
         4e:a1:61:8f:0f:85:39:0a:f4:30:7f:98:b8:b9:59:da:9b:a8:
         98:e5:e2:4a:bb:27:a4:0c:c3:07:87:58:4a:74:ec:7d:60:06:
         ab:1d:63:07:cc:c0:54:bd:d4:af:22:30:20:8e:81:ad:0c:0c:
         01:cf:bd:3a:c0:dd:70:d7:ac:2c:fd:c8:9b:32:e6:a5:ab:7f:
         aa:37:3b:eb:cb:75:3a:41:b0:14:5e:08:bf:41:45:69:51:00:
         c5:2c:9d:cb:b0:c1:93:b0:ea:0e:5b:df:fc:09:2c:ae:d3:4f:
         41:cf:47:a3:20:e7:26:4f:a7:e5:87:40:e8:8f:30:79:d0:fc:
         fa:f4:b1:ff:3a:28:39:b6:39:0f:f6:81:b0:e4:90:ee:38:a4:
         1f:4b:ec:68:19:f4:1c:3a:d9:08:ed:7e:ee:d5:23:97:7e:83:
         fd:87:ab:43:f9:f5:3c:31:50:df:d6:18:c9:52:33:f9:3e:1a:
         1c:93:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:42:06 2026 by rpki-client