This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.mft
File:                     D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.mft (raw, json)
Hash identifier:          1+ydpIdCFgbjiaCYkrN9vXgd9+NF/U3LE03FCezK7cs=
Subject key identifier:   8C:28:5A:13:72:EA:BB:83:71:17:08:38:45:5F:51:96:C5:5D:F9:E4
Authority key identifier: D9:CA:EC:65:06:CC:39:28:0A:66:7E:F1:48:C4:CA:B1:B6:44:6F:6A
Certificate issuer:       /CN=D9CAEC6506CC39280A667EF148C4CAB1B6446F6A
Certificate serial:       732E97E3D09E750109AF7136DEBCA92BC3B18E16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.mft
Manifest number:          0154
Signing time:             Wed 07 Jan 2026 19:48:40 +0000
Manifest this update:     Wed 07 Jan 2026 19:43:40 +0000
Manifest next update:     Tue 13 Jan 2026 00:46:40 +0000
Files and hashes:         1: 34352e3137382e3133322e302f32322d3234203d3e20323637393038.roa (hash: S0r5Kgx8ZlLelnEX4MWVuDNiwqbGxoSMiKJ3fb85mZE=)
                          2: 323830333a623636303a3a2f33322d3438203d3e20323637393038.roa (hash: zHs6pLGrDCwAPJ86SJY0TcyfvZo6Rj/gdpevrmhS8lE=)
                          3: 323830333a623636303a3a2f33322d3438203d3e20323633373032.roa (hash: 3akA/RBWMt3x62DMrj39JubUuclsvlVguljDnv6/wAs=)
                          4: 34352e3137382e3133322e302f32322d3234203d3e20323633373032.roa (hash: bdVa98rmGBrGK1rttuJjC2EaOtH5P+i7nTLbEuo0ty0=)
                          5: D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.crl (hash: YV0KydkpN9JhoNGIc+ZkWRQH3k3v6Ci0BGEU+Qmn2bI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 00:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2e:97:e3:d0:9e:75:01:09:af:71:36:de:bc:a9:2b:c3:b1:8e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CAEC6506CC39280A667EF148C4CAB1B6446F6A
        Validity
            Not Before: Jan  7 19:43:40 2026 GMT
            Not After : Jan 13 00:46:40 2026 GMT
        Subject: CN=8C285A1372EABB8371170838455F5196C55DF9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:2d:66:b7:bd:68:41:be:1a:10:42:96:e8:
                    0e:cd:b9:31:72:c9:19:7e:3d:7b:71:fc:67:fe:ef:
                    e9:74:f4:a6:72:7a:21:47:72:79:d7:c2:00:95:21:
                    a2:2f:86:c5:5a:ca:3e:18:61:3d:a4:e2:19:c4:07:
                    23:31:76:28:c1:67:10:97:7d:62:fe:3f:05:4f:d3:
                    b4:7c:72:b1:17:b4:04:18:d9:ee:b1:e4:75:aa:dc:
                    20:29:8f:fa:95:eb:5c:c2:1b:ae:f6:5d:16:ad:0c:
                    ed:1d:72:52:70:7a:31:27:8c:9b:cf:fc:92:cd:97:
                    85:67:a2:f2:ba:aa:ad:40:48:f7:90:5f:e6:dc:a2:
                    54:13:9b:91:6e:19:05:83:d9:85:ef:e8:c6:21:ad:
                    6e:51:ac:ed:10:3a:d1:db:f5:15:48:16:66:cc:e3:
                    74:3a:31:3c:f9:db:ad:7d:30:bd:56:64:a2:45:d1:
                    25:54:9a:d7:32:c4:04:76:e3:01:8d:cb:52:27:0f:
                    ae:a0:fb:3a:bd:95:ef:7a:36:40:e5:01:66:3f:93:
                    b6:6a:0b:93:24:c5:28:b2:f3:fd:fa:a8:2c:40:f9:
                    69:8f:53:d8:49:6c:b3:83:e5:fd:df:e2:b5:98:2f:
                    19:af:c4:92:db:6f:8a:d5:5b:36:23:69:72:9f:a4:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:5A:13:72:EA:BB:83:71:17:08:38:45:5F:51:96:C5:5D:F9:E4
            X509v3 Authority Key Identifier:
                keyid:D9:CA:EC:65:06:CC:39:28:0A:66:7E:F1:48:C4:CA:B1:B6:44:6F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:58:48:4f:43:4f:c2:a8:9c:f1:c7:1a:3b:27:6c:23:af:e7:
         06:c3:c5:b3:14:72:01:96:41:dc:ec:9f:8c:61:1b:09:c8:6e:
         27:dc:64:5c:e5:75:e3:a8:2d:9b:66:d8:42:ae:43:c8:14:dd:
         fd:8e:e4:f8:df:ad:93:ab:22:75:f9:54:4b:c7:bb:6d:83:a4:
         cd:3c:0b:65:6e:54:2a:38:59:54:7a:cb:88:6e:75:ef:2f:46:
         31:a7:28:58:9b:f9:f7:05:a2:4f:f3:76:46:ad:12:7d:0a:6c:
         3f:99:67:30:c7:b0:75:2a:40:66:e6:79:ff:a0:8b:63:d3:7f:
         fe:1a:aa:c7:86:d4:f3:5e:52:e1:a3:6b:18:da:99:60:71:c3:
         ae:56:5a:be:a3:40:31:61:f0:9d:0c:f1:55:7f:7d:1b:a4:3e:
         bd:c8:44:37:c4:f1:c4:98:5b:33:ec:ab:25:a5:10:21:80:17:
         6d:9f:e0:91:ef:ba:17:b7:e7:90:e7:be:57:af:ac:8f:ff:16:
         90:08:f3:8d:fc:96:b7:a9:1f:1d:81:33:31:19:f8:db:db:3b:
         b8:70:24:41:fa:a9:80:00:76:ec:ef:1d:7c:bb:fc:96:8b:49:
         3d:b5:74:15:1d:20:97:1e:1a:95:66:de:b6:60:54:f4:55:9c:
         72:fb:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----