This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
File:                     538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft (raw, json)
Hash identifier:          /tASs2/WiW6ycZGkvNB14H/IiGDx2k7DjhpVv6uM0Ss=
Subject key identifier:   B7:41:DE:FE:A1:D3:31:BD:42:15:D8:A1:8E:4F:E3:4B:93:B4:CA:BA
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Certificate issuer:       /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial:       68B2906D33BF3F914BD9FF7871C3C3D7D21D7824
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
Manifest number:          0153
Signing time:             Sat 10 Jan 2026 23:31:47 +0000
Manifest this update:     Sat 10 Jan 2026 23:26:47 +0000
Manifest next update:     Fri 16 Jan 2026 06:48:47 +0000
Files and hashes:         1: 34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (hash: 8d844V7hlqgHVpfkLOupzGPT2pBVcmBmlUToxMnZCK4=)
                          2: 34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (hash: nVNdEKFXaKCQCG+wChrdBTjEgYvoiSTdjXH4CvfXLso=)
                          3: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl (hash: KY1ejzSh1UiGxj5qLnZkvJAWk5kZGo5V3IzdwXTBiAc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:90:6d:33:bf:3f:91:4b:d9:ff:78:71:c3:c3:d7:d2:1d:78:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
        Validity
            Not Before: Jan 10 23:26:47 2026 GMT
            Not After : Jan 16 06:48:47 2026 GMT
        Subject: CN=B741DEFEA1D331BD4215D8A18E4FE34B93B4CABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:02:e4:04:b9:0c:d6:a5:71:fe:b7:9b:b9:
                    6e:b2:15:f7:ba:b2:a6:1c:7d:dc:2d:5e:ab:6c:fd:
                    65:a0:5c:94:5a:b9:cb:25:74:ef:e7:ed:24:f7:72:
                    f4:7a:91:ed:e4:5c:2f:28:91:79:c5:b8:19:b2:da:
                    f9:cc:e4:d0:6e:da:0a:45:8c:d1:c8:e6:d3:4e:28:
                    a3:d1:77:1e:a4:86:68:7e:b7:cd:e7:76:38:d6:9d:
                    f9:52:b6:7c:88:71:e0:2f:db:3f:47:cc:41:cf:cb:
                    27:99:a4:19:87:df:35:da:f4:c5:30:01:85:7d:57:
                    2b:29:94:5e:a6:fe:de:1c:76:f9:46:5f:e2:02:83:
                    3d:36:d8:47:5e:08:80:69:a1:24:4c:b8:12:0f:2f:
                    a8:9e:33:a0:71:36:fc:ac:73:dc:54:9f:bc:05:33:
                    5e:0c:06:e4:5b:8d:4e:96:f8:d8:ca:d9:11:32:61:
                    31:1b:bd:a1:fa:7b:5c:1f:a1:be:86:76:a0:ff:38:
                    66:52:81:18:60:28:65:85:37:44:65:dc:90:26:5d:
                    88:93:a8:ba:1e:df:3f:d8:72:61:ee:89:52:d1:57:
                    f7:58:52:01:7c:6b:ef:59:ea:cb:b1:4e:07:ba:70:
                    3e:ce:c8:ee:32:77:f7:5d:2e:59:bd:35:cc:b0:9b:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:41:DE:FE:A1:D3:31:BD:42:15:D8:A1:8E:4F:E3:4B:93:B4:CA:BA
            X509v3 Authority Key Identifier:
                keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:06:f2:e9:33:c0:cf:6d:8e:9d:28:60:ff:2a:d1:61:47:c1:
         9b:44:66:7f:c9:eb:9e:93:ec:27:aa:bc:23:54:91:12:0c:d7:
         10:09:bc:96:72:22:8b:f4:d6:25:c3:1c:9e:23:43:44:84:ac:
         2b:8e:ff:d3:30:b0:ea:43:36:71:7a:91:93:b3:99:3f:a4:d9:
         3a:6a:1b:62:4b:04:2c:8b:a3:2e:89:64:98:e9:dd:7c:8d:ff:
         8a:52:8d:11:32:bb:1a:07:df:61:d9:99:54:79:2d:83:cb:6a:
         81:8d:0b:ed:e2:f8:5a:39:61:36:6f:a0:d5:10:a6:35:ef:50:
         83:bb:d6:c8:1b:51:5a:91:b6:7e:3e:11:a4:11:c3:8f:3f:8f:
         44:0e:29:79:48:19:6f:66:71:6e:50:38:bf:d7:d0:02:24:55:
         7a:a4:19:90:53:18:00:e2:03:25:94:9c:cd:9d:21:e3:f4:3f:
         3b:dd:e4:e9:ca:03:11:9a:71:b5:a9:45:ad:ea:97:8c:71:94:
         5b:b2:09:47:a9:1c:37:a2:32:0a:cd:17:2d:f4:f9:cf:4d:ec:
         e5:b8:41:da:1c:f8:d7:e8:e2:36:1b:0c:68:2f:36:a0:ba:7e:
         3a:db:73:d9:25:db:42:d6:35:0c:a3:fe:31:f4:15:e2:d1:9c:
         b8:45:b7:3c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaLKQbTO/P5FL2f94ccPD19IdeCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4QzUzMDhBOEFGMkQ0MjBDQjlBQzgxNjNDNjA2RDQz
RDNBODE1NjAeFw0yNjAxMTAyMzI2NDdaFw0yNjAxMTYwNjQ4NDdaMDMxMTAvBgNV
BAMTKEI3NDFERUZFQTFEMzMxQkQ0MjE1RDhBMThFNEZFMzRCOTNCNENBQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOgLkBLkM1qVx/rebuW6yFfe6
sqYcfdwtXqts/WWgXJRaucsldO/n7ST3cvR6ke3kXC8okXnFuBmy2vnM5NBu2gpF
jNHI5tNOKKPRdx6khmh+t83ndjjWnflStnyIceAv2z9HzEHPyyeZpBmH3zXa9MUw
AYV9VysplF6m/t4cdvlGX+ICgz022EdeCIBpoSRMuBIPL6ieM6BxNvysc9xUn7wF
M14MBuRbjU6W+NjK2REyYTEbvaH6e1wfob6GdqD/OGZSgRhgKGWFN0Rl3JAmXYiT
qLoe3z/YcmHuiVLRV/dYUgF8a+9Z6suxTge6cD7OyO4yd/ddLlm9Ncywm2zRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUt0He/qHTMb1CFdihjk/jS5O0yrowHwYDVR0j
BBgwFoAUU4xTCKivLUIMuayBY8YG1D06gVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTExRjkzMDU4MjZEMzYzMzRFNDREMTMxMzYzQkVDRTE1
OUY1QkYwNTJCMjFENDUzNzIzRDM1NTUxQTQwQ0I5LzAvNTM4QzUzMDhBOEFGMkQ0
MjBDQjlBQzgxNjNDNjA2RDQzRDNBODE1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzhDNTMwOEE4QUYyRDQyMENC
OUFDODE2M0M2MDZENDNEM0E4MTU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUExMUY5MzA1ODI2RDM2MzM0RTQ0RDEzMTM2M0JFQ0UxNTlGNUJGMDUy
QjIxRDQ1MzcyM0QzNTU1MUE0MENCOS8wLzUzOEM1MzA4QThBRjJENDIwQ0I5QUM4
MTYzQzYwNkQ0M0QzQTgxNTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2BvLpM8DPbY6dKGD/KtFhR8Gb
RGZ/yeuek+wnqrwjVJESDNcQCbyWciKL9NYlwxyeI0NEhKwrjv/TMLDqQzZxepGT
s5k/pNk6ahtiSwQsi6MuiWSY6d18jf+KUo0RMrsaB99h2ZlUeS2Dy2qBjQvt4vha
OWE2b6DVEKY171CDu9bIG1FakbZ+PhGkEcOPP49EDil5SBlvZnFuUDi/19ACJFV6
pBmQUxgA4gMllJzNnSHj9D873eTpygMRmnG1qUWt6peMcZRbsglHqRw3ojIKzRct
9PnPTezluEHaHPjX6OI2GwxoLzagun4623PZJdtC1jUMo/4x9BXi0Zy4Rbc8
-----END CERTIFICATE-----