This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
File:                     D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft (raw, json)
Hash identifier:          JazEvRGCKR52fZtF9aA34/byw4vIATnv53qCKR/GLmI=
Subject key identifier:   09:D7:A5:48:75:EA:67:C4:16:1C:03:67:A7:45:4A:67:25:38:19:11
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       26FDFB70A67D4C55A4B8B28E8A0465999CA95678
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
Manifest number:          0159
Signing time:             Sun 11 Jan 2026 09:24:23 +0000
Manifest this update:     Sun 11 Jan 2026 09:19:23 +0000
Manifest next update:     Fri 16 Jan 2026 23:19:23 +0000
Files and hashes:         1: 3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (hash: T0L2na1WrTIRsDYz0jfRNdq53Q7JA+xDBRZFsSPAgRY=)
                          2: 3230302e31302e3135372e302f32342d3234203d3e20323634363930.roa (hash: 4HZzH3/nHOhvc5PT9XKQoN6XJAKF4yP9uc+MEFr4CbQ=)
                          3: 3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa (hash: S3SMGplOYvDyDg1xDe6dy1Kq2OS3mgKSqeBpnR/Upvo=)
                          4: 3230302e31302e3135362e302f32342d3234203d3e20323634363930.roa (hash: AsG3PkArUvau3nVFKwcu24ZDfIeXL4ESp9Fv24YhTJQ=)
                          5: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl (hash: 1WwLIiBH+Qoifi/hWEJJKlhvPbzmF3isxutGbENWL7Y=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fd:fb:70:a6:7d:4c:55:a4:b8:b2:8e:8a:04:65:99:9c:a9:56:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Jan 11 09:19:23 2026 GMT
            Not After : Jan 16 23:19:23 2026 GMT
        Subject: CN=09D7A54875EA67C4161C0367A7454A6725381911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:32:ba:62:c7:d9:ef:3a:d9:fa:65:a6:b8:
                    5e:5e:d3:54:9b:7d:26:14:6d:f9:48:64:47:13:9e:
                    86:39:de:29:bd:9c:df:e3:31:43:04:85:79:1f:67:
                    72:ff:c7:02:2f:82:67:a1:09:20:ad:7e:5e:9c:a1:
                    16:55:0d:d8:ae:a4:46:05:84:f8:aa:65:e5:b9:9c:
                    8e:0e:d1:00:18:17:ff:34:e8:c9:38:5e:f2:b5:82:
                    5d:9a:37:f2:da:bc:ad:4b:f7:7e:3e:f9:4b:7f:24:
                    f6:da:c6:50:f1:55:31:7c:9e:95:e6:3d:b2:89:56:
                    b0:70:92:ba:7b:75:e0:ce:87:89:15:db:80:78:0f:
                    d0:8c:86:20:b8:55:45:9b:a3:46:85:1f:76:26:6d:
                    7b:ce:d7:a6:73:84:a0:a4:ff:3c:a3:f9:e0:c0:37:
                    29:3c:48:67:55:ed:40:cf:e8:dc:4d:c0:2f:51:4b:
                    36:fc:fa:32:80:10:2e:92:6f:5b:08:92:3b:63:61:
                    b6:a0:14:9e:e8:10:b4:65:d9:c8:0f:65:92:d9:a4:
                    da:7e:e7:1c:86:d3:76:13:64:04:eb:2e:d0:73:13:
                    02:e7:dd:43:7e:56:fa:b2:85:e3:55:38:a6:c1:86:
                    f1:1c:f4:6b:12:e7:56:4a:b4:92:63:8d:d6:38:23:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:A5:48:75:EA:67:C4:16:1C:03:67:A7:45:4A:67:25:38:19:11
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:62:7f:7a:4c:65:c1:92:f7:8d:e2:28:ea:d8:27:f1:64:
         2e:ee:db:13:11:41:b5:9f:38:ea:30:ba:ab:9a:a6:34:1a:85:
         bb:5d:bf:b2:f5:5d:29:2d:f3:88:93:f7:17:3b:57:8c:c7:19:
         e7:77:9b:c2:f6:cb:3b:40:4d:65:64:95:76:32:57:6f:3e:af:
         80:46:4a:01:a5:0a:58:c6:ab:59:a4:cd:35:df:ca:7f:f0:87:
         06:93:38:85:a8:d6:c6:a5:37:30:45:77:4e:0c:bb:9a:b1:32:
         e9:56:bb:94:fe:45:4b:5e:f5:58:a5:87:77:5f:aa:52:e2:02:
         f3:5a:02:fe:9c:07:14:13:10:d3:e0:50:ae:a2:87:29:20:d4:
         37:58:19:eb:a7:88:b9:d6:85:b6:41:43:75:a0:af:f4:32:93:
         f2:e0:eb:17:2c:1c:cb:32:d0:6e:97:16:f6:54:21:1a:d8:73:
         72:e2:c3:75:2e:da:8a:15:0f:3c:25:89:35:34:00:75:d8:4e:
         f3:1b:e2:61:b7:a6:52:65:b9:cb:e2:0b:2b:ca:2b:b5:f6:79:
         90:ea:cd:21:0c:66:73:89:e1:63:9a:ed:45:38:3d:68:37:30:
         25:e0:ce:04:f7:a7:ce:1b:1e:72:f5:73:bb:65:c2:20:c8:f3:
         c9:d3:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----