This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
File:                     420B44E3D543CA237CB6BC9020FEC4357D75D278.mft (raw, json)
Hash identifier:          pfAY25nn67L2QIEMhowk8BMd6IAv7nRRghSKRRlOLYI=
Subject key identifier:   B5:08:39:2C:7C:EC:92:DA:29:A2:81:89:F0:B4:07:02:49:C2:E7:FF
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       6FC935839CFEA2348A6D665A5D6341CE82499501
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
Manifest number:          0158
Signing time:             Sun 04 Jan 2026 01:25:11 +0000
Manifest this update:     Sun 04 Jan 2026 01:20:11 +0000
Manifest next update:     Thu 08 Jan 2026 11:20:11 +0000
Files and hashes:         1: 323830333a663836303a3a2f33322d3438203d3e20323732393935.roa (hash: lua80lqZs3pnNPzwC8YM5I/4s8xiZPbTcpo2byV9anA=)
                          2: 34352e3137332e31302e302f32332d3234203d3e20323732393935.roa (hash: bOs7kcdOXaU0+s3i+H7IAYDD9Y1iXh5X6R1+m3hcO7k=)
                          3: 420B44E3D543CA237CB6BC9020FEC4357D75D278.crl (hash: 0xOXO7b2NwKMZ1BzxYJWmMc3Wp1hlK9RxobMg96waZc=)
                          4: 34352e3137332e392e302f32342d3234203d3e20323732393935.roa (hash: k0iN4XJYUJqNfRCXjrL68TShISbFe8R2TaAS6n0LHeg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 11:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c9:35:83:9c:fe:a2:34:8a:6d:66:5a:5d:63:41:ce:82:49:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Jan  4 01:20:11 2026 GMT
            Not After : Jan  8 11:20:11 2026 GMT
        Subject: CN=B508392C7CEC92DA29A28189F0B4070249C2E7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:c8:ce:74:07:27:6a:fe:04:de:6e:0d:0b:
                    b2:15:f2:3e:9b:a4:6c:43:ce:1b:1d:90:a3:99:1b:
                    a6:5d:88:a6:df:b8:f0:b0:88:9f:b3:61:a2:d2:3e:
                    7e:ab:28:3d:42:3c:e5:ee:9d:42:ce:76:08:d8:23:
                    d9:c3:47:85:dc:79:30:d4:ec:e8:93:11:fa:b7:1c:
                    05:4c:5d:33:3f:80:f3:d5:a1:c7:cc:a1:16:58:0e:
                    94:9f:c7:e7:1d:8c:f0:84:c3:93:45:b3:b5:a7:bd:
                    4b:eb:d3:b4:ed:82:d8:73:04:29:85:12:3b:ed:00:
                    ab:6a:34:35:04:7d:46:f8:f5:a8:da:78:b8:c8:3e:
                    19:90:9f:78:1b:af:1d:78:ba:af:5a:04:b9:88:27:
                    b0:73:ad:b8:15:a0:91:ed:e0:aa:e9:e0:fc:74:20:
                    94:4a:91:a2:4a:0f:47:86:4b:77:18:3d:17:7b:25:
                    25:c3:78:8a:4f:ea:38:0f:09:14:35:a9:2e:90:3c:
                    b3:34:87:d9:2e:ca:ea:d1:70:ca:ab:7a:b1:d3:91:
                    14:e5:c6:e6:c9:7a:92:97:a4:18:59:db:90:52:d2:
                    70:ca:13:54:ad:f9:c3:b0:db:46:60:58:2c:31:12:
                    67:73:d7:4a:9b:12:59:cc:7d:e8:81:5e:0a:ed:32:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:39:2C:7C:EC:92:DA:29:A2:81:89:F0:B4:07:02:49:C2:E7:FF
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:90:9a:6f:bc:63:a6:fd:a3:4f:88:f4:4f:17:f9:64:0f:
         02:da:c3:75:e4:2a:8f:e7:17:b4:3c:e3:1e:23:aa:5a:40:12:
         1f:69:d6:44:aa:2e:1f:60:da:a4:d8:f4:5d:36:c3:bc:f2:40:
         83:bf:9c:a0:d9:2d:ca:7e:88:16:89:20:02:40:c0:1e:49:10:
         a1:a8:97:42:b0:99:33:74:16:9a:35:05:51:68:30:c1:d7:42:
         8f:f2:cd:39:fe:5d:e3:e7:ca:46:de:93:35:c8:90:7a:6a:4f:
         e8:59:d1:90:bc:2a:28:f7:f0:67:df:23:e7:16:c0:23:9d:dc:
         d8:f8:28:40:c8:f9:70:57:4b:df:17:b3:79:a9:7a:b4:69:21:
         8a:e3:b0:90:3b:91:d4:32:83:51:f1:a4:9b:6b:1f:1c:36:c9:
         47:74:14:62:6c:18:3b:f7:5c:95:eb:89:b2:40:68:50:d4:52:
         6f:4f:77:57:94:89:6d:f7:ab:33:12:63:8e:d9:ff:be:f9:58:
         59:6a:bd:c2:09:51:09:a3:88:72:35:eb:49:2f:93:c8:bf:91:
         4b:60:51:63:ef:f7:c5:de:a9:0d:17:eb:89:6c:c6:49:d8:20:
         cb:a7:b6:f7:69:23:f3:48:75:19:99:9a:87:f8:0d:9e:fb:cd:
         bc:a9:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 01:15:09 2026 by rpki-client