This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
File:                     00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer (raw, json)
Hash identifier:          tKUDZFU2cLzMc69bnCBkD8LvQDLZ4+Ud4vn7HnZcU4c=
Subject key identifier:   00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       079730133F41A83435EA15930352D9D1801D1892
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 19:46:50 +0000
Certificate not after:    Wed 27 Jan 2027 19:51:50 +0000
Subordinate resources:    AS: 265530
                          IP: 45.5.52.0/22
                          IP: 2806:28e::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:97:30:13:3f:41:a8:34:35:ea:15:93:03:52:d9:d1:80:1d:18:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 19:46:50 2026 GMT
            Not After : Jan 27 19:51:50 2027 GMT
        Subject: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:04:42:94:19:9c:b9:86:37:72:b7:8f:25:
                    b0:cc:82:0b:60:15:92:b9:c7:9f:f2:95:f1:de:36:
                    28:e2:37:09:52:4a:85:db:f2:a5:d7:56:2d:2b:a1:
                    8c:a7:b4:d5:06:65:91:e2:46:fc:9b:3a:1d:b8:a4:
                    48:55:4a:ce:14:6a:6e:63:a2:90:96:5b:b7:ce:20:
                    15:f1:df:74:2e:13:82:99:09:2f:1d:d4:24:16:e2:
                    d8:2c:dd:8d:bc:d5:4f:6c:60:b7:ba:d2:6a:96:c8:
                    8f:16:ec:30:d3:5b:66:d3:44:d4:31:8d:86:f9:3e:
                    a3:7d:36:f6:33:8e:41:a6:b9:15:ea:f7:01:65:5e:
                    93:88:e3:0a:8b:9e:26:85:2e:af:a7:4c:d5:7c:a0:
                    82:cf:d8:f2:08:b7:d0:11:51:ba:71:61:60:c3:41:
                    a5:28:34:6c:18:76:95:84:14:8c:fe:ce:c5:82:0a:
                    7b:55:b8:70:cd:18:6c:24:75:89:ca:5d:91:0a:74:
                    e3:82:ec:3b:ca:dd:ad:84:34:12:b3:7b:02:38:82:
                    2c:6f:4c:09:e6:02:2c:c8:cd:c4:39:3a:af:95:8b:
                    14:a5:95:9f:39:47:65:46:68:f8:81:c5:02:fa:bb:
                    55:2e:f9:52:09:08:5f:ec:79:c2:68:c2:20:8e:86:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.52.0/22
                IPv6:
                  2806:28e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265530

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:9c:a8:44:85:9b:ec:f0:77:f9:52:63:d8:0b:78:0c:06:
         e6:b1:39:8d:8c:a8:b6:fa:10:3a:4e:7b:49:4e:44:c7:d9:ee:
         6b:e1:0d:76:15:e6:6c:78:82:e7:fe:d5:d4:4d:ae:a5:3c:0a:
         7e:59:ff:40:57:b0:b2:8a:bd:3a:45:e5:b9:fc:50:00:a4:05:
         79:74:18:5f:bb:73:e5:1e:87:93:b2:79:c9:2f:13:5d:34:be:
         f3:4e:9f:81:bd:43:7e:4f:15:fe:72:e4:78:09:f0:41:f7:5a:
         73:16:ac:d9:23:92:8c:64:81:38:2c:ef:43:dc:bd:02:aa:26:
         9d:e7:bd:bd:c0:48:50:cc:4f:cb:68:8d:52:f0:e3:b5:17:af:
         0d:bd:17:97:da:2e:c3:36:07:20:39:ad:a9:f0:57:fb:9e:0c:
         0a:ac:3b:65:b8:39:c4:77:b1:25:b1:f5:bd:0d:39:d1:24:f2:
         a0:a8:fa:1f:99:ba:29:ab:3f:91:42:c8:0f:00:c2:b8:7e:42:
         70:72:84:ee:70:c0:3b:fb:e4:fa:df:e6:1a:ab:2c:3d:cb:bd:
         22:18:31:87:36:75:ec:63:57:2c:8f:6a:d2:b1:60:68:2e:2e:
         3a:ef:c6:78:4b:57:83:27:1b:86:cb:95:ad:20:4a:3c:e4:f5:
         fd:d7:e0:f8
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUB5cwEz9BqDQ16hWTA1LZ0YAdGJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgxOTQ2NTBaFw0yNzAxMjcxOTUxNTBaMDMxMTAvBgNV
BAMTKDAwQ0RDMEVGMzNDNjBEOEMwMzVDQTY5RjE4NkZENkMzRERFRUY1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohgRClBmcuYY3crePJbDMggtg
FZK5x5/ylfHeNijiNwlSSoXb8qXXVi0roYyntNUGZZHiRvybOh24pEhVSs4Uam5j
opCWW7fOIBXx33QuE4KZCS8d1CQW4tgs3Y281U9sYLe60mqWyI8W7DDTW2bTRNQx
jYb5PqN9NvYzjkGmuRXq9wFlXpOI4wqLniaFLq+nTNV8oILP2PIIt9ARUbpxYWDD
QaUoNGwYdpWEFIz+zsWCCntVuHDNGGwkdYnKXZEKdOOC7DvK3a2ENBKzewI4gixv
TAnmAizIzcQ5Oq+VixSllZ85R2VGaPiBxQL6u1Uu+VIJCF/secJowiCOhosvAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAzcDvM8YNjANc
pp8Yb9bD3e719TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0MyQjM0QkJDNzc0MjRFMkM2NzU5REQy
MkY4MTgzQTcyODc4REU1MDFBNkU1NTIzRTBBNTVGNTVGMjJDOTFFNy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zQzJCMzRCQkM3NzQyNEUyQzY3NTlERDIyRjgxODNBNzI4NzhERTUwMUE2
RTU1MjNFMEE1NUY1NUYyMkM5MUU3LzAvMDBDREMwRUYzM0M2MEQ4QzAzNUNBNjlG
MTg2RkQ2QzNEREVFRjVGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQU0MA0EAgAC
MAcDBQAoBgKOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNOjANBgkqhkiG9w0B
AQsFAAOCAQEAMKScqESFm+zwd/lSY9gLeAwG5rE5jYyotvoQOk57SU5Ex9nua+EN
dhXmbHiC5/7V1E2upTwKfln/QFewsoq9OkXlufxQAKQFeXQYX7tz5R6Hk7J5yS8T
XTS+806fgb1Dfk8V/nLkeAnwQfdacxas2SOSjGSBOCzvQ9y9Aqomnee9vcBIUMxP
y2iNUvDjtRevDb0Xl9ouwzYHIDmtqfBX+54MCqw7Zbg5xHexJbH1vQ050STyoKj6
H5m6Kas/kULIDwDCuH5CcHKE7nDAO/vk+t/mGqssPcu9IhgxhzZ17GNXLI9q0rFg
aC4uOu/GeEtXgycbhsuVrSBKPOT1/dfg+A==
-----END CERTIFICATE-----