This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
File:                     33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer (raw, json)
Hash identifier:          e32ZW6Aqlj8vSkBWc1opIOfw6uBsjNp1mV4HHObRwKM=
Subject key identifier:   33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       6550976A5A20C7B3BBFAB7FAC862B8B9F78F1256
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 23:40:53 +0000
Certificate not after:    Wed 27 Jan 2027 23:45:53 +0000
Subordinate resources:    AS: 265754
                          IP: 131.196.72.0/22
                          IP: 2803:1bc0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:50:97:6a:5a:20:c7:b3:bb:fa:b7:fa:c8:62:b8:b9:f7:8f:12:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 23:40:53 2026 GMT
            Not After : Jan 27 23:45:53 2027 GMT
        Subject: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:d1:53:df:23:63:4b:9d:e9:71:bc:2e:e3:
                    07:3a:9b:d0:71:77:7f:70:b3:46:37:6c:80:e2:cb:
                    f1:44:9e:d9:5f:a9:d6:ff:26:cf:c9:0d:09:64:d7:
                    c1:bd:52:9b:60:53:22:21:5b:ae:a0:70:04:c3:61:
                    07:8a:db:f6:a9:c8:15:63:f6:6d:ae:96:bf:b1:06:
                    89:3e:cc:81:3d:b2:59:df:1e:f4:1b:85:cd:37:fd:
                    30:ea:2c:b3:95:eb:9c:7d:af:22:1b:8c:95:70:fe:
                    1c:9a:4d:ab:ea:f3:9a:b8:3e:15:6f:58:23:ad:05:
                    2d:1d:a9:f3:b5:f4:29:2a:29:5d:0e:f0:11:a6:64:
                    3b:b6:37:29:54:0d:a2:9b:9c:27:48:c4:e4:56:63:
                    4d:f9:d8:8b:25:5e:bd:f1:b4:7d:14:5e:af:72:35:
                    ec:52:0c:f8:4b:6b:b0:97:32:8d:e3:c8:09:02:34:
                    84:b1:0c:63:80:6c:e0:fb:50:0f:33:01:64:4c:91:
                    1c:7d:31:ea:22:99:10:c5:db:e1:30:56:37:96:39:
                    a3:ff:cd:ab:57:05:c2:f5:eb:7f:04:03:44:10:b8:
                    51:71:e1:94:dd:43:2b:4b:a2:ec:40:05:de:73:dc:
                    08:69:78:4e:6a:15:85:8c:3f:e8:f0:b1:59:96:44:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.72.0/22
                IPv6:
                  2803:1bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265754

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:19:90:f9:9b:7c:50:a6:21:e1:2c:9e:73:e4:37:4f:5d:
         c2:55:fe:63:7c:2c:4c:e2:28:44:9a:d9:0d:60:55:8a:0e:c7:
         4e:b7:8d:69:d3:8b:26:b1:0d:33:33:a4:cc:2c:dc:6c:b9:71:
         58:92:d2:71:dd:26:15:b9:9e:ed:90:27:c2:58:7c:96:f0:ba:
         b1:be:63:98:a0:62:ed:41:f2:39:11:2d:ca:3b:c9:a4:be:b3:
         db:1e:1d:64:e7:24:13:32:15:f4:78:01:7e:b3:d6:1f:10:10:
         74:d8:61:1b:81:f2:33:d6:62:10:2f:7f:4e:da:9e:df:45:f7:
         dc:7e:7e:12:f6:e4:08:8d:6d:ca:38:7b:44:a8:1a:92:37:57:
         43:ad:19:a4:90:09:8a:2a:50:21:a4:ea:e4:95:ab:4d:5c:9f:
         f8:78:3c:bc:0c:3d:ec:5f:b8:1c:c1:22:50:e1:2d:0c:46:1a:
         8f:49:32:36:ab:fa:d3:44:b4:a9:0d:99:a0:f6:f5:2e:bf:11:
         9b:44:a8:2e:fa:5f:9d:da:d5:23:9d:e4:e1:93:61:24:b2:3b:
         da:6e:e9:48:1a:db:66:92:d7:a9:df:8f:2d:b9:b3:ae:31:d1:
         2c:22:6e:7b:6d:67:1e:25:8f:63:f2:2f:f4:78:01:b7:36:e4:
         ca:49:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----