This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
File:                     402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer (raw, json)
Hash identifier:          Wwm8nlrVyM0O/6TQq/s8KAg2pf6nbUitGY3bNp7AMJI=
Subject key identifier:   40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3B7E1C8A8FA829DB51589A19FE533BB73CA3CDA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 14:40:35 +0000
Certificate not after:    Wed 27 Jan 2027 14:45:35 +0000
Subordinate resources:    AS: 265695
                          IP: 45.5.8.0/22
                          IP: 2803:9c0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7e:1c:8a:8f:a8:29:db:51:58:9a:19:fe:53:3b:b7:3c:a3:cd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 14:40:35 2026 GMT
            Not After : Jan 27 14:45:35 2027 GMT
        Subject: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:e6:d7:ed:2f:11:2d:69:45:81:b7:c4:95:
                    a4:56:75:61:5f:0c:83:d1:21:3b:07:a9:c5:1e:6f:
                    68:68:b0:72:66:b2:13:b1:ae:30:63:1c:ed:80:16:
                    d1:bd:91:df:b5:b1:22:96:39:59:65:f2:21:5d:21:
                    24:f0:86:ce:7c:a3:d6:ae:44:73:8d:ff:1f:b3:31:
                    dd:f9:16:23:50:70:b8:ac:b2:b6:fa:f8:ae:33:ce:
                    e0:eb:7d:d0:84:36:0d:d1:a3:f1:51:4a:a2:08:3f:
                    eb:d8:fa:70:71:f8:f5:1d:2d:91:72:37:9b:31:ea:
                    00:9c:7a:09:60:0b:38:9d:28:40:15:2c:86:06:81:
                    3a:46:a3:b7:4f:b2:f6:f9:51:90:c3:9c:d0:5a:9c:
                    36:7d:b2:92:a9:ce:1d:b0:e7:d6:45:26:1e:8b:80:
                    57:d9:b1:f6:1d:19:1d:11:c7:d3:cc:85:0f:63:80:
                    14:ad:0d:d2:d5:1d:3a:f2:01:88:58:18:ca:38:8d:
                    66:68:a8:d7:4b:2b:c3:a7:5b:09:5d:cb:d2:a6:f5:
                    27:d1:1e:2a:1e:01:b9:06:49:83:40:97:cd:04:5a:
                    8b:5e:25:a6:3c:09:26:18:00:16:6c:ce:c6:91:f5:
                    53:60:67:ad:73:48:65:38:c0:2f:c0:4c:11:31:c3:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265695

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:9e:f6:cb:70:e3:21:e8:1c:e1:c9:25:94:47:dc:85:91:
         df:86:0b:f6:b0:ac:4a:54:93:50:10:59:2f:8a:61:6e:bb:bb:
         86:a6:83:d6:20:d4:a9:e5:8c:f2:e4:fe:8e:a0:5d:f3:1a:f7:
         0a:1b:dc:99:0f:dd:b3:90:54:11:7c:8b:b5:05:f7:e7:5d:50:
         76:5b:71:86:6b:cd:93:d4:e1:71:ca:07:97:ed:af:c2:7d:0e:
         b1:1c:8d:93:56:0f:8a:69:75:e7:dd:1a:b3:4b:2c:3d:69:71:
         fb:f7:63:b9:0a:05:9a:78:ed:02:f9:47:5a:f5:1c:7f:44:84:
         20:7e:90:db:0e:fe:3d:a6:52:5f:27:3c:b1:10:4c:13:d7:8c:
         3f:49:63:b6:07:43:6e:b5:88:bd:a7:81:dd:e6:c1:c8:44:44:
         95:fc:39:8f:55:7c:4f:44:a9:c1:9c:53:ab:08:af:23:40:10:
         79:02:52:1d:ed:8f:40:2a:66:e3:cc:a3:b4:78:37:f2:87:fb:
         5e:c8:09:48:66:03:22:40:14:c1:f3:da:89:6d:73:2e:fb:9b:
         2e:ae:56:32:8e:31:c8:a1:47:10:21:dc:d0:10:11:c8:2a:75:
         52:7b:4c:94:06:fd:ab:9d:5a:db:74:50:ea:9a:89:fe:93:80:
         d3:fe:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----