This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
File:                     4C78CC976DFE47B81477BCC595C469015140DEDB.cer (raw, json)
Hash identifier:          pK5l/P7omV1U8YxpcK51NHUsX2mov0BwSP7p4CH2Szs=
Subject key identifier:   4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       6E9682ED292B279D4292E1826525E4DAC0D05186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 23:54:30 +0000
Certificate not after:    Wed 27 Jan 2027 23:59:30 +0000
Subordinate resources:    IP: 128.201.144.0/22
                          IP: 2801:11:3000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:96:82:ed:29:2b:27:9d:42:92:e1:82:65:25:e4:da:c0:d0:51:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 23:54:30 2026 GMT
            Not After : Jan 27 23:59:30 2027 GMT
        Subject: CN=4C78CC976DFE47B81477BCC595C469015140DEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:0f:72:16:3a:8c:40:98:69:6e:6b:01:b4:
                    bc:c6:d0:24:3d:5a:50:0a:ad:58:c7:bd:46:c6:f4:
                    e2:35:96:69:4e:e3:b5:59:19:c7:a1:78:8a:52:98:
                    bc:89:88:cc:c1:be:75:d9:b9:84:bc:0a:a4:70:c6:
                    74:3c:68:9a:66:65:45:51:bc:a4:f2:92:f7:40:19:
                    40:cc:88:8b:28:25:a3:c8:3a:a4:72:d2:3d:0e:00:
                    27:d8:5d:29:fe:9d:1f:4d:00:bb:e8:6a:46:d8:3d:
                    a6:0e:03:7a:db:ec:45:f2:7a:1d:71:40:c4:31:f1:
                    d7:ac:b6:b8:c9:0a:ce:e3:c8:04:0e:aa:e0:c3:f0:
                    14:2a:f0:cd:d7:be:00:5a:6f:e8:2f:c3:cf:6c:73:
                    6c:c6:39:af:f9:3e:91:da:82:06:c5:c1:6d:93:b5:
                    9f:48:88:b5:7e:78:8f:a1:8d:4f:2a:c3:be:ae:0a:
                    4e:0d:9b:92:3b:c3:e2:15:bc:dc:b5:21:47:4f:cc:
                    c1:69:9d:9e:d1:33:47:1d:5f:15:1c:88:46:e2:9f:
                    d4:a9:fd:c8:54:3b:ba:e1:ab:7e:27:ca:11:08:d7:
                    6e:06:13:a7:86:66:f3:c1:0e:68:73:cf:8f:ae:78:
                    2d:2a:d9:aa:fa:3e:90:f3:d3:45:ec:9b:6b:86:db:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.144.0/22
                IPv6:
                  2801:11:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:a9:f9:f2:0b:26:de:ca:23:be:81:09:56:40:0e:5b:d6:
         6e:85:fb:f9:dc:81:5e:7f:74:b9:13:6c:74:5f:4c:15:9f:ed:
         08:3b:1f:80:20:55:22:ea:0b:fa:60:42:3b:9f:cc:33:30:a9:
         62:3f:1d:4f:28:4c:58:f2:d1:66:4c:70:3e:7d:25:a0:d0:b5:
         8a:60:c5:08:cd:c4:77:79:05:21:6b:73:57:88:78:e3:f7:3d:
         76:c0:89:d8:9f:3a:92:64:d0:fe:9f:14:46:21:52:80:ac:8f:
         ef:7d:37:ab:89:b5:2a:94:eb:e1:d0:ab:9e:bd:f7:e2:60:1c:
         5b:72:6a:ce:25:d7:08:fe:f8:c7:ba:9d:cd:2d:f0:16:6d:14:
         9b:02:5c:9a:7d:1b:e5:17:0f:45:61:b7:7d:ca:18:31:86:3c:
         c8:b3:d2:e7:8f:1a:42:2f:51:75:84:22:5c:b7:89:d8:8d:99:
         bd:6d:25:87:c5:fe:93:59:e2:ae:9e:94:b0:69:00:0c:23:a0:
         ae:7d:2b:1f:91:41:3f:f8:b0:6f:f4:73:4d:2a:dd:eb:e1:48:
         e1:f1:ec:49:9a:b8:47:c8:c5:18:50:4b:3b:6c:b4:8a:cf:b0:
         d2:da:5d:32:82:7d:4e:0b:bc:5c:46:bb:78:e2:74:e6:30:fe:
         13:c3:28:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----