This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
File:                     5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer (raw, json)
Hash identifier:          Vxh501HlAbzFsti9YZ4xsz00lqsXOQzdB6J9KhKoXqw=
Subject key identifier:   5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       56E03444BB0036990C3460C9D1A3058C760880A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:08:38 +0000
Certificate not after:    Wed 27 Jan 2027 20:13:38 +0000
Subordinate resources:    IP: 131.100.140.0/22
                          IP: 138.99.0.0/22
                          IP: 138.219.156.0/22
                          IP: 168.232.36.0/22
                          IP: 190.120.0.0/19
                          IP: 2803:9d80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:34:44:bb:00:36:99:0c:34:60:c9:d1:a3:05:8c:76:08:80:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:08:38 2026 GMT
            Not After : Jan 27 20:13:38 2027 GMT
        Subject: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:e4:73:49:dd:33:07:f7:68:a0:b4:b1:e6:
                    98:a8:a7:33:07:b6:8c:1d:63:dc:69:5b:ee:80:51:
                    37:85:69:15:4c:e5:c3:87:d5:07:0e:6a:4e:ac:d3:
                    79:28:09:2c:95:58:fb:11:e6:18:0b:49:52:15:a4:
                    ba:72:04:a1:2c:c8:f6:b7:d0:01:f6:5b:e4:67:55:
                    3f:79:46:37:8e:27:cf:ff:3e:74:46:00:c0:27:db:
                    a4:68:f4:3c:8c:95:bc:32:1e:4d:71:0a:80:ac:a8:
                    23:17:e7:ec:42:c4:ef:3d:e7:97:de:8e:0c:60:74:
                    02:4d:6a:75:84:1a:ef:15:50:c9:b9:37:41:94:85:
                    09:3d:bb:61:e8:0c:af:54:23:7e:a2:23:bc:70:d4:
                    38:70:aa:db:e3:b7:0d:fa:8d:54:76:92:40:45:40:
                    c8:09:3e:88:84:c9:64:bb:f7:7f:a3:49:2f:9f:f3:
                    07:5c:8c:16:e9:85:62:53:a8:79:22:03:2d:2c:e1:
                    ea:ee:e9:14:3f:b2:6c:78:17:9c:9c:38:6f:68:94:
                    fc:a7:76:a5:a3:86:11:9f:40:1b:da:20:07:eb:de:
                    ab:10:cb:f7:be:cf:c0:20:91:6d:0e:23:a9:02:e0:
                    49:3e:d6:eb:e7:92:09:c7:a1:51:61:79:a5:ba:c0:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.140.0/22
                  138.99.0.0/22
                  138.219.156.0/22
                  168.232.36.0/22
                  190.120.0.0/19
                IPv6:
                  2803:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:88:45:38:cf:f3:5c:67:0b:56:ad:22:b7:79:c5:6f:27:
         74:bc:dd:85:0e:5c:a2:db:a3:06:9b:c8:ab:90:b2:b9:70:13:
         0d:38:d5:9f:1e:47:9c:87:9c:e1:c9:2d:7f:16:13:d2:25:01:
         b3:04:0a:0d:0b:12:13:39:33:ce:ea:08:74:ae:2f:95:60:4d:
         16:9b:04:5b:e6:2c:c2:f8:6d:a8:73:0e:ee:97:8c:36:3f:f1:
         88:4e:0e:d2:80:ed:9d:a0:07:34:7d:50:83:50:08:99:af:7a:
         bd:5e:cc:34:32:d3:61:f7:45:bc:e5:68:f3:c0:36:77:a8:ee:
         8b:09:af:2e:15:94:4d:6b:87:83:76:63:1f:47:da:a8:b2:1a:
         80:e1:94:91:20:f7:8a:58:13:3b:1d:81:18:b5:77:d9:ae:59:
         5f:02:8a:d3:e4:18:45:b2:0b:37:aa:ed:f4:e9:0e:5d:b6:dc:
         53:ab:bd:b9:e5:87:79:a8:23:50:55:a9:73:32:9e:f9:49:45:
         bd:93:3d:c6:a5:1e:ef:18:6b:cf:8c:df:41:d5:0f:7c:ab:e3:
         b4:f5:53:e0:8a:0e:7b:41:1f:5b:2b:19:73:40:34:33:1a:b2:
         ff:be:6e:a8:a6:de:ef:26:90:f1:91:20:08:ba:d1:ef:0b:40:
         ad:75:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----