This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer
File:                     5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer (raw, json)
Hash identifier:          ecNB0HVBe8OoHDU7UKU7uB2SyFg5+Xjr0x/x2W+easc=
Subject key identifier:   5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       0C9913C29F055D6C834D4789A93CE578D667AC83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:03:09 +0000
Certificate not after:    Wed 27 Jan 2027 20:08:09 +0000
Subordinate resources:    AS: 264829
                          IP: 170.80.96.0/22
                          IP: 2801:1f:5000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:99:13:c2:9f:05:5d:6c:83:4d:47:89:a9:3c:e5:78:d6:67:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:03:09 2026 GMT
            Not After : Jan 27 20:08:09 2027 GMT
        Subject: CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:20:a2:da:74:5b:f3:73:f8:a6:4f:d1:7b:79:
                    40:2e:01:e6:89:00:d4:9f:43:17:ed:b6:de:cd:47:
                    be:76:93:39:7b:ee:d7:0d:f6:6c:e7:e3:ff:99:74:
                    5e:4d:fa:3a:08:2c:9b:9a:fc:fb:b4:02:9e:3b:2a:
                    b8:7b:03:eb:41:c2:dd:3b:a6:02:89:e1:2b:4d:cb:
                    f3:ee:43:5c:05:92:87:05:25:9b:77:23:5b:c8:c9:
                    8d:d0:4d:ad:4f:6c:cd:56:9e:f6:5d:57:0b:d1:77:
                    3f:b1:2f:91:8d:9f:d5:c5:99:93:ba:4d:e4:4d:06:
                    9b:cc:45:7a:57:26:82:46:e4:cf:fa:9c:0e:fe:7b:
                    fe:08:72:cd:6e:8a:7a:d2:34:d7:c0:8b:96:c7:a0:
                    6b:de:47:07:72:d3:26:35:8e:23:d4:60:2a:0d:31:
                    e5:9d:cf:af:e5:bd:dd:d6:00:5c:f3:04:ad:a9:b1:
                    6d:a6:47:36:70:be:90:e2:1b:86:4f:82:9e:45:c9:
                    9c:37:15:7b:0e:36:7e:f8:01:5d:c9:9b:cb:1c:2d:
                    10:a2:42:41:17:9c:c9:3c:44:97:86:fb:13:8f:30:
                    82:54:8e:92:03:44:c0:ef:58:10:90:96:54:f0:01:
                    6f:0d:c4:bf:8a:2e:ef:5d:0c:b9:34:08:ca:fc:f4:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.96.0/22
                IPv6:
                  2801:1f:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264829

    Signature Algorithm: sha256WithRSAEncryption
         70:14:84:16:47:b3:29:99:35:97:59:74:01:f0:b8:ab:e3:f6:
         8a:aa:c7:c7:0a:9d:4a:56:7f:34:86:95:9f:7f:b2:ad:26:7c:
         24:4a:e0:8f:ad:cf:c2:14:71:68:aa:06:7e:a1:11:3a:45:1b:
         dd:e3:72:91:4c:fb:fa:cf:54:69:02:7d:be:58:20:ff:7d:75:
         bf:37:92:ec:3d:1e:6a:6b:01:33:67:cf:d3:26:60:89:d0:f4:
         d7:c8:c4:c6:e3:dc:05:7d:b3:1f:9b:14:e0:31:fe:7c:fb:59:
         25:15:9c:56:60:aa:da:f6:17:ec:40:1e:d9:47:14:67:5e:48:
         07:e8:76:f7:e1:d5:53:5c:74:33:96:79:56:5c:05:a9:ce:43:
         d6:cb:a5:cf:1c:f2:da:35:18:c9:3a:36:c4:1e:d8:2e:b3:9b:
         a6:89:b7:77:ac:02:64:a5:32:b8:95:1d:c4:71:21:e9:1f:f8:
         b2:01:ea:c9:45:b7:c1:5c:53:d9:40:c1:e2:f6:06:ff:1b:12:
         01:66:07:0d:8f:d7:6b:68:2a:0c:28:2f:ff:dc:63:2e:fd:3f:
         59:ae:42:13:91:cf:9e:e9:56:0e:1a:f6:a5:a7:f6:9f:71:99:
         7a:a2:ce:6d:b4:51:3a:54:e4:20:54:d4:05:6c:4d:e3:90:20:
         fe:82:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----