This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FC6DD33ECB7C4859D71799958161568FB17952A.cer
File:                     7FC6DD33ECB7C4859D71799958161568FB17952A.cer (raw, json)
Hash identifier:          XFfrGlcJ1j0mUZ+y1bzWbiayg3TIKx3rqyFuiQu4a2Y=
Subject key identifier:   7F:C6:DD:33:EC:B7:C4:85:9D:71:79:99:58:16:15:68:FB:17:95:2A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3C2FEB8292B550A8FDF8226C30AD1BD233D56719
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/7FC6DD33ECB7C4859D71799958161568FB17952A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 19:59:49 +0000
Certificate not after:    Wed 27 Jan 2027 20:04:49 +0000
Subordinate resources:    AS: 27754
                          IP: 181.41.224.0/19
                          IP: 2803:ca00::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 19:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:eb:82:92:b5:50:a8:fd:f8:22:6c:30:ad:1b:d2:33:d5:67:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 19:59:49 2026 GMT
            Not After : Jan 27 20:04:49 2027 GMT
        Subject: CN=7FC6DD33ECB7C4859D71799958161568FB17952A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:b5:77:82:45:fc:f6:f6:86:dd:f8:4d:ae:
                    c6:a7:8e:90:17:2d:86:9c:ea:32:3b:f7:72:b0:40:
                    14:34:f8:63:0e:65:fb:bb:12:e6:5c:07:d8:11:53:
                    e1:a4:83:52:bb:99:7b:99:69:0c:6d:23:ee:76:c9:
                    5b:a2:fd:36:37:1a:6d:f5:6b:17:38:f9:9a:d3:c4:
                    be:ae:64:dd:6b:b8:6d:75:62:75:a5:09:eb:5d:40:
                    0a:ec:34:26:d9:49:9f:e5:3f:ee:07:6c:ee:b6:7f:
                    be:fc:8f:82:73:13:b3:b5:ce:91:7e:ef:c8:e1:fa:
                    06:e7:e4:55:ac:40:5b:c0:61:96:12:22:82:c6:64:
                    84:5e:d7:6d:fc:24:e1:52:22:e7:b6:3e:51:63:1d:
                    93:9f:c1:cf:43:12:a7:a4:4c:0e:aa:7c:d0:08:e1:
                    4b:c9:f2:85:7f:91:3a:5f:23:00:3d:b7:fc:13:44:
                    70:32:5b:3f:f3:7a:c0:9a:f9:bf:a6:ac:0f:30:9a:
                    e8:bd:99:e5:45:dd:84:65:88:24:81:ca:e4:5c:d2:
                    cb:c4:b6:bc:b9:af:75:76:e0:15:bd:a8:02:98:73:
                    f9:87:f2:7d:32:86:4d:2e:87:a6:15:0d:64:b8:e8:
                    0e:4b:64:7b:2b:f5:88:42:26:fa:dc:15:be:d4:85:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:C6:DD:33:EC:B7:C4:85:9D:71:79:99:58:16:15:68:FB:17:95:2A
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25AB503EE49DE23A1C89E727967062CE4F68E01491D67AEFF5F88822DC8078DA/0/7FC6DD33ECB7C4859D71799958161568FB17952A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.224.0/19
                IPv6:
                  2803:ca00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27754

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:67:45:3b:69:e8:b5:f6:49:27:4e:ca:5a:d8:c6:64:4f:
         da:50:95:ed:e3:3c:1b:d8:f1:f9:6a:eb:0f:8c:57:b3:7d:d7:
         06:ab:05:18:31:31:b9:f2:58:4f:19:50:35:cb:72:7d:f2:e6:
         0e:62:87:da:24:46:ac:20:99:66:7e:ee:45:15:ff:27:b4:b3:
         a7:5e:fb:5c:78:eb:ff:4b:ac:27:d1:24:a7:5b:70:ff:66:85:
         97:03:57:5e:bc:7a:46:14:45:1f:61:8a:ba:ab:33:18:3a:f0:
         cd:1a:a2:f7:72:04:d0:ca:38:26:1a:64:85:84:91:a2:1d:02:
         59:92:2a:4a:2f:83:c7:0f:7d:3c:75:64:7a:7b:81:61:6b:7a:
         3a:a6:37:f8:01:9a:a8:57:9d:b1:89:5c:ca:fb:53:18:27:c7:
         65:35:bd:6e:6a:6c:02:90:98:75:53:50:c2:b1:cd:5c:96:cb:
         42:26:52:93:03:92:99:b8:66:5f:66:9b:b1:83:a7:cf:c1:ee:
         87:79:1c:db:b2:59:b9:a6:a0:c3:6b:b8:ae:60:32:bb:3b:6d:
         fa:e0:ca:af:2e:03:fe:a3:1b:5c:d7:cc:0a:1e:3c:4e:3a:14:
         aa:95:87:e4:00:15:b4:23:7b:80:20:4b:12:60:3a:09:5f:80:
         14:9b:b9:d8
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgIUPC/rgpK1UKj9+CJsMK0b0jPVZxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgxOTU5NDlaFw0yNzAxMjcyMDA0NDlaMDMxMTAvBgNV
BAMTKDdGQzZERDMzRUNCN0M0ODU5RDcxNzk5OTU4MTYxNTY4RkIxNzk1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7bV3gkX89vaG3fhNrsanjpAX
LYac6jI793KwQBQ0+GMOZfu7EuZcB9gRU+Gkg1K7mXuZaQxtI+52yVui/TY3Gm31
axc4+ZrTxL6uZN1ruG11YnWlCetdQArsNCbZSZ/lP+4HbO62f778j4JzE7O1zpF+
78jh+gbn5FWsQFvAYZYSIoLGZIRe1238JOFSIue2PlFjHZOfwc9DEqekTA6qfNAI
4UvJ8oV/kTpfIwA9t/wTRHAyWz/zesCa+b+mrA8wmui9meVF3YRliCSByuRc0svE
try5r3V24BW9qAKYc/mH8n0yhk0uh6YVDWS46A5LZHsr9YhCJvrcFb7UhRAZAgMB
AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/xt0z7LfEhZ1x
eZlYFhVo+xeVKjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjVBQjUwM0VFNDlERTIzQTFDODlFNzI3
OTY3MDYyQ0U0RjY4RTAxNDkxRDY3QUVGRjVGODg4MjJEQzgwNzhEQS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8yNUFCNTAzRUU0OURFMjNBMUM4OUU3Mjc5NjcwNjJDRTRGNjhFMDE0OTFE
NjdBRUZGNUY4ODgyMkRDODA3OERBLzAvN0ZDNkREMzNFQ0I3QzQ4NTlENzE3OTk5
NTgxNjE1NjhGQjE3OTUyQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFtSngMA0EAgAC
MAcDBQAoA8oAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmxqMA0GCSqGSIb3DQEB
CwUAA4IBAQA+42dFO2notfZJJ07KWtjGZE/aUJXt4zwb2PH5ausPjFezfdcGqwUY
MTG58lhPGVA1y3J98uYOYofaJEasIJlmfu5FFf8ntLOnXvtceOv/S6wn0SSnW3D/
ZoWXA1devHpGFEUfYYq6qzMYOvDNGqL3cgTQyjgmGmSFhJGiHQJZkipKL4PHD308
dWR6e4Fha3o6pjf4AZqoV52xiVzK+1MYJ8dlNb1uamwCkJh1U1DCsc1clstCJlKT
A5KZuGZfZpuxg6fPwe6HeRzbslm5pqDDa7iuYDK7O2364MqvLgP+oxtc18wKHjxO
OhSqlYfkABW0I3uAIEsSYDoJX4AUm7nY
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:31:36 2026 by rpki-client