This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
File:                     8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer (raw, json)
Hash identifier:          Cgk0KXXEvPEJcLl/138lj/3RhZukNuppqvMDP3A4M/w=
Subject key identifier:   8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4EB2CDD87EA482EC9E10D782E6003B6E466DE326
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:42:54 +0000
Certificate not after:    Wed 27 Jan 2027 20:47:54 +0000
Subordinate resources:    AS: 269976
                          IP: 24.152.40.0/22
                          IP: 2803:f6e0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b2:cd:d8:7e:a4:82:ec:9e:10:d7:82:e6:00:3b:6e:46:6d:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:42:54 2026 GMT
            Not After : Jan 27 20:47:54 2027 GMT
        Subject: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:98:69:90:26:54:0d:6e:29:e3:74:69:78:
                    f9:45:3a:8d:d2:1c:e1:69:5b:02:c6:f5:8b:a0:da:
                    6f:3c:88:2c:d2:7e:87:9d:7f:32:5b:f5:e1:8f:48:
                    78:2a:3d:ff:20:d3:13:20:a6:76:eb:0d:d0:6f:e8:
                    ee:8b:0f:4f:50:ce:49:63:30:fc:e2:2a:24:fb:f5:
                    42:30:53:0f:e3:9f:59:b1:af:fa:20:eb:3c:42:ed:
                    e4:a3:d7:dd:20:97:8c:e6:e0:f3:04:23:9b:4a:47:
                    3a:2a:ab:e3:00:ae:f3:3a:4c:5e:1e:fe:d5:d6:65:
                    c6:ee:25:52:d6:e3:39:d1:6c:cf:43:21:31:81:6a:
                    cf:5a:59:d1:f7:c6:97:63:d5:c7:86:b2:7d:c8:30:
                    85:4a:76:6e:dc:65:c9:1e:af:03:91:f0:95:44:91:
                    7a:36:cd:64:7c:58:ca:0f:ac:e9:77:98:c7:6a:cf:
                    a9:54:ed:d7:4a:49:3d:3d:96:2a:ac:3a:d3:72:90:
                    03:cf:19:50:19:e3:3c:cc:71:e1:1f:22:3f:66:6a:
                    56:23:92:2d:fe:b1:9e:d6:23:42:c6:9a:4f:50:7c:
                    54:e4:68:17:76:94:1b:af:1b:ae:95:d2:70:35:1c:
                    19:e1:12:01:cc:dd:a5:3e:02:6a:4b:92:10:2e:01:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22
                IPv6:
                  2803:f6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269976

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:26:22:55:b6:73:4e:81:97:b6:a7:6f:a7:fc:61:d5:af:
         5e:24:49:57:7e:c6:4b:a2:08:5f:0e:cc:93:d8:b4:c9:ef:07:
         fd:e6:94:c2:af:db:c8:eb:5d:45:ff:3a:c5:c0:4d:d1:4e:aa:
         d1:9f:35:0a:41:a4:7d:88:b6:d3:14:f1:28:07:d2:56:ab:01:
         6d:8c:bc:fa:ef:08:fc:6e:16:3d:11:e0:cd:55:81:95:f6:0a:
         48:c0:60:45:16:ae:ce:49:bb:2b:ca:29:c0:79:9b:9b:7d:0d:
         0e:14:7b:3a:71:fa:e8:b6:56:76:14:9c:cd:52:eb:1d:8f:e2:
         35:2b:84:0d:72:9b:f4:79:1d:78:0f:4b:c2:cd:1e:c4:5f:1c:
         5c:7b:52:fc:49:26:4f:df:2e:37:c6:08:22:b6:a5:88:d5:5b:
         31:f7:a2:40:5f:e3:08:8f:ab:e4:f6:2b:cc:3f:d0:ad:4f:28:
         19:77:05:68:88:67:20:88:c5:b8:13:75:7f:36:ec:e4:cb:83:
         94:57:8f:c5:32:ce:39:10:27:71:55:53:eb:ba:41:c4:91:3c:
         e5:6e:6e:17:22:04:49:5d:c4:17:8a:95:7f:16:2d:06:f4:c8:
         84:1e:28:ad:2a:86:2e:17:82:6e:ed:b3:5d:17:5f:10:fb:17:
         86:45:c7:23
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUTrLN2H6kguyeENeC5gA7bkZt4yYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgyMDQyNTRaFw0yNzAxMjcyMDQ3NTRaMDMxMTAvBgNV
BAMTKDhDNzBEQ0NGMjc1QjE0NzE3RjZBMTI0MTRGMUVFMTNEQUZDRTRFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fphpkCZUDW4p43RpePlFOo3S
HOFpWwLG9Yug2m88iCzSfoedfzJb9eGPSHgqPf8g0xMgpnbrDdBv6O6LD09Qzklj
MPziKiT79UIwUw/jn1mxr/og6zxC7eSj190gl4zm4PMEI5tKRzoqq+MArvM6TF4e
/tXWZcbuJVLW4znRbM9DITGBas9aWdH3xpdj1ceGsn3IMIVKdm7cZckerwOR8JVE
kXo2zWR8WMoPrOl3mMdqz6lU7ddKST09liqsOtNykAPPGVAZ4zzMceEfIj9malYj
ki3+sZ7WI0LGmk9QfFTkaBd2lBuvG66V0nA1HBnhEgHM3aU+AmpLkhAuAXpFAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMcNzPJ1sUcX9q
EkFPHuE9r85OcjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREMwRDI0MEJBRjFEOUJCQUE2RTI0MTMy
NjQ3RTUzOEUwMTA3RjhGMTQzNjBBRDExMjczOEZFNzlDMDkwMDExMC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9EQzBEMjQwQkFGMUQ5QkJBQTZFMjQxMzI2NDdFNTM4RTAxMDdGOEYxNDM2
MEFEMTEyNzM4RkU3OUMwOTAwMTEwLzAvOEM3MERDQ0YyNzVCMTQ3MTdGNkExMjQx
NEYxRUUxM0RBRkNFNEU3Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCGJgoMA0EAgAC
MAcDBQAoA/bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQemDANBgkqhkiG9w0B
AQsFAAOCAQEAecgmIlW2c06Bl7anb6f8YdWvXiRJV37GS6IIXw7Mk9i0ye8H/eaU
wq/byOtdRf86xcBN0U6q0Z81CkGkfYi20xTxKAfSVqsBbYy8+u8I/G4WPRHgzVWB
lfYKSMBgRRauzkm7K8opwHmbm30NDhR7OnH66LZWdhSczVLrHY/iNSuEDXKb9Hkd
eA9Lws0exF8cXHtS/EkmT98uN8YIIraliNVbMfeiQF/jCI+r5PYrzD/QrU8oGXcF
aIhnIIjFuBN1fzbs5MuDlFePxTLOORAncVVT67pBxJE85W5uFyIESV3EF4qVfxYt
BvTIhB4orSqGLheCbu2zXRdfEPsXhkXHIw==
-----END CERTIFICATE-----