This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
File:                     962E09CED777E3B6E30D51D97754EF33B1DFD373.cer (raw, json)
Hash identifier:          NvVwNKqeaV9fJYAZr4KBRyYMftl3Dq4L0Dh6Nqea7tQ=
Subject key identifier:   96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       73418C39B8DF12A14292661C8AA498379A1E92D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 18:46:00 +0000
Certificate not after:    Tue 26 Jan 2027 18:51:00 +0000
Subordinate resources:    IP: 192.188.196.0/24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:8c:39:b8:df:12:a1:42:92:66:1c:8a:a4:98:37:9a:1e:92:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 18:46:00 2026 GMT
            Not After : Jan 26 18:51:00 2027 GMT
        Subject: CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:a7:74:22:81:49:56:33:64:85:e7:a2:0b:
                    d4:c2:6d:18:5f:78:48:48:62:95:c2:82:24:b6:6e:
                    37:f8:d4:5f:1d:fc:1f:ae:c2:10:a3:c9:b0:05:25:
                    10:b5:02:ec:ec:dc:fe:4c:40:c4:f4:b6:83:8f:0c:
                    be:8d:fb:1a:2f:d4:0a:ae:49:e8:ca:1b:78:9f:08:
                    10:d4:6f:50:b3:90:a8:e0:4d:cf:de:63:ca:c0:38:
                    2c:74:a1:cd:19:95:32:c7:40:8a:b0:44:89:89:62:
                    a9:45:d6:19:de:d2:24:95:e7:23:2f:2e:c6:11:3f:
                    03:10:89:34:a4:07:7c:85:3c:bd:3d:9a:d6:a7:56:
                    83:b3:12:66:23:94:22:a7:20:35:31:c1:f2:57:b1:
                    4f:fd:a2:49:0d:18:d4:76:90:4b:57:c9:0f:52:6f:
                    12:a0:55:ba:4b:e1:f1:cf:44:45:e0:8f:dd:e6:75:
                    f4:a1:2b:30:33:80:70:fb:b6:09:b1:d8:ae:58:66:
                    9d:dd:f8:36:72:9e:e3:4f:98:8a:18:70:a0:0a:0e:
                    5c:4a:9c:8e:75:e4:f9:c1:a6:a2:09:87:a7:e2:ab:
                    a7:81:7e:de:35:53:d3:c2:1b:33:1c:de:f0:48:19:
                    a5:75:a5:1f:cc:98:99:8e:6d:c3:b3:2b:96:a9:db:
                    6b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:b9:88:0a:fa:7f:e1:f0:8c:16:6d:26:0a:85:e5:da:a8:
         66:ed:3e:87:e5:91:f9:d4:53:54:e8:cf:55:43:93:9f:e2:53:
         79:66:60:45:6b:11:53:d9:8a:d2:40:df:88:04:95:f8:7f:34:
         3c:4d:c4:63:3a:e0:6d:74:27:ed:25:f4:af:b7:62:32:92:52:
         5c:91:11:21:c5:b9:11:d7:e0:80:e3:0c:c3:d2:f3:cb:03:cf:
         c9:39:98:e1:bf:58:fc:5e:88:ba:a5:8f:2d:b4:7b:dc:ff:81:
         c3:1e:37:89:ca:a4:bf:50:d9:a6:d2:27:76:8e:67:6d:19:5c:
         d3:7f:22:98:8c:40:a3:83:d6:01:00:d9:13:e2:a8:8e:e7:69:
         45:24:61:37:b9:95:13:a5:67:38:4c:da:c7:de:c5:3a:c6:8a:
         5b:d8:ac:9d:54:0b:7a:c8:92:7e:76:02:12:34:1b:d3:c2:3a:
         a5:3a:33:93:58:49:88:c5:fa:ad:ae:70:a0:6d:9d:0d:00:7c:
         51:8d:f0:f5:77:5a:5b:a6:dd:d2:98:51:2b:15:aa:9c:e7:88:
         d2:22:f6:29:8b:cc:5f:cc:9d:6f:27:7b:04:4f:7f:19:48:4e:
         75:94:bb:93:8b:3a:56:04:90:d7:47:9a:94:25:a5:1a:24:f0:
         50:99:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----