This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
File:                     977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer (raw, json)
Hash identifier:          FjfCSjppPlz5tDp98H63ZjgztB8+jcox5ZoUeqEYpmQ=
Subject key identifier:   97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4DECF2F04CCDFCB14A4886B3C851C5DAD4189D33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 15:34:25 +0000
Certificate not after:    Wed 27 Jan 2027 15:39:25 +0000
Subordinate resources:    AS: 265639
                          IP: 170.246.88.0/22
                          IP: 2803:6c0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:f2:f0:4c:cd:fc:b1:4a:48:86:b3:c8:51:c5:da:d4:18:9d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 15:34:25 2026 GMT
            Not After : Jan 27 15:39:25 2027 GMT
        Subject: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:e2:8a:46:e5:99:c8:4d:ec:02:68:c3:f2:
                    01:ff:b8:e4:63:f0:8e:80:e0:f2:22:de:b9:c6:db:
                    28:a0:8d:75:81:c9:c9:53:ca:26:17:2d:3f:07:fc:
                    b0:fa:6c:e7:f5:d1:61:00:67:2d:d5:d2:b2:e3:35:
                    26:74:e9:95:9f:02:70:b2:9e:f6:8c:ac:85:d0:50:
                    57:85:4c:df:73:6e:ec:28:2b:8d:dc:6a:42:bd:3a:
                    cc:d7:c2:1b:1f:fe:5e:94:4f:25:1c:2b:17:42:e3:
                    6a:64:76:44:4f:f2:2f:ee:f5:8d:54:2c:bd:48:f4:
                    21:a2:86:c6:04:ac:29:51:62:2e:f3:f2:8e:85:4d:
                    f2:e6:38:97:bb:3e:e7:47:2b:73:c3:22:16:6c:ee:
                    f5:97:3f:82:17:e7:81:05:ae:a9:db:1b:97:e6:a0:
                    02:d1:8d:b4:05:1a:f1:49:61:3c:d0:c4:ea:8b:2a:
                    5c:b5:50:1b:25:84:fc:af:8d:52:bf:15:e0:e9:0c:
                    23:0f:f2:94:03:69:6a:f5:f1:4c:b0:74:98:c3:db:
                    cd:78:52:72:5f:55:1c:fe:81:cf:cb:d7:6d:ec:7b:
                    b8:8c:ff:cd:ba:71:bd:ff:07:0f:7c:1a:8e:52:82:
                    e0:04:59:75:c1:0a:c5:8b:7f:32:67:7b:0b:37:dd:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22
                IPv6:
                  2803:6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265639

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:64:7b:2f:a5:2f:5a:c1:ab:c3:b6:cb:1e:66:03:43:3d:
         f6:05:3c:49:fb:46:8d:67:9c:87:bb:6d:a7:26:51:3e:e9:4b:
         b5:e8:17:57:c3:9b:2e:3a:d0:51:d9:08:e1:73:42:06:2c:da:
         77:76:8d:4f:2c:10:97:7e:99:57:cc:8a:16:60:62:0c:49:d8:
         71:58:6c:f0:2e:22:5a:aa:95:f8:0d:c7:01:5d:00:bd:2b:e6:
         7d:f1:7b:f4:ac:eb:c3:a4:b1:72:f6:2a:ab:77:0d:15:ad:72:
         5b:1c:10:c3:53:e9:0c:9e:4d:54:bc:c9:94:54:82:d0:87:8a:
         2e:e3:75:dd:d2:03:88:da:56:2e:60:1d:53:65:60:57:3d:3b:
         d3:1e:43:17:c4:5e:ed:ed:e5:3d:57:33:1f:e3:10:7f:a9:69:
         f1:73:6f:9e:0d:7f:e3:1c:69:11:7f:9c:89:e9:92:db:e3:ed:
         87:ce:99:2e:7f:d3:d9:93:05:69:c1:97:c5:b1:59:47:af:f5:
         0d:35:a6:7c:38:8c:92:17:92:5a:0c:00:84:ab:75:cb:6f:28:
         e3:f5:d9:c4:cf:d4:d6:82:e1:91:3e:05:37:d7:a7:42:2d:39:
         d9:1b:07:a8:4b:c4:26:15:8e:7d:52:69:e6:db:29:c8:dc:01:
         f4:2b:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:10:09 2026 by rpki-client