This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer
File:                     9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer (raw, json)
Hash identifier:          q8vFI3Aue79nc4rcLllvFfiLlMDgsJ+FrVly2CfW/g4=
Subject key identifier:   9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       042A1EDD34DEFDCEA179924564B9D68B593BEAEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 00:49:14 +0000
Certificate not after:    Wed 27 Jan 2027 00:54:14 +0000
Subordinate resources:    AS: 267865
                          IP: 45.174.178.0/23
                          IP: 2803:6260::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:1e:dd:34:de:fd:ce:a1:79:92:45:64:b9:d6:8b:59:3b:ea:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 00:49:14 2026 GMT
            Not After : Jan 27 00:54:14 2027 GMT
        Subject: CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:5a:0c:8f:7b:18:ae:43:af:6c:cf:2f:33:
                    16:ab:75:fa:e4:d0:89:5d:ba:97:11:16:7d:1c:5b:
                    56:e6:a5:a1:6b:95:a6:a3:8a:b1:ea:9e:f1:cf:cd:
                    37:bd:66:20:b4:c0:8d:2d:74:20:a0:a3:a0:d6:ea:
                    5c:eb:70:85:34:40:09:a2:56:0f:ad:a3:8d:56:a6:
                    12:09:a7:53:71:65:67:33:cc:55:b2:ce:fd:0c:e6:
                    af:24:af:d5:4d:ce:35:83:e0:0d:c2:9f:e7:d6:e2:
                    c7:37:eb:be:58:20:8f:f1:cb:8e:d1:02:ee:8a:ce:
                    69:cc:38:2f:b6:55:e3:0b:a3:fa:ee:24:af:ae:9f:
                    2c:42:66:ab:84:85:ae:da:59:1d:8e:e9:7c:20:d3:
                    56:cb:e0:48:0f:4e:f5:b2:15:47:45:00:6b:d1:70:
                    34:fe:1e:e4:0b:eb:08:62:e0:ec:52:9e:36:5c:4a:
                    f9:6e:cb:1b:e5:83:dd:8e:97:7e:a0:14:de:97:a6:
                    5a:86:6a:ed:72:79:ab:5a:69:4f:a8:a2:11:21:bd:
                    d1:38:b8:ba:70:cf:8a:76:3a:b8:bb:50:c7:1f:e8:
                    9f:74:57:e7:d8:6a:1c:a8:5b:02:9f:82:05:07:39:
                    87:24:0a:20:fa:a7:35:97:9e:e9:07:89:ad:f9:e9:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.178.0/23
                IPv6:
                  2803:6260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267865

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:c9:35:d9:5b:34:05:e0:3d:ba:6d:cb:24:b2:8e:ca:68:
         32:3a:dc:2e:71:4f:24:99:b7:d2:cf:17:b9:06:d6:ee:38:df:
         a3:89:98:38:8d:07:43:f2:36:5d:37:6f:19:21:6f:b7:c1:1b:
         b6:3d:d9:a0:81:83:34:ae:82:3a:04:05:84:a7:9a:a4:d6:c7:
         30:f7:23:eb:cd:9a:ab:3c:45:6b:f9:90:ad:52:e0:f1:ac:89:
         85:8c:da:2c:95:0b:82:e1:23:cd:68:53:17:17:34:e9:6d:14:
         26:30:2e:30:e6:14:22:a6:8c:09:24:87:a8:27:73:a4:23:6c:
         af:83:94:4c:0d:07:c5:c5:53:3a:22:a8:0a:f1:14:33:38:8f:
         f0:52:65:32:ca:d1:ee:62:46:88:b9:ec:82:8f:07:74:ff:28:
         2d:39:bf:6b:5b:b1:65:8f:ab:dc:a3:79:27:ad:50:cf:e7:2e:
         49:09:d1:9e:40:5c:8e:32:bd:d6:4e:a8:38:11:bb:f7:a0:59:
         d2:28:8e:32:d6:fb:cf:6c:10:1c:3c:a1:0e:c6:f0:f5:7d:17:
         ea:e6:0d:83:f9:2a:f3:b2:aa:29:b3:ce:01:f6:b4:2b:f9:05:
         4f:3a:fe:03:3d:d4:f1:04:1f:4c:7d:69:b3:30:07:56:5a:60:
         19:64:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----