This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
File:                     AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer (raw, json)
Hash identifier:          8tAdl+Tb5Yr42ogWH/DZW5DFhN+mat8uYqTnyF3R8PI=
Subject key identifier:   AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       15C99CF8ED85CC1A3948A5BC1B60911F9EA51623
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 06:07:27 +0000
Certificate not after:    Wed 27 Jan 2027 06:12:27 +0000
Subordinate resources:    AS: 274158
                          IP: 200.33.108.0/24
                          IP: 2803:d9d0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:9c:f8:ed:85:cc:1a:39:48:a5:bc:1b:60:91:1f:9e:a5:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 06:07:27 2026 GMT
            Not After : Jan 27 06:12:27 2027 GMT
        Subject: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:d2:bc:ed:2c:73:de:a7:e7:6b:64:de:db:
                    87:7c:e4:3b:90:b2:4b:bb:f2:e6:f8:fa:14:42:a1:
                    fe:0f:45:ef:8a:af:da:c6:6c:0c:42:7c:c1:09:85:
                    6d:38:76:c2:f2:d7:f4:2c:9d:13:c5:dc:5d:10:00:
                    d3:58:f9:b9:ff:70:d8:c8:2d:c7:2c:13:20:13:74:
                    80:d8:d2:f4:ae:af:82:62:2a:77:a7:37:bc:a0:00:
                    e6:16:e4:12:59:e1:8c:43:86:bc:4b:5d:19:8e:ca:
                    a0:f9:bb:00:6d:53:2a:67:ff:a7:2a:d3:ab:e2:2a:
                    c3:bf:52:64:9d:e5:04:7e:44:a1:16:82:d3:63:ac:
                    06:32:3c:33:a6:89:62:4c:23:7f:14:88:f9:43:d2:
                    36:7a:cd:c8:0f:62:6b:d9:e7:43:15:e6:74:00:32:
                    6d:dc:56:5a:3d:b3:11:a3:2f:14:a0:c5:b8:2d:c0:
                    3e:eb:66:1f:9a:e4:b7:f4:32:6d:28:ac:8f:c8:b2:
                    61:6b:66:b3:83:fa:e1:00:50:cb:84:2f:6d:bb:10:
                    8e:32:36:d5:dd:35:ba:6d:90:17:11:e1:a7:5c:eb:
                    2e:df:74:c3:34:2e:b6:c5:8a:39:97:ee:20:27:bb:
                    26:a0:60:63:b6:ad:73:aa:75:6f:0c:1d:7c:2c:df:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.108.0/24
                IPv6:
                  2803:d9d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274158

    Signature Algorithm: sha256WithRSAEncryption
         25:55:90:b1:2a:e6:60:86:b6:f6:5a:6c:92:49:2a:00:99:7c:
         cc:c2:0a:72:d8:ad:f6:0d:ad:4a:59:93:9e:b6:70:aa:ed:3e:
         ff:fe:99:64:59:cd:b0:40:f9:e0:ef:8f:9d:18:9d:87:a8:1b:
         08:fe:01:42:d9:43:05:77:ea:b0:1f:cb:97:ec:9b:4a:9f:3f:
         44:1c:1c:86:f0:29:43:1d:87:e7:bb:86:5d:3a:b6:0b:00:e5:
         e0:62:60:ae:80:20:f3:71:3a:a3:46:f0:9f:ff:dc:4a:81:d3:
         31:2d:b3:c8:fc:c6:ed:c4:de:b1:bd:be:da:19:4b:e2:54:e8:
         5e:d1:4d:05:30:78:3c:67:e4:b4:44:c2:7a:80:4b:d8:42:f8:
         73:bc:3c:a6:d6:da:32:b7:b8:0a:36:68:34:5a:f8:80:59:da:
         22:ab:5b:f5:74:49:4d:52:4c:a7:61:f2:99:3f:16:bf:f6:bd:
         df:5c:63:38:cd:55:3d:70:a4:85:28:e4:9e:0b:15:04:83:18:
         73:9b:62:d9:d3:e0:62:3e:14:a2:71:05:e5:ce:08:e7:6e:0b:
         ce:48:a3:62:96:91:07:ea:cd:67:43:ae:31:ab:8c:45:fc:d4:
         4b:21:3d:ce:9d:b9:94:26:8a:aa:38:5c:db:9e:cb:11:82:71:
         7a:0b:46:ea
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUFcmc+O2FzBo5SKW8G2CRH56lFiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgwNjA3MjdaFw0yNzAxMjcwNjEyMjdaMDMxMTAvBgNV
BAMTKEFGRkMzRUJGQzQ0NEU2MDI1QzgzOTYxOEMzQzgxQ0M4OTk2NTk5QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8dK87Sxz3qfna2Te24d85DuQ
sku78ub4+hRCof4PRe+Kr9rGbAxCfMEJhW04dsLy1/QsnRPF3F0QANNY+bn/cNjI
LccsEyATdIDY0vSur4JiKnenN7ygAOYW5BJZ4YxDhrxLXRmOyqD5uwBtUypn/6cq
06viKsO/UmSd5QR+RKEWgtNjrAYyPDOmiWJMI38UiPlD0jZ6zcgPYmvZ50MV5nQA
Mm3cVlo9sxGjLxSgxbgtwD7rZh+a5Lf0Mm0orI/IsmFrZrOD+uEAUMuEL227EI4y
NtXdNbptkBcR4adc6y7fdMM0LrbFijmX7iAnuyagYGO2rXOqdW8MHXws3wFXAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv/D6/xETmAlyD
lhjDyBzImWWZojAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlF
MkQ5OEQ0Q0M4MEM0RUVDRjFDMjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgwQzRFRUNGMUMy
OTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4
QzNDODFDQzg5OTY1OTlBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyCFsMA0EAgAC
MAcDBQAoA9nQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQu7jANBgkqhkiG9w0B
AQsFAAOCAQEAJVWQsSrmYIa29lpskkkqAJl8zMIKctit9g2tSlmTnrZwqu0+//6Z
ZFnNsED54O+PnRidh6gbCP4BQtlDBXfqsB/Ll+ybSp8/RBwchvApQx2H57uGXTq2
CwDl4GJgroAg83E6o0bwn//cSoHTMS2zyPzG7cTesb2+2hlL4lToXtFNBTB4PGfk
tETCeoBL2EL4c7w8ptbaMre4CjZoNFr4gFnaIqtb9XRJTVJMp2HymT8Wv/a931xj
OM1VPXCkhSjkngsVBIMYc5ti2dPgYj4UonEF5c4I524LzkijYpaRB+rNZ0OuMauM
RfzUSyE9zp25lCaKqjhc257LEYJxegtG6g==
-----END CERTIFICATE-----