This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
File:                     CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer (raw, json)
Hash identifier:          /sgvifH8Wptna4zv3airIrP+JPLPVcU/qEloRVI7Bhg=
Subject key identifier:   CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       5A5146E49A4E7ECA817AFC605BDDDA731CB68DF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 07:40:42 +0000
Certificate not after:    Wed 27 Jan 2027 07:45:42 +0000
Subordinate resources:    AS: 264797
                          IP: 206.221.80.0/20
                          IP: 2803:7e80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Feb 2026 03:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:51:46:e4:9a:4e:7e:ca:81:7a:fc:60:5b:dd:da:73:1c:b6:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 07:40:42 2026 GMT
            Not After : Jan 27 07:45:42 2027 GMT
        Subject: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f2:19:d4:30:1e:e7:9a:de:bc:b4:7a:ab:68:
                    e0:c2:7d:b0:9a:b4:24:b4:41:ae:08:d2:06:41:ca:
                    45:9d:28:3a:97:61:45:62:97:c4:4d:fc:6d:04:78:
                    c6:3e:3e:d7:c9:20:f6:16:99:97:1a:c5:4b:48:8d:
                    ec:5f:43:a0:0a:e2:78:67:ae:4d:43:d2:14:03:9a:
                    4c:41:5f:c8:ce:92:e4:62:cd:af:69:d3:bb:5c:2d:
                    35:4f:97:2e:4d:a2:48:83:b1:b6:6c:9c:dd:80:65:
                    3e:b2:9a:08:85:34:dd:a9:f3:8d:fe:bd:08:1d:0f:
                    d9:e6:51:08:41:4a:1a:a5:f9:c9:46:40:ed:83:34:
                    34:75:c7:ea:40:4e:18:11:9d:22:d2:aa:ef:e0:26:
                    c0:2c:b3:44:1c:f9:e2:d2:d5:38:ff:b6:d6:dd:35:
                    d4:a7:62:a7:fb:c7:5e:fc:f5:9b:13:13:82:5c:80:
                    d7:65:ea:59:41:20:72:cb:bc:67:2c:30:26:1f:dd:
                    bb:15:8f:0b:cd:40:11:3e:16:13:00:df:c9:fc:2e:
                    f8:b3:3b:4d:05:3c:35:a7:94:c3:f0:8b:92:b3:56:
                    80:eb:e1:93:fa:63:3a:77:ee:09:29:48:40:e9:9f:
                    82:b4:dc:15:9a:18:16:ca:d1:1c:be:5d:4e:99:19:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.80.0/20
                IPv6:
                  2803:7e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264797

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:b2:61:c2:b8:7a:45:a9:27:81:da:f1:07:a8:2a:81:d3:
         ff:0f:bd:12:ce:5e:07:65:f7:be:d9:8c:76:38:ad:95:70:87:
         1b:d3:11:34:d7:5c:b2:ef:bd:dd:a3:24:97:bc:e1:ea:3c:1f:
         d7:99:41:78:17:af:75:b3:f6:7f:8c:8a:3d:3e:86:73:f0:82:
         2f:4b:2c:44:53:33:86:43:e7:6c:42:7c:4f:c2:f3:0d:c5:b9:
         5f:f0:aa:c3:e0:bb:ad:8b:38:aa:be:83:71:ef:b7:ba:c6:0f:
         4d:58:af:3a:e6:c4:95:2b:24:c5:43:9f:37:f8:14:65:98:03:
         e6:a1:c1:99:63:8c:3c:c8:be:d7:71:4d:b4:55:70:b2:6f:7a:
         94:1e:c1:9f:ec:4e:e5:0a:bc:9f:b9:78:db:24:00:e9:ef:6a:
         bf:1c:be:ec:81:0d:26:a9:68:ee:c4:22:22:4c:e0:63:27:c3:
         35:25:58:9f:d2:a9:7b:67:f3:bd:89:f1:76:91:18:9b:a1:ef:
         7e:85:6c:90:a7:45:5b:b9:3f:af:3f:93:b3:7d:f2:cf:ae:87:
         fb:5e:10:ad:ef:3e:d3:9e:93:16:3a:60:54:80:77:97:5d:6a:
         3d:ff:a4:0b:c9:57:94:87:43:04:0e:49:b6:31:c7:06:31:29:
         8c:db:f0:b0
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUWlFG5JpOfsqBevxgW93acxy2jfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgwNzQwNDJaFw0yNzAxMjcwNzQ1NDJaMDMxMTAvBgNV
BAMTKENEQjkzNEFBN0IyMUVFODI2MkE3Rjc0NUJDQzk0QkQ0QzQ3OUZBRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv8hnUMB7nmt68tHqraODCfbCa
tCS0Qa4I0gZBykWdKDqXYUVil8RN/G0EeMY+PtfJIPYWmZcaxUtIjexfQ6AK4nhn
rk1D0hQDmkxBX8jOkuRiza9p07tcLTVPly5NokiDsbZsnN2AZT6ymgiFNN2p843+
vQgdD9nmUQhBShql+clGQO2DNDR1x+pAThgRnSLSqu/gJsAss0Qc+eLS1Tj/ttbd
NdSnYqf7x1789ZsTE4JcgNdl6llBIHLLvGcsMCYf3bsVjwvNQBE+FhMA38n8Lviz
O00FPDWnlMPwi5KzVoDr4ZP6Yzp37gkpSEDpn4K03BWaGBbK0Ry+XU6ZGd0VAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNuTSqeyHugmKn
90W8yUvUxHn60zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkZFNjFFREUwNzU3RjlGMTI5MzVBNUYz
QkUyNDgwNzlCN0ZFNjMyNzJGODU1MTlEMDE1Q0IwN0VENTIzNDYwOC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8yRkU2MUVERTA3NTdGOUYxMjkzNUE1RjNCRTI0ODA3OUI3RkU2MzI3MkY4
NTUxOUQwMTVDQjA3RUQ1MjM0NjA4LzAvQ0RCOTM0QUE3QjIxRUU4MjYyQTdGNzQ1
QkNDOTRCRDRDNDc5RkFEMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEzt1QMA0EAgAC
MAcDBQAoA36AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKXTANBgkqhkiG9w0B
AQsFAAOCAQEAOfmyYcK4ekWpJ4Ha8QeoKoHT/w+9Es5eB2X3vtmMdjitlXCHG9MR
NNdcsu+93aMkl7zh6jwf15lBeBevdbP2f4yKPT6Gc/CCL0ssRFMzhkPnbEJ8T8Lz
DcW5X/Cqw+C7rYs4qr6Dce+3usYPTVivOubElSskxUOfN/gUZZgD5qHBmWOMPMi+
13FNtFVwsm96lB7Bn+xO5Qq8n7l42yQA6e9qvxy+7IENJqlo7sQiIkzgYyfDNSVY
n9Kpe2fzvYnxdpEYm6HvfoVskKdFW7k/rz+Ts33yz66H+14Qre8+056TFjpgVIB3
l11qPf+kC8lXlIdDBA5JtjHHBjEpjNvwsA==
-----END CERTIFICATE-----