This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
File:                     D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer (raw, json)
Hash identifier:          1YdB+gF3OoaB+w6pQ9Zu+DwFzPV4SKFkoHzuD4gHp9w=
Subject key identifier:   D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4BF6FEB8A448F1735BBCC21D30EDDF6A41E89BDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 17:50:52 +0000
Certificate not after:    Tue 26 Jan 2027 17:55:52 +0000
Subordinate resources:    AS: 267920
                          IP: 45.179.192.0/22
                          IP: 2803:2e60::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f6:fe:b8:a4:48:f1:73:5b:bc:c2:1d:30:ed:df:6a:41:e8:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 17:50:52 2026 GMT
            Not After : Jan 26 17:55:52 2027 GMT
        Subject: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:6b:0c:8a:37:6d:29:64:bf:3d:61:ef:cf:
                    17:9e:af:8d:b0:80:8a:76:f7:fc:1d:31:d4:fd:fc:
                    1e:40:3d:2c:75:8b:26:28:af:56:08:bb:ef:48:22:
                    bb:47:e6:12:3e:b3:b0:ce:01:09:38:6e:a3:e2:70:
                    50:95:7e:7c:13:35:c6:0e:38:b3:1c:f2:c6:54:0e:
                    67:fe:a3:19:6b:92:52:79:0f:51:7f:b6:3e:83:92:
                    07:d1:53:3b:51:3f:12:41:86:83:e3:c7:90:37:0e:
                    38:81:4a:f5:32:e2:6a:13:f8:b5:8d:17:c0:f0:0e:
                    27:8e:a1:61:ff:b1:ef:a0:3f:44:55:10:b5:fc:82:
                    9a:8b:13:5c:ff:e0:6c:20:e5:1f:db:e8:b7:fb:cf:
                    54:67:41:48:65:98:1c:a8:21:a9:88:2a:0e:34:91:
                    b7:7f:5d:bc:08:cc:57:ec:74:5f:1d:77:07:c9:bf:
                    11:7c:a8:db:0d:1d:49:68:25:5c:fa:f1:62:38:5e:
                    ac:6f:a8:8e:e5:8c:90:d4:5d:81:f5:40:98:ba:ce:
                    86:a6:da:7a:a3:70:22:b4:23:6f:dd:dc:c7:ba:0b:
                    a6:ec:0e:b9:49:d5:5b:bf:b9:47:a5:92:5d:13:2d:
                    f7:5b:c3:70:06:49:63:97:25:9d:a4:53:6a:a1:c6:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.192.0/22
                IPv6:
                  2803:2e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267920

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:fc:da:2b:f4:c3:f9:ed:d0:59:03:03:2f:73:1f:8c:f1:
         3e:9f:96:15:2d:79:b4:ca:f2:3a:fd:80:73:73:30:0b:89:d9:
         b7:96:fd:eb:de:78:24:79:69:21:a4:ba:49:a3:48:fb:2d:bb:
         06:06:a3:c3:9d:f1:80:5e:eb:6d:96:99:63:02:d2:37:4c:d6:
         6f:2d:7d:7b:97:93:b4:0f:e0:1f:2f:67:6e:08:73:8a:25:5c:
         85:90:2e:21:7b:29:10:12:6e:0a:3a:d7:1f:01:0d:f5:87:78:
         f5:bc:20:14:47:61:69:03:85:92:53:d4:18:55:5b:e1:2f:b7:
         0a:a5:30:b6:d7:57:96:a1:8e:37:4a:7e:bd:d6:26:d3:8f:57:
         25:43:85:1e:3c:05:c4:b1:2e:06:56:ec:70:b8:eb:53:1d:21:
         2e:c3:b9:4e:56:ad:ed:4a:18:33:e6:88:fd:d2:a1:0f:91:92:
         48:11:43:18:b5:47:d5:5a:00:19:69:46:7f:46:4e:06:38:a1:
         38:23:be:17:e3:f8:48:ca:fb:a6:ae:e9:76:c0:b0:18:97:a5:
         ee:9a:80:05:93:bb:02:be:ab:1f:23:d1:e2:3e:ff:c8:a5:bf:
         16:96:14:3a:62:f1:a9:e6:d7:a8:0c:d2:12:99:30:39:fe:01:
         54:55:19:35
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUS/b+uKRI8XNbvMIdMO3fakHom9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTJaFw0yNzAxMjYxNzU1NTJaMDMxMTAvBgNV
BAMTKEQ4Qzk0NzdDQTVCRjExNTVBQkY1MTcwNzk3MEVBODFDRkU0NEVBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GGsMijdtKWS/PWHvzxeer42w
gIp29/wdMdT9/B5APSx1iyYor1YIu+9IIrtH5hI+s7DOAQk4bqPicFCVfnwTNcYO
OLMc8sZUDmf+oxlrklJ5D1F/tj6DkgfRUztRPxJBhoPjx5A3DjiBSvUy4moT+LWN
F8DwDieOoWH/se+gP0RVELX8gpqLE1z/4Gwg5R/b6Lf7z1RnQUhlmByoIamIKg40
kbd/XbwIzFfsdF8ddwfJvxF8qNsNHUloJVz68WI4XqxvqI7ljJDUXYH1QJi6zoam
2nqjcCK0I2/d3Me6C6bsDrlJ1Vu/uUelkl0TLfdbw3AGSWOXJZ2kU2qhxnN1AgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYyUd8pb8RVav1
FweXDqgc/kTqiDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURB
QzlCMkJBRDhCRUE4MUUyRjhDNDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJFQTgxRTJGOEM0
MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3
OTcwRUE4MUNGRTQ0RUE4OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbPAMA0EAgAC
MAcDBQAoAy5gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWkDANBgkqhkiG9w0B
AQsFAAOCAQEAixb82iv0w/nt0FkDAy9zH4zxPp+WFS15tMryOv2Ac3MwC4nZt5b9
6954JHlpIaS6SaNI+y27Bgajw53xgF7rbZaZYwLSN0zWby19e5eTtA/gHy9nbghz
iiVchZAuIXspEBJuCjrXHwEN9Yd49bwgFEdhaQOFklPUGFVb4S+3CqUwttdXlqGO
N0p+vdYm049XJUOFHjwFxLEuBlbscLjrUx0hLsO5Tlat7UoYM+aI/dKhD5GSSBFD
GLVH1VoAGWlGf0ZOBjihOCO+F+P4SMr7pq7pdsCwGJel7pqABZO7Ar6rHyPR4j7/
yKW/FpYUOmLxqebXqAzSEpkwOf4BVFUZNQ==
-----END CERTIFICATE-----