This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
File:                     DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer (raw, json)
Hash identifier:          xfA6l2lPOLLjXAzcP5YIPKxidLmZbTBdTALo7nb89ZE=
Subject key identifier:   DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       072FC0C82550E1DECAE135A00F08F52C0993DE76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:14:47 +0000
Certificate not after:    Wed 27 Jan 2027 20:19:47 +0000
Subordinate resources:    AS: 267901
                          IP: 45.178.68.0/22
                          IP: 2803:5660::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2f:c0:c8:25:50:e1:de:ca:e1:35:a0:0f:08:f5:2c:09:93:de:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:14:47 2026 GMT
            Not After : Jan 27 20:19:47 2027 GMT
        Subject: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:f7:2c:19:80:3c:ba:53:4d:dd:a3:40:35:
                    f2:6e:6a:28:c3:0e:0f:41:45:7a:b9:1c:84:5c:e9:
                    d2:15:c6:02:69:39:57:1a:5f:71:48:ae:73:01:d9:
                    06:3a:18:1e:0e:6b:05:e1:43:a7:ba:dd:48:e9:51:
                    25:24:5c:49:72:73:86:ca:c7:da:c5:af:49:fc:6c:
                    08:f6:1f:92:bd:f4:fe:17:d1:9e:c6:bc:91:bd:3e:
                    f7:4d:c0:3a:96:de:65:25:e7:77:21:3e:94:b3:35:
                    36:03:c5:77:8a:60:01:3b:0e:ad:33:a0:30:5a:55:
                    0d:8e:6c:2d:1a:c3:1b:82:83:f7:c5:fe:f8:84:c1:
                    4b:4e:7c:f4:dd:5a:ca:7e:74:4f:59:21:0c:a9:11:
                    1b:2c:9f:40:9f:84:34:4f:13:19:ec:00:e7:95:bd:
                    b7:82:dc:1b:1e:10:e9:21:b0:32:68:e9:3c:29:af:
                    47:5e:46:fd:78:77:f7:6e:4b:33:e8:f9:f0:c8:a9:
                    c3:92:55:65:2d:64:17:c8:83:ba:9f:ce:33:b2:d7:
                    fe:56:cb:88:e6:c0:02:2a:2e:13:20:a5:fd:4c:40:
                    02:0a:07:c0:10:43:01:52:14:b9:fa:7f:e3:93:cf:
                    58:10:ba:9f:d3:1a:ff:59:29:b0:ef:5d:27:75:f0:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/22
                IPv6:
                  2803:5660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267901

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:67:a5:d0:b6:38:67:6d:2d:39:01:de:46:7e:3f:e6:b0:
         37:b0:d4:fa:55:a1:93:67:2c:6d:30:70:b1:b8:7a:6b:83:7c:
         7c:15:88:f5:54:a0:fe:6f:9b:36:a9:5d:f5:e7:44:e0:4f:32:
         83:77:29:57:90:ca:3a:2d:96:81:21:29:d0:7f:03:16:48:62:
         6d:6b:fe:39:75:7a:01:ac:9f:c4:bd:c0:15:26:15:b9:ae:b2:
         c7:6b:fc:dd:23:b0:c7:3b:37:22:19:30:fa:03:74:15:b7:d0:
         1a:f4:4e:29:c8:8d:f3:2f:33:8c:ef:dc:0f:aa:b8:14:8c:1d:
         b2:fa:c8:59:45:78:9d:4a:c4:7f:eb:37:72:03:5b:91:6e:37:
         4b:76:64:38:31:bd:20:d8:a9:3c:f6:fc:58:a3:b4:e6:ff:e4:
         82:03:20:50:47:fe:9c:16:cd:41:54:8f:41:11:80:fe:3c:2a:
         20:f7:dc:56:03:96:07:59:59:af:2f:ef:65:e3:7f:1a:14:d4:
         c3:ba:8f:2d:c9:a7:eb:f8:da:17:22:48:d8:78:30:ac:d3:9f:
         78:75:49:40:80:6e:f1:03:d9:92:01:33:3e:0f:81:00:47:00:
         c5:79:56:c5:3e:e5:55:92:e4:de:ad:67:78:60:27:1a:66:b3:
         6d:90:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:13:00 2026 by rpki-client