This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
File:                     DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer (raw, json)
Hash identifier:          1H6F2SaM3fy/L+AD0guuX+UbiESuNoepZJFLQk8KCvM=
Subject key identifier:   DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       02D512677FAB0B560285217E14891DBDB2781B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 08:59:05 +0000
Certificate not after:    Wed 27 Jan 2027 09:04:05 +0000
Subordinate resources:    AS: 27960
                          IP: 179.60.96.0/20
                          IP: 190.122.32.0/19
                          IP: 200.49.120.0/21
                          IP: 2803:d080::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d5:12:67:7f:ab:0b:56:02:85:21:7e:14:89:1d:bd:b2:78:1b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 08:59:05 2026 GMT
            Not After : Jan 27 09:04:05 2027 GMT
        Subject: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:35:07:b7:9f:c0:8c:f0:22:6d:04:65:ab:
                    0c:6a:af:1b:d6:04:36:ca:81:4a:5e:bc:ba:6d:aa:
                    26:1d:c7:26:50:6e:d2:ff:36:8c:42:b6:a7:6e:6c:
                    52:f1:26:99:3a:a4:24:3c:32:80:d8:26:b3:64:98:
                    ac:1f:07:30:40:35:6b:6f:0c:84:3b:60:d4:fd:ef:
                    6b:63:9d:9a:e4:dc:f7:e3:c5:fb:db:e9:6a:20:2d:
                    76:7d:87:86:2c:34:a9:b7:e7:e5:67:e4:40:ac:21:
                    ae:5e:35:d3:da:b0:45:e9:73:a5:95:1c:23:52:3e:
                    21:a6:12:75:42:a7:b8:ba:08:68:80:56:60:3a:75:
                    82:5e:82:a8:8e:23:e4:4d:cd:73:bd:53:6e:20:ae:
                    39:7a:d4:4e:0c:97:fd:6b:8b:6a:20:24:93:e8:6b:
                    e7:f0:23:40:f3:cc:84:63:53:23:53:4d:8c:33:7f:
                    5d:79:d6:cf:d1:8c:8a:6c:bf:aa:8f:e6:1c:e1:3c:
                    43:c9:5d:67:d7:2f:86:e4:a5:c8:80:34:6b:cc:82:
                    f8:3c:e3:fd:f7:59:2e:0e:42:6c:e9:04:94:07:af:
                    f6:27:29:e0:e1:cc:6f:af:ff:47:db:c8:13:16:6d:
                    31:40:6d:9c:9c:ae:c4:24:7c:cb:5c:d6:56:f4:22:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.96.0/20
                  190.122.32.0/19
                  200.49.120.0/21
                IPv6:
                  2803:d080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27960

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:71:85:76:0d:e7:bc:e0:f4:58:c7:88:06:4f:9d:8f:df:
         66:1f:e7:63:98:63:d5:11:9c:d4:7c:ab:83:23:f3:64:12:f5:
         ec:3d:85:d0:62:38:6f:c3:be:03:0d:2e:9f:79:e0:da:34:9c:
         f0:75:34:c6:00:03:2e:07:fd:f3:6c:69:3e:76:30:24:51:35:
         61:58:4f:02:c9:87:aa:e7:a0:9a:01:d9:0e:f2:68:4f:db:d3:
         ad:3a:d7:d9:37:0c:59:55:d9:0c:1d:b7:24:76:96:84:f1:10:
         cd:b0:8e:ac:0d:e6:67:fe:99:ea:b1:7d:fb:ac:a8:e0:c5:49:
         0d:e5:47:5f:f0:97:d4:82:b3:49:22:0a:f0:23:a4:ef:62:99:
         f7:ef:79:46:87:86:58:73:6a:be:f4:ae:a0:ca:7e:1e:e1:7d:
         f8:37:8f:a6:2d:74:27:ef:ac:77:37:c9:32:03:a7:4e:f9:b1:
         49:30:b9:8f:7f:75:93:a4:8a:28:3a:fc:62:80:7d:c7:63:f3:
         9e:a1:e7:9b:53:64:b8:aa:3c:b6:af:cf:98:6f:9f:a1:4b:c4:
         4f:41:12:8e:8f:cf:ba:95:ac:61:e8:a9:80:07:ce:4e:5c:b7:
         93:ed:ab:4b:5a:13:2b:f5:d5:61:bf:d0:ba:de:4b:d9:8b:7b:
         16:f3:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:11:38 2026 by rpki-client