This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer
File:                     DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer (raw, json)
Hash identifier:          DirClV2PDfdGG+ZRSo6Hj1bpad3CMS46VangXt/CvJk=
Subject key identifier:   DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4437DF8491667C1BD48629F69EB2270C19B256BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 18:13:48 +0000
Certificate not after:    Wed 27 Jan 2027 18:18:48 +0000
Subordinate resources:    IP: 45.232.92.0/22
                          IP: 2803:3b20::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:37:df:84:91:66:7c:1b:d4:86:29:f6:9e:b2:27:0c:19:b2:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 18:13:48 2026 GMT
            Not After : Jan 27 18:18:48 2027 GMT
        Subject: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:c5:22:2b:45:59:61:84:e3:cf:86:eb:07:
                    4c:8b:5d:59:77:c0:03:4c:92:5a:7f:b2:8a:85:c0:
                    8e:4e:7d:1e:fb:c3:6c:66:9b:22:27:c0:d8:31:42:
                    22:0b:aa:e6:f0:1d:5d:ad:d2:73:82:7e:22:58:e2:
                    c3:81:bb:f1:0c:49:a5:2c:bd:40:79:16:4f:78:f2:
                    52:d0:bd:71:1f:b6:08:95:5c:23:39:50:d2:2d:81:
                    79:59:c8:4b:64:f5:b5:a4:17:62:71:17:a8:42:08:
                    40:db:3b:63:95:32:57:34:ae:e5:c9:eb:96:8b:7d:
                    f7:1a:8d:fc:3a:77:c0:c2:35:f6:b6:6e:fa:15:81:
                    1d:0a:6b:fa:e5:ca:5f:3c:ff:70:b4:b8:02:66:5e:
                    bc:8d:ef:e2:26:90:ed:65:43:09:c6:ad:fb:d1:5a:
                    b1:d0:6c:d7:b3:50:e5:04:aa:3a:8e:37:a3:4f:7a:
                    3e:27:04:1c:49:1b:9c:96:a4:db:b0:83:73:74:0b:
                    71:d2:e6:b3:af:a8:64:63:d2:d4:71:79:ed:a9:d3:
                    ba:a8:70:e9:28:1a:37:93:68:2c:ef:a5:ad:ca:ff:
                    9c:9d:69:e2:85:1d:06:56:a3:13:af:aa:c2:d3:a3:
                    b8:53:eb:b6:1e:6f:b2:55:b4:7e:09:a7:2d:a7:7f:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.92.0/22
                IPv6:
                  2803:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:de:a6:6e:22:86:3d:a5:6c:b0:0d:3d:72:e4:25:fd:01:
         2d:17:38:6a:b6:98:bc:00:f0:d8:32:49:4f:42:dc:5e:e8:2d:
         7e:1b:72:c2:d6:9a:7b:d6:c6:cb:da:dc:fd:e3:9b:57:d7:44:
         33:f9:a3:3b:50:d2:02:ca:18:a6:c6:88:62:95:89:0f:9e:c2:
         19:2b:4f:68:6c:4e:a3:43:17:bc:76:3f:c7:40:28:00:10:6a:
         2c:bb:53:b3:36:b9:06:b5:6b:cf:27:f8:32:9b:27:e3:07:57:
         9a:78:30:f8:4f:53:36:80:65:e4:c4:97:16:4a:93:86:be:f9:
         d5:a1:63:f9:2f:0b:3d:aa:ba:b1:43:b8:49:3c:7e:92:2c:32:
         ee:e7:ae:42:60:05:bd:be:85:8f:d7:af:2e:b6:12:1a:78:72:
         c6:fe:48:98:68:0b:de:f8:cb:5e:8d:11:d9:8b:59:c7:65:21:
         4f:b3:18:74:7e:15:cb:a6:36:05:26:bf:4d:d4:db:fb:e3:3a:
         0a:57:7a:41:7d:77:7b:fa:1d:ac:41:70:cd:ce:5d:e7:5b:8e:
         bc:37:d5:15:77:f7:a7:55:77:17:75:cc:f1:91:d8:f0:6b:8e:
         16:6d:88:a9:ca:50:ee:ae:2f:1c:17:d4:30:01:17:71:47:5f:
         ba:3e:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----