This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
File:                     FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer (raw, json)
Hash identifier:          j5yp83v/xZtK9WPG0RY8hvNRu8zQb3LhcEgWajg7lvA=
Subject key identifier:   FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3429C47DEDF2257C3A05B3B0AD4C041833332426
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 21:39:10 +0000
Certificate not after:    Tue 26 Jan 2027 21:44:10 +0000
Subordinate resources:    AS: 28394
                          IP: 138.255.60.0/22
                          IP: 170.245.188.0/22
                          IP: 200.0.90.0 -- 200.0.93.255
                          IP: 2806:217::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:c4:7d:ed:f2:25:7c:3a:05:b3:b0:ad:4c:04:18:33:33:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 21:39:10 2026 GMT
            Not After : Jan 26 21:44:10 2027 GMT
        Subject: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:6a:34:12:e2:23:8d:98:8e:28:b4:f7:7a:
                    38:81:fb:06:3b:de:79:cf:ea:0e:6a:b5:7d:68:04:
                    91:a2:9e:5f:7c:39:5d:5f:c7:f3:b1:68:5d:33:0f:
                    98:ff:74:af:68:75:d9:e8:1c:09:9b:9f:d2:06:f2:
                    bb:52:28:4b:9f:dc:cc:5b:02:f3:b4:74:4b:0f:b7:
                    63:c1:4c:b6:a6:a0:0f:46:46:91:83:80:2d:21:1e:
                    d8:9d:b2:c1:5a:46:12:ec:38:df:6f:61:f9:79:a5:
                    d4:76:a0:1d:fd:e5:64:98:e9:32:68:06:fd:3f:20:
                    b9:23:67:b9:78:be:2b:9c:86:17:18:8c:8b:38:28:
                    8f:5b:1e:3f:72:71:9a:e1:d5:cc:f9:6a:9d:f9:d3:
                    14:b4:83:c6:d2:93:1a:a8:a6:ec:90:89:31:75:4d:
                    20:7a:6b:78:37:bb:38:bb:3d:84:37:16:9a:67:c9:
                    b8:db:3b:98:b9:60:89:8b:20:5f:11:e5:df:7d:02:
                    a3:b6:7b:2c:a4:52:58:ab:e2:44:b7:4b:56:bc:e1:
                    93:e1:01:f2:f5:42:e5:5e:2a:4b:59:b1:90:bd:a2:
                    87:69:e5:54:b4:99:71:16:e9:df:30:de:0e:3d:9b:
                    f9:cc:0a:b8:90:61:3a:7c:e8:9a:d8:eb:76:e1:41:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.60.0/22
                  170.245.188.0/22
                  200.0.90.0-200.0.93.255
                IPv6:
                  2806:217::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28394

    Signature Algorithm: sha256WithRSAEncryption
         48:69:ef:ad:33:b1:15:89:c4:7a:1c:76:fb:6f:ad:47:ab:8d:
         fc:c2:cf:a7:45:02:3c:d1:ed:77:b3:16:74:d3:54:6c:fe:3d:
         a0:f8:6e:6a:0b:b4:ae:3c:ae:b6:8c:25:35:20:f7:bd:66:10:
         3e:c0:6c:20:f3:62:ff:d3:f2:db:c9:ae:da:b5:56:01:21:fb:
         9b:58:e4:11:76:94:2a:4d:02:48:23:4c:68:f2:dd:d8:bf:3d:
         d0:13:f9:cb:eb:ab:63:83:d9:12:e9:0c:1b:43:16:6b:07:88:
         95:8c:ab:04:37:63:7f:bb:ed:7c:37:fb:3f:49:08:33:e2:ee:
         8d:fb:52:ce:ec:b4:38:eb:99:a6:1b:5c:fc:4c:28:4e:a8:24:
         93:84:a0:87:81:d9:43:40:54:8f:eb:c4:fb:ee:df:0c:d6:63:
         d6:c7:9b:5a:56:83:12:1f:06:18:13:4f:2e:c4:18:d8:54:12:
         5c:db:cd:5e:9d:0d:44:29:84:9c:0f:42:89:9d:5f:f3:15:27:
         1f:20:14:3d:b4:6f:a1:7c:f2:95:e9:01:60:08:c4:71:ca:6f:
         1d:ef:32:7b:3c:6a:a9:68:93:38:79:e1:48:b1:83:37:dc:2c:
         86:5e:ca:6c:3e:10:8d:6d:dc:06:a3:59:10:7d:d7:c8:9f:ba:
         c1:77:bc:41
-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIUNCnEfe3yJXw6BbOwrUwEGDMzJCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjcyMTM5MTBaFw0yNzAxMjYyMTQ0MTBaMDMxMTAvBgNV
BAMTKEZGNTkxQTEzMzE2MzQ2QTJCQ0VGMDdGNkRGOEQ0NEREMDI1MEY4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IGo0EuIjjZiOKLT3ejiB+wY7
3nnP6g5qtX1oBJGinl98OV1fx/OxaF0zD5j/dK9oddnoHAmbn9IG8rtSKEuf3Mxb
AvO0dEsPt2PBTLamoA9GRpGDgC0hHtidssFaRhLsON9vYfl5pdR2oB395WSY6TJo
Bv0/ILkjZ7l4viuchhcYjIs4KI9bHj9ycZrh1cz5ap350xS0g8bSkxqopuyQiTF1
TSB6a3g3uzi7PYQ3FppnybjbO5i5YImLIF8R5d99AqO2eyykUlir4kS3S1a84ZPh
AfL1QuVeKktZsZC9oodp5VS0mXEW6d8w3g49m/nMCriQYTp86JrY63bhQXSNAgMB
AAGjggPCMIIDvjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/WRoTMWNGorzv
B/bfjUTdAlD4QTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEM5NTJEQzBBQ0ZGRjkwOEM2RkExNEM4
QTdBQUU4QjYzMzFCMzBEQUUwNDEwRjE0OEU5NENGMUI0N0E4MzJEOS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80Qzk1MkRDMEFDRkZGOTA4QzZGQTE0QzhBN0FBRThCNjMzMUIzMERBRTA0
MTBGMTQ4RTk0Q0YxQjQ3QTgzMkQ5LzAvRkY1OTFBMTMzMTYzNDZBMkJDRUYwN0Y2
REY4RDQ0REQwMjUwRjg0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCiv88AwQCqvW8
MAwDBAHIAFoDBAHIAFwwDQQCAAIwBwMFACgGAhcwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICbuowDQYJKoZIhvcNAQELBQADggEBAEhp760zsRWJxHocdvtvrUerjfzC
z6dFAjzR7XezFnTTVGz+PaD4bmoLtK48rraMJTUg971mED7AbCDzYv/T8tvJrtq1
VgEh+5tY5BF2lCpNAkgjTGjy3di/PdAT+cvrq2OD2RLpDBtDFmsHiJWMqwQ3Y3+7
7Xw3+z9JCDPi7o37Us7stDjrmaYbXPxMKE6oJJOEoIeB2UNAVI/rxPvu3wzWY9bH
m1pWgxIfBhgTTy7EGNhUElzbzV6dDUQphJwPQomdX/MVJx8gFD20b6F88pXpAWAI
xHHKbx3vMns8aqlokzh54UixgzfcLIZeymw+EI1t3AajWRB918ifusF3vEE=
-----END CERTIFICATE-----