This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
File:                     8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer (raw, json)
Hash identifier:          VBCrP2X9sEFTm0JpqZju/lINmzUZHC8LJyXS8Exr++k=
Subject key identifier:   88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       15538B5E47E507B2D28A5EE7536B7C8B5B016A57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 10 Jan 2026 22:24:12 +0000
Certificate not after:    Sat 09 Jan 2027 22:29:12 +0000
Subordinate resources:    IP: 45.71.7.0/24
                          IP: 2801:1a:b000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:53:8b:5e:47:e5:07:b2:d2:8a:5e:e7:53:6b:7c:8b:5b:01:6a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 10 22:24:12 2026 GMT
            Not After : Jan  9 22:29:12 2027 GMT
        Subject: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:6c:fd:a2:6c:0b:82:94:49:c0:5b:c1:44:
                    91:95:28:2a:64:2f:17:c6:5d:8a:f1:94:85:b4:f1:
                    f7:e3:60:d4:fa:30:e4:e8:da:65:08:43:14:93:59:
                    9e:51:f0:5c:4d:ab:76:bb:6e:d3:c0:5d:7c:8b:90:
                    a9:72:27:2e:16:0f:29:d7:66:b3:ad:36:1c:2d:46:
                    78:4a:a7:0b:b0:b7:e0:b3:65:d7:c5:ea:b8:ca:8e:
                    bd:af:11:e4:78:bb:ac:21:3e:8d:f5:3a:5c:b6:4e:
                    f4:aa:8e:1c:ee:e5:2f:4e:eb:09:db:08:83:0a:c7:
                    91:c2:58:03:7a:d6:11:14:9d:88:d6:48:42:6c:28:
                    b9:57:bb:99:55:65:d4:52:af:16:1d:27:00:f6:b2:
                    bb:2a:6f:63:22:a3:66:c4:a2:2e:8a:9c:57:30:50:
                    5f:5b:ec:2d:63:25:6a:4d:db:8f:b0:80:00:19:37:
                    82:97:a9:c7:06:c6:76:92:fc:d1:8a:af:6b:58:9d:
                    8d:19:4c:90:31:8b:c5:45:db:85:29:aa:ea:05:86:
                    96:3f:5b:54:11:3b:d8:73:9b:98:f1:17:40:66:0b:
                    03:ea:2a:b6:cf:97:32:47:57:01:2d:3b:f2:17:8d:
                    fd:01:1e:01:d7:bb:cf:65:14:9f:26:fd:9a:e0:09:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.7.0/24
                IPv6:
                  2801:1a:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:4a:07:88:62:be:03:f7:48:25:cb:e3:e3:34:f2:30:7f:
         c1:ad:6d:ee:68:18:14:0e:c4:9a:85:df:15:81:c8:e4:e1:de:
         27:d0:b8:bd:4b:bb:c3:6d:d6:3b:dd:78:ae:0e:24:b7:76:48:
         7d:00:0b:3f:cd:df:28:69:d8:f1:78:40:a2:52:4a:71:b2:b6:
         09:9f:eb:52:3c:34:a4:86:3d:43:b2:3c:ea:e3:60:c7:59:27:
         99:d9:2c:b9:9a:66:94:79:7c:ce:15:6a:b8:c7:aa:c2:18:31:
         e4:05:14:97:1d:ab:5f:4c:e4:8b:67:49:a5:9d:6f:7d:cb:8d:
         08:ac:6e:62:2c:f9:a0:7e:65:a5:50:e4:90:0c:10:72:58:0d:
         49:f2:39:d8:56:31:be:32:06:47:a6:6a:78:9b:6e:55:4b:8b:
         9b:2d:6b:56:ec:e0:32:6a:80:15:76:0d:69:43:a9:a7:bd:71:
         eb:1c:8c:1b:8d:52:7a:80:8e:c3:2c:1c:04:40:14:52:64:95:
         d3:56:2a:56:4f:17:c8:12:d8:e9:c5:bd:92:23:51:66:2f:2f:
         85:bf:80:f9:87:6d:e7:3d:16:92:54:6d:c7:ef:87:4e:5d:b8:
         2f:1c:a0:a3:78:f6:15:ec:1c:fc:61:a9:07:bd:d8:69:05:e2:
         20:90:c9:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:57:24 2026 by rpki-client