This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
File:                     A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer (raw, json)
Hash identifier:          SxdgtLItjxr+QrUwD2EAaj0Vl0yqXxRKEjWbGD7f4Pg=
Subject key identifier:   A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       4BBC6CC7C6CEBC7E754AEFCB809803B295AD213D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 11:21:22 +0000
Certificate not after:    Tue 19 Jan 2027 11:26:22 +0000
Subordinate resources:    IP: 2801:15a::/40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:6c:c7:c6:ce:bc:7e:75:4a:ef:cb:80:98:03:b2:95:ad:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 11:21:22 2026 GMT
            Not After : Jan 19 11:26:22 2027 GMT
        Subject: CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:c4:6f:26:8b:ce:23:70:b9:d5:9f:c6:61:
                    5a:5e:6a:d1:30:75:ab:d3:58:cd:cb:0a:55:46:1b:
                    a2:c5:1f:40:c0:d0:0d:c7:18:3b:41:58:95:9d:5a:
                    73:b7:fa:df:e4:4e:8d:0a:f6:03:a2:63:4c:a5:03:
                    a5:72:3e:49:14:2c:2e:3b:27:c9:5b:15:cf:71:e0:
                    45:a2:50:2c:71:9f:19:9d:2d:74:bc:e0:43:aa:87:
                    e3:f7:ca:a1:94:b5:8e:03:e6:f5:d6:16:44:8a:7e:
                    7b:f2:7b:a5:56:06:09:ef:30:34:91:e3:47:fe:0e:
                    70:90:a1:90:b7:67:31:db:93:b2:e2:c9:fa:09:82:
                    bf:04:5d:3b:be:2d:61:19:b4:c3:14:88:13:88:b2:
                    b7:43:04:95:d7:5f:49:33:37:b1:ce:e3:e6:4d:f9:
                    43:63:14:07:bb:be:72:af:97:4b:03:f2:71:de:ac:
                    00:ed:e5:7c:ca:f0:49:f1:df:18:60:cf:ab:9d:5c:
                    7a:8f:89:4a:f2:4e:df:b9:48:da:8e:ce:b8:4e:57:
                    0f:92:fe:bc:5d:71:3b:9a:df:5f:c5:fb:c6:3f:e2:
                    02:c7:b7:f3:4d:57:dc:76:8f:69:12:47:22:68:c0:
                    e1:89:88:21:a4:c3:af:df:fa:b6:53:e3:11:66:9d:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15a::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:de:8b:38:0e:e2:e9:ee:13:2a:13:fb:a7:c9:cd:02:3b:
         dd:e9:5c:46:39:63:b7:e5:96:1e:f3:6b:fa:4b:f3:05:90:e6:
         fb:19:6f:3c:37:41:3a:7a:f8:9f:76:4f:d8:4c:83:f2:45:26:
         4d:99:73:a7:38:29:f5:94:f0:3a:86:f6:68:dc:99:b0:70:2c:
         45:fd:37:c4:77:d0:e8:69:52:13:34:e0:a4:60:5b:73:b0:c5:
         4f:fc:cb:a8:cb:85:94:13:32:c4:20:90:d3:d3:b5:3c:c8:d0:
         c4:d1:ad:0f:55:7c:1d:7f:56:09:a5:1b:57:08:bf:51:33:ce:
         02:74:2c:a8:5d:44:f9:c0:c6:51:66:21:ae:bc:90:3c:dd:ce:
         97:8c:80:f3:dc:2f:d0:c6:1c:1d:be:f5:54:0f:95:2f:27:c7:
         b3:33:87:02:1f:04:52:d8:8d:69:49:3e:b7:b9:31:56:00:f5:
         da:74:29:98:15:90:08:29:48:44:51:ec:ce:e3:bb:70:0b:68:
         d3:0c:1c:af:18:6d:82:fc:cf:d6:27:6e:b6:9f:90:13:a1:24:
         24:53:22:53:d3:f1:f3:9a:10:46:f3:be:64:c8:66:78:4a:2d:
         45:ee:12:3a:7f:da:77:cd:da:23:c0:52:9d:82:cc:d0:50:87:
         13:75:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:39 2026 by rpki-client