This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json) Hash identifier: YBUx+j8i8qrYGUhgWefIlClu+KCPZ6LpCl8gxm+xXWw= Subject key identifier: 12:1D:67:FE:6F:CA:1D:6C:92:34:DE:7D:7D:17:8D:42:B2:D5:E5:F6 Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8 Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8 Certificate serial: 019B3F11E01F02A77F87BC376444C5B1DC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft Manifest number: 0D51 Signing time: Sun 21 Dec 2025 04:01:34 +0000 Manifest this update: Sun 21 Dec 2025 04:01:34 +0000 Manifest next update: Mon 22 Dec 2025 04:01:34 +0000 Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: Tmuwqt06c+LhP1ATow6DUrLz52fbD2HySE7vUC28myk=) 2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=) 3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:e0:1f:02:a7:7f:87:bc:37:64:44:c5:b1:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8 Validity Not Before: Dec 21 04:01:34 2025 GMT Not After : Dec 22 04:01:34 2025 GMT Subject: CN=121d67fe6fca1d6c9234de7d7d178d42b2d5e5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:83:fc:d1:86:6f:63:10:06:4d:41:51:24:6b: 9c:b9:46:6f:e0:5c:88:2d:3a:5c:24:6d:0b:41:ca: c8:b5:46:bb:0b:10:4d:ba:0d:04:31:7a:b8:b6:eb: 72:4e:8f:15:64:6e:b3:66:34:a3:9e:9b:5e:e5:f2: 1e:c8:24:f8:aa:04:e1:a1:48:24:67:36:d4:c7:5a: 1c:33:46:fd:cb:be:06:6f:47:23:06:81:2f:71:bd: a3:7b:8e:7e:04:5c:e9:b1:9b:54:aa:17:30:5f:e9: b3:99:15:d1:04:e2:45:65:ec:c6:57:1e:68:9b:54: 93:b8:f3:c2:a8:cb:46:53:be:d7:61:ee:14:81:7e: 86:d4:57:d6:2c:34:3e:d7:3b:e9:ef:73:37:ed:43: 5d:da:d1:75:fa:d1:46:f3:86:97:c6:42:b3:36:de: bd:34:61:b3:cf:28:39:53:d7:88:72:66:c4:2a:5c: 54:3f:01:d3:92:ab:b6:5d:4e:82:58:c3:04:ee:3d: c0:bf:74:9d:f0:81:cc:22:9d:87:de:3d:97:61:a9: fe:28:41:56:71:11:f4:7a:05:00:5c:87:f2:e0:ba: af:35:31:f6:b0:62:7c:ab:37:58:71:bd:c9:e9:1d: 5d:cc:39:59:4b:5b:ff:68:a7:52:1b:84:ff:20:0d: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1D:67:FE:6F:CA:1D:6C:92:34:DE:7D:7D:17:8D:42:B2:D5:E5:F6 X509v3 Authority Key Identifier: keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:2a:81:f0:40:c2:fd:16:3f:22:a4:b2:92:b4:c9:77:08: 9f:91:25:06:60:27:65:e0:23:de:d8:f4:52:0b:cb:00:fe:78: 1c:44:39:18:7c:e4:5f:7c:84:4d:5b:7a:70:aa:7f:4d:9c:33: 02:d8:3c:27:74:92:7e:f5:3b:4c:dd:8a:0e:6d:da:bb:29:fa: 01:f4:25:0f:a2:4a:33:1c:c1:02:5e:e8:c8:a2:ce:9b:d4:e2: d7:89:86:d5:d5:f7:36:3d:98:45:c9:fd:9d:4a:35:33:16:0f: c8:21:a8:1f:5c:28:2b:4d:03:29:24:3f:1c:c7:de:9e:2c:10: e0:a0:dc:5d:a9:05:5a:84:00:be:4c:cc:fd:ef:f7:20:a0:f0: 2a:8f:08:06:0f:0e:81:d7:5d:ac:e0:2d:35:99:0a:35:b3:3c: 65:9b:b7:d3:b2:1c:0d:91:7a:c9:4a:5a:58:8c:f3:26:2b:45: 4e:b7:50:97:aa:3f:93:2a:db:ed:5e:e1:fe:7d:42:e8:68:b4: 53:30:87:ed:17:89:7f:9a:2e:f0:cf:a4:0a:b8:06:ab:3b:ec: a9:68:8b:7b:27:73:d1:70:e9:4e:15:51:ab:2d:b0:65:b0:16: 5d:6c:7c:44:14:8d:a8:8b:b0:61:48:32:83:45:5b:8a:0a:46: ba:6e:09:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeAfAqd/h7w3ZETFsdxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh M2E1ZjgwHhcNMjUxMjIxMDQwMTM0WhcNMjUxMjIyMDQwMTM0WjAzMTEwLwYDVQQD EygxMjFkNjdmZTZmY2ExZDZjOTIzNGRlN2Q3ZDE3OGQ0MmIyZDVlNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oP80YZvYxAGTUFRJGucuUZv4FyI LTpcJG0LQcrItUa7CxBNug0EMXq4tutyTo8VZG6zZjSjnpte5fIeyCT4qgThoUgk ZzbUx1ocM0b9y74Gb0cjBoEvcb2je45+BFzpsZtUqhcwX+mzmRXRBOJFZezGVx5o m1STuPPCqMtGU77XYe4UgX6G1FfWLDQ+1zvp73M37UNd2tF1+tFG84aXxkKzNt69 NGGzzyg5U9eIcmbEKlxUPwHTkqu2XU6CWMME7j3Av3Sd8IHMIp2H3j2XYan+KEFW cRH0egUAXIfy4LqvNTH2sGJ8qzdYcb3J6R1dzDlZS1v/aKdSG4T/IA1VzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIdZ/5vyh1skjTefX0XjUKy1eX2MB8GA1UdIwQY MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt NzYzNzc5M2Y4ZjNlLzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlp0qgfBA wv0WPyKkspK0yXcIn5ElBmAnZeAj3tj0UgvLAP54HEQ5GHzkX3yETVt6cKp/TZwz Atg8J3SSfvU7TN2KDm3auyn6AfQlD6JKMxzBAl7oyKLOm9Ti14mG1dX3Nj2YRcn9 nUo1MxYPyCGoH1woK00DKSQ/HMfeniwQ4KDcXakFWoQAvkzM/e/3IKDwKo8IBg8O gdddrOAtNZkKNbM8ZZu307IcDZF6yUpaWIzzJitFTrdQl6o/kyrb7V7h/n1C6Gi0 UzCH7ReJf5ou8M+kCrgGqzvsqWiLeydz0XDpThVRqy2wZbAWXWx8RBSNqIuwYUgy g0VbigpGum4JIA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:24:35 2025 by rpki-client