This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json) Hash identifier: 83MRLLpRzTYLJXYgsKGQNGpx4lldmB5txZriH5vzR40= Subject key identifier: 2F:C3:CE:96:19:4D:DF:B3:6F:F0:75:DD:CF:DF:72:96:CA:3C:F8:9E Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8 Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8 Certificate serial: 019B10B7F5AEBCAB3762719E44426A668852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft Manifest number: 0D39 Signing time: Fri 12 Dec 2025 04:00:49 +0000 Manifest this update: Fri 12 Dec 2025 04:00:49 +0000 Manifest next update: Sat 13 Dec 2025 04:00:49 +0000 Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: Q4KuoEZoTPfkxVAhpEAQMxRLwhgoWkP7uViCsqmmRP4=) 2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=) 3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:f5:ae:bc:ab:37:62:71:9e:44:42:6a:66:88:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8 Validity Not Before: Dec 12 04:00:49 2025 GMT Not After : Dec 13 04:00:49 2025 GMT Subject: CN=2fc3ce96194ddfb36ff075ddcfdf7296ca3cf89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:87:0c:d1:38:cb:21:38:d7:bc:3b:27:35: be:64:98:7f:ca:0e:33:a8:4e:3a:e2:3c:50:88:99: c8:11:a5:79:18:e1:d0:46:17:7c:b4:91:f6:60:93: 2a:4f:d7:3b:5e:8b:fc:d0:6b:01:f1:dc:67:e2:ad: 78:5c:a7:10:0e:91:bb:f1:88:a1:d5:72:4b:0c:94: 2e:c2:66:7f:ca:35:f5:e3:96:42:3b:91:35:88:69: 85:d2:09:55:98:23:be:b3:ea:04:74:5b:ef:31:b9: 7e:b0:82:41:41:d6:1a:bd:6c:00:41:80:3d:4f:a0: ea:39:ec:6a:20:9a:05:d6:f8:cc:69:4c:08:00:0f: a7:a6:70:64:4a:d7:57:6a:c0:ac:a2:09:ca:8c:89: 5a:57:27:d7:1f:df:f0:18:8f:85:78:b6:a8:a2:fb: ce:1b:e7:74:5b:0a:f7:22:6f:14:f0:f4:d9:3b:54: 0d:37:6d:bf:f0:1c:b3:69:d9:75:6b:b1:10:1e:f0: 4d:fc:3a:bf:08:f6:57:1e:12:ac:ac:81:37:1f:2a: 1e:d4:c0:7d:ac:af:98:33:b5:7f:77:b5:37:a1:c5: af:62:81:01:03:81:35:5c:01:ed:f4:a5:a3:6e:fe: e5:de:03:18:fc:cd:1a:3e:72:3f:0c:4a:17:bf:cc: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C3:CE:96:19:4D:DF:B3:6F:F0:75:DD:CF:DF:72:96:CA:3C:F8:9E X509v3 Authority Key Identifier: keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:31:be:a9:28:f4:84:6c:98:38:da:af:18:15:cb:68:cf: 17:38:65:c8:fc:30:a6:44:b2:11:13:b1:1f:de:f6:47:91:b3: 3b:a0:5a:c2:5c:68:08:5c:fc:df:ec:eb:6f:12:e9:01:e2:88: 00:f8:3c:84:8b:de:8c:25:d4:4e:dd:64:80:fa:32:42:51:47: 39:23:98:38:3c:41:82:21:3f:71:cc:38:39:43:8a:16:26:1b: 5d:04:59:c6:db:cb:55:26:ca:20:36:b8:39:82:3f:e9:0a:5b: f8:06:ab:d3:43:c0:f4:d4:0b:a0:de:c1:6d:bf:aa:3f:a8:a3: 2c:f0:c2:43:66:d3:1b:0f:46:d4:f3:87:ee:5f:26:d3:cc:76: bf:4f:52:9e:51:ca:bb:43:7b:fe:a8:5e:fd:bc:42:cf:67:24: 05:fc:76:68:dd:7d:c0:b4:f2:be:ec:75:54:fd:c2:3a:0d:b6: c9:87:ca:37:e6:17:7d:fb:cc:56:ef:84:0b:bc:ab:13:c4:56: 1f:64:59:c2:5e:7b:c6:3c:57:32:00:e9:3a:15:1c:33:28:15: 74:ba:b8:c2:88:93:64:fc:c9:86:5e:b8:ec:cb:57:ff:dc:3c: f2:c0:60:8b:a4:20:7d:f4:17:bc:e5:ae:0b:b7:d2:72:3a:65: 5b:8d:a8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt/WuvKs3YnGeREJqZohSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh M2E1ZjgwHhcNMjUxMjEyMDQwMDQ5WhcNMjUxMjEzMDQwMDQ5WjAzMTEwLwYDVQQD EygyZmMzY2U5NjE5NGRkZmIzNmZmMDc1ZGRjZmRmNzI5NmNhM2NmODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbSHDNE4yyE417w7JzW+ZJh/yg4z qE464jxQiJnIEaV5GOHQRhd8tJH2YJMqT9c7Xov80GsB8dxn4q14XKcQDpG78Yih 1XJLDJQuwmZ/yjX145ZCO5E1iGmF0glVmCO+s+oEdFvvMbl+sIJBQdYavWwAQYA9 T6DqOexqIJoF1vjMaUwIAA+npnBkStdXasCsognKjIlaVyfXH9/wGI+FeLaoovvO G+d0Wwr3Im8U8PTZO1QNN22/8Byzadl1a7EQHvBN/Dq/CPZXHhKsrIE3Hyoe1MB9 rK+YM7V/d7U3ocWvYoEBA4E1XAHt9KWjbv7l3gMY/M0aPnI/DEoXv8zqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/DzpYZTd+zb/B13c/fcpbKPPieMB8GA1UdIwQY MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt NzYzNzc5M2Y4ZjNlLzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPQxvqko 9IRsmDjarxgVy2jPFzhlyPwwpkSyEROxH972R5GzO6BawlxoCFz83+zrbxLpAeKI APg8hIvejCXUTt1kgPoyQlFHOSOYODxBgiE/ccw4OUOKFiYbXQRZxtvLVSbKIDa4 OYI/6Qpb+Aar00PA9NQLoN7Bbb+qP6ijLPDCQ2bTGw9G1POH7l8m08x2v09SnlHK u0N7/qhe/bxCz2ckBfx2aN19wLTyvux1VP3COg22yYfKN+YXffvMVu+EC7yrE8RW H2RZwl57xjxXMgDpOhUcMygVdLq4woiTZPzJhl647MtX/9w88sBgi6QgffQXvOWu C7fScjplW42oLw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:42:35 2025 by rpki-client