This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: JQkXYJV0cnnyzMjwhqUg1jzeCIs3iceKi6Dxv+6neCM=
Subject key identifier: 93:14:34:C2:6F:42:A0:F1:69:67:F8:44:77:53:67:AA:81:CF:43:8A
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 019C420F4A845B449C23AC08F1C62C1BFA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 08F8
Signing time: Mon 09 Feb 2026 11:00:24 +0000
Manifest this update: Mon 09 Feb 2026 11:00:24 +0000
Manifest next update: Tue 10 Feb 2026 11:00:24 +0000
Files and hashes: 1: Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa (hash: MINPErO1BGuqVLJnTV2HhR7juWWefaDwKRV1A+XQOf8=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: vxyS3Ig5ua2jC8GpFnk5s5J7DfD3GbIyEBqIBlNTgyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:4a:84:5b:44:9c:23:ac:08:f1:c6:2c:1b:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Feb 9 11:00:24 2026 GMT
Not After : Feb 10 11:00:24 2026 GMT
Subject: CN=931434c26f42a0f16967f844775367aa81cf438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:7e:e3:be:e4:55:7c:1c:2d:52:e1:e8:50:
51:c8:16:f6:02:23:2c:c7:60:ac:63:5d:ac:36:98:
b8:50:8c:9e:ba:c4:50:95:02:16:eb:f0:92:a7:81:
f4:bf:03:e9:c7:09:05:0d:50:0a:27:7b:af:d1:73:
7d:1f:1f:3a:7b:e1:8b:d1:74:98:e2:3a:65:76:ea:
c4:c9:e2:02:71:7d:99:35:4a:48:ed:4d:eb:6a:73:
24:f1:74:97:2e:0d:ee:1a:00:35:3f:de:9e:26:f6:
ff:b0:1f:ef:e6:7e:43:40:ed:17:13:9f:69:a8:ac:
87:e4:97:af:9e:52:dd:08:6c:6c:fb:cb:f4:d8:df:
b4:c3:32:59:b3:38:e5:da:1b:93:16:4c:0a:bd:0a:
de:c1:c4:af:b4:c5:cf:14:55:eb:ff:0a:7e:45:6f:
54:1a:08:ff:f4:8e:a9:bf:09:60:28:8a:2f:67:0e:
27:d0:2b:88:3e:88:ac:e1:3a:f3:af:29:0f:d5:a1:
03:9e:db:b5:20:fc:b3:c8:a2:fa:63:37:ef:e9:cd:
ee:2f:5f:1c:0c:8d:38:77:5c:a7:68:55:2d:cb:3c:
0c:3e:ef:9d:27:a9:7d:6e:bf:52:17:c3:38:5f:f0:
7d:a1:d7:ab:83:c6:e2:e1:2b:21:9f:f8:fc:73:b5:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:14:34:C2:6F:42:A0:F1:69:67:F8:44:77:53:67:AA:81:CF:43:8A
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9e:3b:ec:44:56:53:3d:e0:6e:d8:1b:d8:5c:c6:d3:58:d4:
38:ec:a4:3e:b2:0b:f5:4b:08:c9:49:11:17:57:82:f4:0b:85:
9a:26:ea:f2:75:e7:1a:5f:b8:8c:8d:07:7a:df:cb:47:b0:42:
41:d7:aa:60:48:51:32:a0:78:37:6d:94:de:05:63:bc:56:6b:
dd:04:d2:3e:34:b2:21:a4:80:74:b9:50:a4:f6:2e:23:38:be:
ac:72:f1:5c:17:69:54:93:ce:0f:b3:e8:f7:67:1c:28:b6:e7:
8f:55:2f:2a:2e:c8:16:36:45:1e:eb:60:ac:0a:7b:5d:0b:dd:
0e:ad:be:a6:4b:75:4d:51:df:66:5c:17:60:5f:ac:22:6e:fd:
56:62:25:ce:88:36:2c:c0:40:dd:13:7c:e1:91:4d:61:36:ef:
f8:ed:96:6a:0c:1d:4f:11:93:6d:f9:1d:b8:5f:e8:e9:43:5d:
9f:40:dc:96:0b:35:43:19:30:8a:fc:3d:cc:6b:b3:5c:ba:76:
1c:5c:f4:77:ba:39:e9:eb:65:9b:c5:ea:b5:d5:3b:58:85:92:
e9:c7:32:21:8f:7b:9b:de:4f:04:0d:32:4f:a7:e5:5c:64:9c:
86:ad:c5:a2:0b:76:89:00:63:2a:5d:da:46:d3:21:b8:c1:6a:
19:5a:1c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0qEW0ScI6wI8cYsG/p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YThhNjkwMDlhZDJlODkwOTg2YmRkNzZjNjMzYzFiMzFm
MDZmM2EwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD
Eyg5MzE0MzRjMjZmNDJhMGYxNjk2N2Y4NDQ3NzUzNjdhYTgxY2Y0MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrh+477kVXwcLVLh6FBRyBb2AiMs
x2CsY12sNpi4UIyeusRQlQIW6/CSp4H0vwPpxwkFDVAKJ3uv0XN9Hx86e+GL0XSY
4jpldurEyeICcX2ZNUpI7U3ranMk8XSXLg3uGgA1P96eJvb/sB/v5n5DQO0XE59p
qKyH5JevnlLdCGxs+8v02N+0wzJZszjl2huTFkwKvQrewcSvtMXPFFXr/wp+RW9U
Ggj/9I6pvwlgKIovZw4n0CuIPois4TrzrykP1aEDntu1IPyzyKL6Yzfv6c3uL18c
DI04d1ynaFUtyzwMPu+dJ6l9br9SF8M4X/B9oderg8bi4Sshn/j8c7Uk5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMUNMJvQqDxaWf4RHdTZ6qBz0OKMB8GA1UdIwQY
MBaAFKWoppAJrS6JCYa912xjPBsx8G86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYt
YjEyZWJmMzQ1YmMzLzEvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYtYjEyZWJmMzQ1YmMz
LzEvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5477ERW
Uz3gbtgb2FzG01jUOOykPrIL9UsIyUkRF1eC9AuFmibq8nXnGl+4jI0Het/LR7BC
QdeqYEhRMqB4N22U3gVjvFZr3QTSPjSyIaSAdLlQpPYuIzi+rHLxXBdpVJPOD7Po
92ccKLbnj1UvKi7IFjZFHutgrAp7XQvdDq2+pkt1TVHfZlwXYF+sIm79VmIlzog2
LMBA3RN84ZFNYTbv+O2WagwdTxGTbfkduF/o6UNdn0Dclgs1Qxkwivw9zGuzXLp2
HFz0d7o56etlm8XqtdU7WIWS6ccyIY97m95PBA0yT6flXGSchq3Fogt2iQBjKl3a
RtMhuMFqGVocrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:17 2026 by rpki-client