This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File:                     paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier:          JQkXYJV0cnnyzMjwhqUg1jzeCIs3iceKi6Dxv+6neCM=
Subject key identifier:   93:14:34:C2:6F:42:A0:F1:69:67:F8:44:77:53:67:AA:81:CF:43:8A
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer:       /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial:       019C420F4A845B449C23AC08F1C62C1BFA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number:          08F8
Signing time:             Mon 09 Feb 2026 11:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:24 +0000
Files and hashes:         1: Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa (hash: MINPErO1BGuqVLJnTV2HhR7juWWefaDwKRV1A+XQOf8=)
                          2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: vxyS3Ig5ua2jC8GpFnk5s5J7DfD3GbIyEBqIBlNTgyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:4a:84:5b:44:9c:23:ac:08:f1:c6:2c:1b:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
        Validity
            Not Before: Feb  9 11:00:24 2026 GMT
            Not After : Feb 10 11:00:24 2026 GMT
        Subject: CN=931434c26f42a0f16967f844775367aa81cf438a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:7e:e3:be:e4:55:7c:1c:2d:52:e1:e8:50:
                    51:c8:16:f6:02:23:2c:c7:60:ac:63:5d:ac:36:98:
                    b8:50:8c:9e:ba:c4:50:95:02:16:eb:f0:92:a7:81:
                    f4:bf:03:e9:c7:09:05:0d:50:0a:27:7b:af:d1:73:
                    7d:1f:1f:3a:7b:e1:8b:d1:74:98:e2:3a:65:76:ea:
                    c4:c9:e2:02:71:7d:99:35:4a:48:ed:4d:eb:6a:73:
                    24:f1:74:97:2e:0d:ee:1a:00:35:3f:de:9e:26:f6:
                    ff:b0:1f:ef:e6:7e:43:40:ed:17:13:9f:69:a8:ac:
                    87:e4:97:af:9e:52:dd:08:6c:6c:fb:cb:f4:d8:df:
                    b4:c3:32:59:b3:38:e5:da:1b:93:16:4c:0a:bd:0a:
                    de:c1:c4:af:b4:c5:cf:14:55:eb:ff:0a:7e:45:6f:
                    54:1a:08:ff:f4:8e:a9:bf:09:60:28:8a:2f:67:0e:
                    27:d0:2b:88:3e:88:ac:e1:3a:f3:af:29:0f:d5:a1:
                    03:9e:db:b5:20:fc:b3:c8:a2:fa:63:37:ef:e9:cd:
                    ee:2f:5f:1c:0c:8d:38:77:5c:a7:68:55:2d:cb:3c:
                    0c:3e:ef:9d:27:a9:7d:6e:bf:52:17:c3:38:5f:f0:
                    7d:a1:d7:ab:83:c6:e2:e1:2b:21:9f:f8:fc:73:b5:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:14:34:C2:6F:42:A0:F1:69:67:F8:44:77:53:67:AA:81:CF:43:8A
            X509v3 Authority Key Identifier:
                keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:3b:ec:44:56:53:3d:e0:6e:d8:1b:d8:5c:c6:d3:58:d4:
         38:ec:a4:3e:b2:0b:f5:4b:08:c9:49:11:17:57:82:f4:0b:85:
         9a:26:ea:f2:75:e7:1a:5f:b8:8c:8d:07:7a:df:cb:47:b0:42:
         41:d7:aa:60:48:51:32:a0:78:37:6d:94:de:05:63:bc:56:6b:
         dd:04:d2:3e:34:b2:21:a4:80:74:b9:50:a4:f6:2e:23:38:be:
         ac:72:f1:5c:17:69:54:93:ce:0f:b3:e8:f7:67:1c:28:b6:e7:
         8f:55:2f:2a:2e:c8:16:36:45:1e:eb:60:ac:0a:7b:5d:0b:dd:
         0e:ad:be:a6:4b:75:4d:51:df:66:5c:17:60:5f:ac:22:6e:fd:
         56:62:25:ce:88:36:2c:c0:40:dd:13:7c:e1:91:4d:61:36:ef:
         f8:ed:96:6a:0c:1d:4f:11:93:6d:f9:1d:b8:5f:e8:e9:43:5d:
         9f:40:dc:96:0b:35:43:19:30:8a:fc:3d:cc:6b:b3:5c:ba:76:
         1c:5c:f4:77:ba:39:e9:eb:65:9b:c5:ea:b5:d5:3b:58:85:92:
         e9:c7:32:21:8f:7b:9b:de:4f:04:0d:32:4f:a7:e5:5c:64:9c:
         86:ad:c5:a2:0b:76:89:00:63:2a:5d:da:46:d3:21:b8:c1:6a:
         19:5a:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:17 2026 by rpki-client