This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File:                     IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier:          ON8AyhxUY8SMmXqqg9+C3KQTbOvUx3Zk6fuyL3NanoY=
Subject key identifier:   2F:F3:09:24:75:86:BE:32:91:8B:5D:70:13:49:E7:0F:B1:D2:01:9C
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer:       /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial:       019C42B41C1C6365A26DB07F322D84082341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number:          1543
Signing time:             Mon 09 Feb 2026 14:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:25 +0000
Files and hashes:         1: IMotTLPla10plwqX_GResv1odqE.crl (hash: OYYhj1ghOgkSI4m1aCThCd+1JnQPKFASIjBjpvlb3gk=)
                          2: cZMZxMlWQ6IQod_2YSUy5v3mzKE.roa (hash: 9SXryy4N+Me7/A7WtiV52N8BQ+YE/cR/4zGVs9tc7u4=)
                          3: jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa (hash: rcVg4MFo6BBLpVaNgO5+LIgDyJsxyuxnJwO/3OO9u5A=)
                          4: jW2Kd8f2Y-5PTueI923nik1n0Jw.roa (hash: /La4N20ywy5Sq3GPdObU0wHV90I37vBf0FTBSDxouTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:1c:1c:63:65:a2:6d:b0:7f:32:2d:84:08:23:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
        Validity
            Not Before: Feb  9 14:00:25 2026 GMT
            Not After : Feb 10 14:00:25 2026 GMT
        Subject: CN=2ff309247586be32918b5d701349e70fb1d2019c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:94:4f:f2:4e:04:d8:14:4b:a3:6f:5d:1e:
                    e5:ed:b9:11:bf:0c:64:1f:ba:2f:00:db:47:19:62:
                    c9:af:bc:87:e4:d7:36:e5:eb:fd:de:f2:3c:a9:ca:
                    24:02:30:2c:0e:8d:33:74:06:6b:36:73:0c:27:cd:
                    62:f0:f2:99:d5:3e:f8:60:e4:29:a3:4b:98:36:7c:
                    bd:ab:8b:ad:68:7f:1a:e8:1b:a8:d1:c6:9c:87:79:
                    93:00:62:0f:f8:b8:db:f5:f2:99:8c:84:73:16:92:
                    04:5e:cd:99:d9:84:01:03:b1:87:8d:89:d7:46:0e:
                    25:d6:50:3a:4c:f5:6a:85:db:f5:78:23:24:0e:be:
                    e2:c3:68:97:4f:2a:40:8e:22:f5:49:13:b2:35:07:
                    98:19:8f:93:5b:06:6e:5f:3c:0f:e7:90:d2:1a:4c:
                    81:d6:d0:a2:9e:f1:ba:50:9b:00:5c:39:e4:5b:e4:
                    b1:ed:2b:7d:4a:ce:95:5c:28:52:1f:36:52:56:e6:
                    58:26:35:49:9a:02:5f:29:fa:d8:a6:39:7d:53:0c:
                    9e:67:19:b0:fb:cd:83:0b:8d:e8:ff:1d:d0:9b:49:
                    38:fa:0c:09:02:ec:35:bc:bb:4d:8b:bf:58:81:dd:
                    23:8d:c3:f1:83:ba:d8:5b:0a:52:65:b9:79:2f:41:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:09:24:75:86:BE:32:91:8B:5D:70:13:49:E7:0F:B1:D2:01:9C
            X509v3 Authority Key Identifier:
                keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:40:9b:fd:22:2d:a2:98:5a:b3:4b:37:ce:f7:58:9a:30:
         ef:52:11:8f:0d:4c:91:b5:a9:85:0e:f6:18:22:72:02:e7:fc:
         c7:a3:36:3f:8f:0e:01:1a:c7:05:80:51:fa:d3:63:44:56:c8:
         ae:c3:a2:8f:de:5c:ff:10:0a:bc:46:92:4e:c0:7b:a1:0e:7e:
         5d:07:0f:e3:73:3b:54:17:86:6e:2e:b4:43:be:04:39:6c:76:
         ca:b2:b3:b2:5f:f2:b6:3a:f5:bd:aa:35:19:f6:e1:43:f2:2b:
         e3:da:90:54:bd:f3:8d:82:9e:7b:a1:3c:29:15:82:f6:72:37:
         4f:b5:b4:20:b0:7b:09:e6:37:88:b9:68:24:58:33:3c:2d:a0:
         84:af:6b:b7:c7:79:24:88:3b:64:ee:52:36:dc:89:d4:e7:32:
         82:6d:16:0a:bc:88:f5:fe:81:83:3c:0c:11:0c:b3:57:15:4b:
         1f:29:e1:cc:ac:c6:df:d2:7a:65:9d:82:de:d4:d7:0b:f8:85:
         41:a2:70:1f:38:00:b8:e5:02:58:94:7d:33:b1:c4:7a:da:ef:
         d7:06:50:b7:be:3d:da:e5:62:78:10:7f:bb:9b:14:1f:41:38:
         07:0c:c6:e8:7d:e8:29:80:62:be:c3:d6:6b:f3:60:0e:5c:58:
         44:db:88:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtBwcY2WibbB/Mi2ECCNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD
EygyZmYzMDkyNDc1ODZiZTMyOTE4YjVkNzAxMzQ5ZTcwZmIxZDIwMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+qUT/JOBNgUS6NvXR7l7bkRvwxk
H7ovANtHGWLJr7yH5Nc25ev93vI8qcokAjAsDo0zdAZrNnMMJ81i8PKZ1T74YOQp
o0uYNny9q4utaH8a6Buo0cach3mTAGIP+Ljb9fKZjIRzFpIEXs2Z2YQBA7GHjYnX
Rg4l1lA6TPVqhdv1eCMkDr7iw2iXTypAjiL1SROyNQeYGY+TWwZuXzwP55DSGkyB
1tCinvG6UJsAXDnkW+Sx7St9Ss6VXChSHzZSVuZYJjVJmgJfKfrYpjl9UwyeZxmw
+82DC43o/x3Qm0k4+gwJAuw1vLtNi79Ygd0jjcPxg7rYWwpSZbl5L0FhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/zCSR1hr4ykYtdcBNJ5w+x0gGcMB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzpAm/0i
LaKYWrNLN873WJow71IRjw1MkbWphQ72GCJyAuf8x6M2P48OARrHBYBR+tNjRFbI
rsOij95c/xAKvEaSTsB7oQ5+XQcP43M7VBeGbi60Q74EOWx2yrKzsl/ytjr1vao1
GfbhQ/Ir49qQVL3zjYKee6E8KRWC9nI3T7W0ILB7CeY3iLloJFgzPC2ghK9rt8d5
JIg7ZO5SNtyJ1Ocygm0WCryI9f6BgzwMEQyzVxVLHynhzKzG39J6ZZ2C3tTXC/iF
QaJwHzgAuOUCWJR9M7HEetrv1wZQt7492uVieBB/u5sUH0E4BwzG6H3oKYBivsPW
a/NgDlxYRNuIZw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:55 2026 by rpki-client