This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json) Hash identifier: bixa/gyvkbBdPq9EOAh3iMyQa760SqhsXLX1zxSEtAc= Subject key identifier: 24:01:E2:EA:7B:98:A4:C6:93:E7:10:36:37:70:E8:6C:43:DB:D8:10 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019B37581856614E75C53CBC2311BC43B0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft Manifest number: 16F0 Signing time: Fri 19 Dec 2025 16:01:18 +0000 Manifest this update: Fri 19 Dec 2025 16:01:18 +0000 Manifest next update: Sat 20 Dec 2025 16:01:18 +0000 Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: MY5/OZNXqo1EjePt7WJGbvMdFOZsrRT6uHJTFM2PTJc=) 2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=) 3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:18:56:61:4e:75:c5:3c:bc:23:11:bc:43:b0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Dec 19 16:01:18 2025 GMT Not After : Dec 20 16:01:18 2025 GMT Subject: CN=2401e2ea7b98a4c693e710363770e86c43dbd810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:a1:20:5e:58:a5:18:7f:14:ef:72:e3:20: 35:57:20:5e:94:ce:f0:52:ea:ac:33:ae:14:e0:1f: 8d:f5:c1:9f:45:74:0a:0e:c9:65:a2:34:e8:76:57: ba:ea:ce:e3:f6:04:cd:7b:b7:64:2a:4a:9d:06:c9: 19:c3:f0:69:7c:54:b2:29:ed:60:e2:e9:a2:90:4c: c7:98:3a:f2:27:b8:e2:69:b0:c2:e4:b1:60:27:03: f6:92:a2:8b:40:e8:39:91:9f:56:1a:bf:17:f5:3e: db:07:54:3c:24:c1:59:64:1c:34:ff:56:5f:81:56: e8:6a:79:ee:1f:54:ab:a7:63:39:37:a6:ab:83:b8: d3:24:de:b2:b0:85:f5:8a:f8:54:31:14:53:60:7d: ff:6a:40:f6:e2:3e:08:df:a5:0c:05:7b:f1:6f:83: 8d:07:71:e9:c8:0b:2f:65:a6:3f:6f:a0:6f:ba:e3: bb:06:c8:36:ab:dd:d9:45:16:9c:9e:95:84:7d:f2: 52:72:ae:61:79:d3:be:e1:ec:64:bf:fd:f0:47:dc: b1:4e:ee:4a:ed:31:63:7e:af:35:15:7b:86:05:39: c6:83:c9:84:76:11:99:51:1f:11:07:8c:22:5d:fa: 38:58:a2:a5:89:64:2d:06:10:68:83:6f:3c:f6:c1: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:01:E2:EA:7B:98:A4:C6:93:E7:10:36:37:70:E8:6C:43:DB:D8:10 X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a6:b8:a4:33:8f:7b:5e:5a:7d:e6:1d:fe:ed:b2:1e:94:4b: f1:62:bc:c3:0d:4c:94:39:ad:28:19:5b:ce:a1:79:4d:23:40: 59:56:b5:a5:06:2a:68:56:34:2e:81:fd:17:80:3e:3e:8e:b6: 47:c1:0f:66:7c:ab:91:fa:35:93:95:11:e2:09:c6:df:2a:04: 6f:5d:01:3f:27:99:fc:8e:f5:66:01:bd:24:66:62:6e:32:9e: ef:e0:a8:da:3e:d5:1d:49:d1:97:17:b7:a4:39:db:64:91:a1: 19:1d:b2:2e:20:88:9e:ed:a7:9e:6a:70:3f:72:4a:bd:c5:6f: 0b:ee:9a:c1:4f:6e:f6:40:0b:fb:ac:6d:50:63:dc:df:be:ce: 57:4d:99:7b:99:2c:b3:7f:c2:bd:d8:f9:35:62:f0:60:a1:eb: 29:fd:35:1b:e9:19:21:1e:b6:71:1e:04:30:85:03:00:22:8a: 21:ad:1b:75:fa:34:31:99:05:bc:a7:53:46:b2:1f:a8:56:79: 3b:c1:ff:b3:83:63:f0:4a:bb:93:c1:39:f2:1f:38:67:62:8b: 2a:dd:08:65:d6:b6:e2:d5:67:ec:2c:68:b3:5a:b9:ad:73:d6: 81:b4:38:11:38:00:96:db:f1:bc:27:59:a9:4c:52:ff:b9:00: 7f:27:42:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WBhWYU51xTy8IxG8Q7DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjUxMjE5MTYwMTE4WhcNMjUxMjIwMTYwMTE4WjAzMTEwLwYDVQQD EygyNDAxZTJlYTdiOThhNGM2OTNlNzEwMzYzNzcwZTg2YzQzZGJkODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8qhIF5YpRh/FO9y4yA1VyBelM7w UuqsM64U4B+N9cGfRXQKDsllojTodle66s7j9gTNe7dkKkqdBskZw/BpfFSyKe1g 4umikEzHmDryJ7jiabDC5LFgJwP2kqKLQOg5kZ9WGr8X9T7bB1Q8JMFZZBw0/1Zf gVboannuH1Srp2M5N6arg7jTJN6ysIX1ivhUMRRTYH3/akD24j4I36UMBXvxb4ON B3HpyAsvZaY/b6BvuuO7Bsg2q93ZRRacnpWEffJScq5hedO+4exkv/3wR9yxTu5K 7TFjfq81FXuGBTnGg8mEdhGZUR8RB4wiXfo4WKKliWQtBhBog2889sGeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQB4up7mKTGk+cQNjdw6GxD29gQMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaa4pDOP e15afeYd/u2yHpRL8WK8ww1MlDmtKBlbzqF5TSNAWVa1pQYqaFY0LoH9F4A+Po62 R8EPZnyrkfo1k5UR4gnG3yoEb10BPyeZ/I71ZgG9JGZibjKe7+Co2j7VHUnRlxe3 pDnbZJGhGR2yLiCInu2nnmpwP3JKvcVvC+6awU9u9kAL+6xtUGPc377OV02Ze5ks s3/Cvdj5NWLwYKHrKf01G+kZIR62cR4EMIUDACKKIa0bdfo0MZkFvKdTRrIfqFZ5 O8H/s4Nj8Eq7k8E58h84Z2KLKt0IZda24tVn7Cxos1q5rXPWgbQ4ETgAltvxvCdZ qUxS/7kAfydCFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:30 2025 by rpki-client