This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json) Hash identifier: DHq8PaH66U5xUpCgzfwJjBVtoU5tnGN9tyIVd0OLAfg= Subject key identifier: FC:31:5A:7B:60:F4:3A:85:FD:B9:46:06:13:CE:6D:A9:3E:16:DA:D6 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019B0ECA07CFEFCB745EEDA37A0CEA290887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft Manifest number: 16DB Signing time: Thu 11 Dec 2025 19:01:19 +0000 Manifest this update: Thu 11 Dec 2025 19:01:19 +0000 Manifest next update: Fri 12 Dec 2025 19:01:19 +0000 Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: VPc9mp0LEqH1OUbQ6/sh5HwCn4Wn37PzlVzt0sS0FSg=) 2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=) 3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:07:cf:ef:cb:74:5e:ed:a3:7a:0c:ea:29:08:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Dec 11 19:01:19 2025 GMT Not After : Dec 12 19:01:19 2025 GMT Subject: CN=fc315a7b60f43a85fdb9460613ce6da93e16dad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:6d:e8:0e:3d:3f:5c:a8:14:57:3e:f8:37: 41:51:99:89:43:87:75:36:75:c9:2a:1d:df:07:14: 82:92:b4:b3:61:1c:0c:b7:7a:6b:42:1a:47:2f:33: 2b:19:e1:b9:ab:5b:0e:14:2e:8d:12:54:26:16:7a: 64:c7:a0:ea:d7:96:17:ca:b0:2c:01:14:e8:d6:8f: bb:98:3e:0b:15:a7:ec:f9:3a:fb:35:d4:d0:6c:85: 89:2a:f8:6a:34:ed:41:4a:8d:61:25:f6:9c:85:68: 79:f3:29:39:64:0c:dc:dd:c6:ec:fe:f7:55:e5:63: cb:17:bb:aa:33:6e:a6:38:4f:a2:0d:7e:c0:fb:d0: 53:b4:c1:b3:c1:47:6d:1b:c7:20:c8:5b:e1:9d:2e: 93:e1:9b:36:a8:46:80:a6:17:f3:70:13:83:f0:48: f6:7a:ce:64:e7:6c:35:c5:5b:6e:e4:8b:23:76:c5: da:df:6b:c7:25:81:57:5a:46:97:7e:3b:b3:21:6d: 8c:d6:77:4a:40:24:69:ab:9c:18:fa:4f:47:29:38: 75:53:c7:d7:af:f0:fa:59:2d:ee:c5:db:c0:f2:da: a3:2c:61:b0:47:a2:b3:2b:66:3f:5c:30:a3:aa:41: 53:c6:44:30:02:36:e8:26:7b:9d:9c:fe:76:26:f8: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:5A:7B:60:F4:3A:85:FD:B9:46:06:13:CE:6D:A9:3E:16:DA:D6 X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d9:25:d2:9f:b7:62:cb:0c:76:b3:f7:a8:61:5d:71:1e:4e: 2d:a8:dd:5d:c4:86:2f:14:dd:23:df:2a:5e:35:1c:55:ee:ca: cf:7e:f3:23:ea:0e:79:82:85:34:69:9f:d4:6d:c2:d1:b4:fd: d2:88:7b:e2:a7:b2:94:d0:e7:46:b0:96:33:e8:e4:43:68:28: 87:e0:b8:f6:c2:bd:d9:c0:71:4f:c8:94:86:bf:6c:76:df:f0: f9:75:59:fb:79:c6:14:ec:be:79:d5:6a:d9:57:ed:ee:e8:f9: 68:4d:4e:e8:fc:f2:24:e9:75:65:98:55:42:a7:6a:f4:a5:b8: 61:ae:b4:e1:a2:13:6f:34:92:b2:45:50:73:94:04:56:c0:5e: 6d:a2:88:5c:3d:b4:9e:05:73:2a:78:61:32:6a:a5:dd:79:54: 51:33:42:44:03:24:76:50:82:ff:8f:c3:09:8f:28:f4:7a:49: 99:9b:8d:5f:59:6d:64:51:a6:af:0b:d4:24:7b:c6:20:1e:1b: c1:77:d0:0f:06:7e:c3:04:1d:41:33:37:f0:98:23:b9:31:1b: 7b:e2:b1:91:90:6d:0f:65:cb:a0:6d:07:ce:71:80:6d:62:af: 6e:02:a9:b9:a8:cb:77:f7:79:ed:e9:03:bc:21:f7:3b:78:58: 74:e8:88:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOygfP78t0Xu2jegzqKQiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjUxMjExMTkwMTE5WhcNMjUxMjEyMTkwMTE5WjAzMTEwLwYDVQQD EyhmYzMxNWE3YjYwZjQzYTg1ZmRiOTQ2MDYxM2NlNmRhOTNlMTZkYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZFt6A49P1yoFFc++DdBUZmJQ4d1 NnXJKh3fBxSCkrSzYRwMt3prQhpHLzMrGeG5q1sOFC6NElQmFnpkx6Dq15YXyrAs ARTo1o+7mD4LFafs+Tr7NdTQbIWJKvhqNO1BSo1hJfachWh58yk5ZAzc3cbs/vdV 5WPLF7uqM26mOE+iDX7A+9BTtMGzwUdtG8cgyFvhnS6T4Zs2qEaAphfzcBOD8Ej2 es5k52w1xVtu5IsjdsXa32vHJYFXWkaXfjuzIW2M1ndKQCRpq5wY+k9HKTh1U8fX r/D6WS3uxdvA8tqjLGGwR6KzK2Y/XDCjqkFTxkQwAjboJnudnP52JvhFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwxWntg9DqF/blGBhPObak+FtrWMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNkl0p+3 YssMdrP3qGFdcR5OLajdXcSGLxTdI98qXjUcVe7Kz37zI+oOeYKFNGmf1G3C0bT9 0oh74qeylNDnRrCWM+jkQ2goh+C49sK92cBxT8iUhr9sdt/w+XVZ+3nGFOy+edVq 2Vft7uj5aE1O6PzyJOl1ZZhVQqdq9KW4Ya604aITbzSSskVQc5QEVsBebaKIXD20 ngVzKnhhMmql3XlUUTNCRAMkdlCC/4/DCY8o9HpJmZuNX1ltZFGmrwvUJHvGIB4b wXfQDwZ+wwQdQTM38JgjuTEbe+KxkZBtD2XLoG0HznGAbWKvbgKpuajLd/d57ekD vCH3O3hYdOiIsg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:10 2025 by rpki-client