This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json) Hash identifier: qLNrWpFuH4sBJ9O+ngk8y9VyczSUSDThqGTEPd5wC40= Subject key identifier: D8:CF:B0:8A:1D:B6:86:96:31:47:CD:56:35:5C:EF:7D:0B:AC:EF:E3 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019BFE413CB4F6676F59A9E6365E484A0539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft Manifest number: 1758 Signing time: Tue 27 Jan 2026 07:00:46 +0000 Manifest this update: Tue 27 Jan 2026 07:00:46 +0000 Manifest next update: Wed 28 Jan 2026 07:00:46 +0000 Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=) 2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: QaBI0Zn5onHE4QLuK3OkvtoAX8zWNbd54tidR2o5BL4=) 3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:3c:b4:f6:67:6f:59:a9:e6:36:5e:48:4a:05:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Jan 27 07:00:46 2026 GMT Not After : Jan 28 07:00:46 2026 GMT Subject: CN=d8cfb08a1db686963147cd56355cef7d0bacefe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:4a:44:3e:20:35:e1:bf:a4:f4:84:ab:ae: b8:7e:bb:28:d8:32:ad:7b:39:2e:c4:f7:a9:ce:8c: b3:44:60:e6:89:23:a6:25:f6:fb:3c:e9:1d:6f:d4: c3:ce:33:6e:60:e6:d1:ed:53:7e:7a:e6:87:05:08: cb:d4:01:d1:f0:61:52:41:20:25:fb:86:6e:27:14: 6f:e4:c8:ff:1a:60:d3:1f:06:de:4c:7d:46:0f:7f: 81:8f:a1:57:ac:28:a0:db:11:b8:fb:f2:4c:d0:15: a9:5d:b6:a2:89:85:00:b7:4d:46:d0:e8:5b:f2:19: 25:36:70:ae:d5:4d:26:74:c1:c4:b3:35:89:2f:e6: e5:70:eb:b0:93:dc:61:d0:ef:2e:7c:41:a0:4c:d1: 4b:d8:aa:ef:01:7a:c4:a2:3e:d8:2d:e7:40:6d:7d: 60:6c:62:4b:08:1e:63:c4:98:dc:59:10:78:0c:b3: df:5b:14:61:fe:1c:1b:b5:af:5e:94:e3:27:bf:20: a9:dc:d2:85:24:18:36:ae:98:60:8a:ae:02:8a:96: 54:3f:1a:6b:b9:af:91:a7:cf:fa:ce:b3:f9:33:6d: 73:87:a2:5f:d0:66:3d:dd:ed:c6:75:66:c9:0e:55: 89:a9:6f:1a:e8:24:2c:ee:88:60:f4:9e:4a:49:b9: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CF:B0:8A:1D:B6:86:96:31:47:CD:56:35:5C:EF:7D:0B:AC:EF:E3 X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:95:91:7b:57:3c:69:a8:05:9c:bc:21:aa:4f:ee:fd:9d:98: 81:11:ab:41:91:59:01:e5:17:d0:e1:03:e0:5e:01:54:c6:df: 82:70:f7:06:af:3e:82:bf:06:cb:8d:03:dc:5a:dd:d2:0c:65: 4d:43:6d:09:a7:58:26:89:eb:23:12:57:5e:91:0c:37:34:6f: 03:2a:50:af:4f:19:fa:02:67:20:e7:06:31:fc:8a:73:73:9b: 4a:9c:c3:be:da:07:8f:f8:3c:8d:1f:30:2f:25:6f:ef:ce:2d: 5e:0d:d6:a5:2a:b7:bf:72:fc:5c:e5:87:a8:e0:90:9d:da:ef: e1:99:30:14:0d:e0:c1:78:83:6e:07:62:2b:fe:01:71:ec:5d: cc:a5:09:97:39:ef:76:2a:1f:96:ff:99:2b:9d:5f:b5:d5:40: e2:54:bf:d3:3a:82:6c:bf:b6:4d:83:92:c9:ca:da:72:c1:fc: a6:9a:52:44:a9:f3:2b:a6:c4:14:37:a6:6c:77:ba:66:d2:73: 04:83:66:1f:9f:18:c8:09:1a:98:a1:e0:60:69:2c:fc:2a:2e: eb:9f:58:ea:e0:df:e7:35:85:1d:62:41:03:f3:4d:9c:28:d7: a6:6c:06:dd:9d:68:43:10:5b:db:56:08:2e:54:d0:62:bb:df: 77:e8:d0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QTy09mdvWanmNl5ISgU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjYwMTI3MDcwMDQ2WhcNMjYwMTI4MDcwMDQ2WjAzMTEwLwYDVQQD EyhkOGNmYjA4YTFkYjY4Njk2MzE0N2NkNTYzNTVjZWY3ZDBiYWNlZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj5KRD4gNeG/pPSEq664frso2DKt ezkuxPepzoyzRGDmiSOmJfb7POkdb9TDzjNuYObR7VN+euaHBQjL1AHR8GFSQSAl +4ZuJxRv5Mj/GmDTHwbeTH1GD3+Bj6FXrCig2xG4+/JM0BWpXbaiiYUAt01G0Ohb 8hklNnCu1U0mdMHEszWJL+blcOuwk9xh0O8ufEGgTNFL2KrvAXrEoj7YLedAbX1g bGJLCB5jxJjcWRB4DLPfWxRh/hwbta9elOMnvyCp3NKFJBg2rphgiq4CipZUPxpr ua+Rp8/6zrP5M21zh6Jf0GY93e3GdWbJDlWJqW8a6CQs7ohg9J5KSbn7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjPsIodtoaWMUfNVjVc730LrO/jMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5WRe1c8 aagFnLwhqk/u/Z2YgRGrQZFZAeUX0OED4F4BVMbfgnD3Bq8+gr8Gy40D3Frd0gxl TUNtCadYJonrIxJXXpEMNzRvAypQr08Z+gJnIOcGMfyKc3ObSpzDvtoHj/g8jR8w LyVv784tXg3WpSq3v3L8XOWHqOCQndrv4ZkwFA3gwXiDbgdiK/4BcexdzKUJlznv dioflv+ZK51ftdVA4lS/0zqCbL+2TYOSycracsH8pppSRKnzK6bEFDembHe6ZtJz BINmH58YyAkamKHgYGks/Cou659Y6uDf5zWFHWJBA/NNnCjXpmwG3Z1oQxBb21YI LlTQYrvfd+jQ7Q== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:42 2026 by rpki-client