This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json) Hash identifier: w9+lCsYpIbOCou9vVw2PbscvrIUJytHR86D7c395zps= Subject key identifier: A4:9C:66:8F:1D:C5:4D:D0:39:3D:3F:A0:A2:11:89:C9:A9:9A:DB:49 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019AF3C096A7EB53C0F3DE36E866EFB87F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft Manifest number: 16CD Signing time: Sat 06 Dec 2025 13:01:16 +0000 Manifest this update: Sat 06 Dec 2025 13:01:16 +0000 Manifest next update: Sun 07 Dec 2025 13:01:16 +0000 Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: 67ye452BnSXthvYO30ZHvp3GHEbrvkz+sZUepxoqlyM=) 2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=) 3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:96:a7:eb:53:c0:f3:de:36:e8:66:ef:b8:7f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Dec 6 13:01:16 2025 GMT Not After : Dec 7 13:01:16 2025 GMT Subject: CN=a49c668f1dc54dd0393d3fa0a21189c9a99adb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:2b:a2:45:13:f5:00:e3:22:f6:66:c1:1e: 70:11:39:86:13:47:d2:39:f8:79:13:ad:7a:e8:99: 43:bf:f5:44:eb:95:6b:d1:91:3d:05:c8:ad:f0:c1: 5e:b5:f5:47:1a:40:b6:f3:13:96:4f:97:6c:ed:f3: 66:e6:02:e2:5f:b9:32:2d:53:da:54:bc:f8:aa:3e: 22:b0:49:f5:ca:c1:d1:13:da:ee:a3:7e:e8:eb:08: b2:a2:51:f2:61:70:fa:9e:bb:7a:9d:e4:1e:5a:c2: 53:08:0e:c6:b9:ad:70:e8:a2:01:50:3a:b1:44:d1: 45:f3:a6:de:41:8f:fd:29:63:ff:98:e1:41:0f:07: 34:cc:f6:bd:5b:de:52:ca:68:c4:3a:e9:55:52:c5: 8f:ee:f5:4a:3b:41:3c:57:29:0d:88:5b:9c:df:80: a4:d8:a9:96:98:2f:c0:71:86:c7:e7:b4:ab:09:2d: db:1c:5f:db:d2:b8:11:16:9a:f8:99:7e:04:ff:29: 1a:91:78:3d:05:b3:1c:d2:80:67:3d:d9:80:2a:a5: 7a:0d:d2:22:ba:2a:1a:93:09:ec:6d:05:5f:36:8c: 79:2d:5c:0f:8f:97:cc:01:c4:bf:bc:86:81:74:d2: 01:62:b1:b0:3a:2c:2d:2d:18:56:36:d6:21:e0:8c: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:66:8F:1D:C5:4D:D0:39:3D:3F:A0:A2:11:89:C9:A9:9A:DB:49 X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f0:7c:24:ec:64:5c:aa:c6:67:54:4f:d6:90:90:39:55:a2: c8:b1:60:3f:44:8c:55:28:d8:cf:4a:4b:15:58:7c:5f:44:57: 42:5f:a1:74:c6:e0:18:80:89:69:08:36:fa:5d:35:8e:c6:66: c3:a8:54:e1:3d:cb:c3:e3:0d:0a:38:a6:a6:77:7f:e1:95:8b: 18:28:84:06:3f:ab:3e:f2:93:1a:fe:65:06:cd:39:db:d8:4e: 90:3f:13:94:79:06:24:78:76:5d:ab:b0:87:d8:39:4e:31:54: 98:13:b3:e0:82:aa:4d:63:bb:07:04:09:f9:dd:2a:46:86:a1: 2d:33:72:8c:2d:c7:7d:45:73:40:48:64:41:21:d4:c5:bc:c4: 0b:92:3d:52:77:45:70:6c:76:e8:c9:9c:1a:d8:84:36:f7:48: 47:ce:84:b6:76:cb:ca:6b:15:1d:6b:d7:6b:ee:8b:7d:83:b8: cb:54:20:e7:62:31:81:f5:39:c6:43:08:d1:25:3e:ba:58:ca: 40:d5:3e:1c:8e:71:6a:c0:d7:17:49:cc:6e:e4:d3:58:76:f0: d8:da:84:f8:86:0b:cc:ef:ae:e2:b0:0d:51:28:a3:dd:d6:d1: 2a:f6:94:32:b6:66:d7:f5:1a:22:21:02:f2:b1:82:c7:9a:2b: e6:aa:8f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJan61PA89426GbvuH8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjUxMjA2MTMwMTE2WhcNMjUxMjA3MTMwMTE2WjAzMTEwLwYDVQQD EyhhNDljNjY4ZjFkYzU0ZGQwMzkzZDNmYTBhMjExODljOWE5OWFkYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08orokUT9QDjIvZmwR5wETmGE0fS Ofh5E6166JlDv/VE65Vr0ZE9Bcit8MFetfVHGkC28xOWT5ds7fNm5gLiX7kyLVPa VLz4qj4isEn1ysHRE9ruo37o6wiyolHyYXD6nrt6neQeWsJTCA7Gua1w6KIBUDqx RNFF86beQY/9KWP/mOFBDwc0zPa9W95SymjEOulVUsWP7vVKO0E8VykNiFuc34Ck 2KmWmC/AcYbH57SrCS3bHF/b0rgRFpr4mX4E/ykakXg9BbMc0oBnPdmAKqV6DdIi uioakwnsbQVfNox5LVwPj5fMAcS/vIaBdNIBYrGwOiwtLRhWNtYh4IyqIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKScZo8dxU3QOT0/oKIRicmpmttJMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/B8JOxk XKrGZ1RP1pCQOVWiyLFgP0SMVSjYz0pLFVh8X0RXQl+hdMbgGICJaQg2+l01jsZm w6hU4T3Lw+MNCjimpnd/4ZWLGCiEBj+rPvKTGv5lBs0529hOkD8TlHkGJHh2Xauw h9g5TjFUmBOz4IKqTWO7BwQJ+d0qRoahLTNyjC3HfUVzQEhkQSHUxbzEC5I9UndF cGx26MmcGtiENvdIR86EtnbLymsVHWvXa+6LfYO4y1Qg52IxgfU5xkMI0SU+uljK QNU+HI5xasDXF0nMbuTTWHbw2NqE+IYLzO+u4rANUSij3dbRKvaUMrZm1/UaIiEC 8rGCx5or5qqP+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:02 2025 by rpki-client