This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json) Hash identifier: gk3Ufr4/1eHYM2Yzj82dka3C/LPLDBD00VX6Jk72R8I= Subject key identifier: 00:E9:2F:17:E0:9B:A6:EA:83:F8:85:76:DC:50:68:34:11:55:50:E7 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019BF87619AD13E7A91BBED666ADF9C4AA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft Manifest number: 1755 Signing time: Mon 26 Jan 2026 04:00:47 +0000 Manifest this update: Mon 26 Jan 2026 04:00:47 +0000 Manifest next update: Tue 27 Jan 2026 04:00:47 +0000 Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=) 2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: ifMRT7r6GktSW4SqrtmoYLvT+0sg82/dBXZVpZamre0=) 3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:19:ad:13:e7:a9:1b:be:d6:66:ad:f9:c4:aa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Jan 26 04:00:47 2026 GMT Not After : Jan 27 04:00:47 2026 GMT Subject: CN=00e92f17e09ba6ea83f88576dc506834115550e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:8a:f9:08:c5:46:9c:82:7e:bd:a4:06:58: e8:59:47:e4:c4:51:86:4f:ea:bd:6b:2c:2c:47:d6: 28:fb:82:dc:5f:c2:d3:be:fb:68:e2:6b:b6:70:15: de:95:24:80:78:fb:b1:55:1a:99:c9:ab:1b:20:67: 9d:94:31:04:da:b1:30:ab:f6:b8:37:a7:49:b5:77: a8:d3:63:93:40:0f:31:ea:10:5b:ba:71:43:86:62: 6a:65:6f:8d:93:f0:6c:78:5d:b4:d9:f3:b5:81:e6: aa:f5:a7:7d:3d:57:4e:62:79:73:c7:f0:8c:b8:24: a3:e1:63:4c:3e:4c:a6:c6:b1:b3:db:83:8b:79:2f: ff:ab:26:b9:be:a4:6b:ba:b0:32:18:32:29:46:28: 1d:01:71:15:75:43:7f:6a:46:f9:a6:32:f4:8f:1a: e9:b9:2b:16:fd:05:bc:01:5a:32:10:aa:0d:19:d5: ff:03:0f:3e:45:19:c9:5b:0b:f4:62:f0:d0:93:ea: 62:5f:36:4c:cc:7e:18:48:65:7e:5d:d7:66:a2:44: b6:92:53:7f:df:62:6c:a5:a4:55:a6:2a:f9:fe:1b: 35:97:be:8c:09:6f:5d:58:13:0d:b7:85:7a:60:39: 67:34:d6:a6:d3:33:01:8a:92:0b:52:24:3b:8b:18: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E9:2F:17:E0:9B:A6:EA:83:F8:85:76:DC:50:68:34:11:55:50:E7 X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:4a:91:c5:f7:ab:7b:f1:50:a4:3d:3d:5e:3a:e2:e0:40: 2d:3f:ab:2e:13:8e:1a:f3:b6:68:c5:1c:0f:1e:e1:52:d9:0f: 15:02:96:d6:68:e7:b5:78:15:4f:8e:c1:23:43:1d:51:f5:d5: 78:cc:e4:21:00:0b:09:6f:e3:5f:d8:bf:b1:6c:d7:88:99:c7: 96:ba:3f:de:53:cf:8e:26:fd:b4:66:4f:b7:c0:3f:c8:69:27: 45:1e:38:51:bb:0f:6d:a1:31:f6:6a:ac:2a:19:60:28:64:6e: a7:df:2b:bd:3d:71:96:43:e9:aa:18:4c:60:c2:77:80:f2:e1: 26:ff:dc:58:58:e6:c1:84:02:42:35:a1:9e:2b:ff:1f:c3:e7: 64:ec:99:cd:40:42:d4:9b:f1:0c:8c:46:b4:e0:10:4f:ba:df: 8e:8a:7f:c9:f6:9d:dc:4b:94:ee:88:92:64:a1:67:40:56:49: 90:a6:0e:a8:7d:4a:d6:ea:b5:26:34:7d:5e:2a:4e:40:07:78: a3:f8:6b:e7:a3:6a:76:14:5f:65:99:ef:09:c3:fe:ec:d8:c8: a4:61:64:7f:62:e1:d5:a9:79:90:44:48:64:13:9e:c1:ad:2f: b8:15:18:11:e4:2f:86:1c:75:6e:f5:d1:4f:4f:9c:9b:92:3c: de:7a:ad:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dhmtE+epG77WZq35xKp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjYwMTI2MDQwMDQ3WhcNMjYwMTI3MDQwMDQ3WjAzMTEwLwYDVQQD EygwMGU5MmYxN2UwOWJhNmVhODNmODg1NzZkYzUwNjgzNDExNTU1MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHuK+QjFRpyCfr2kBljoWUfkxFGG T+q9aywsR9Yo+4LcX8LTvvto4mu2cBXelSSAePuxVRqZyasbIGedlDEE2rEwq/a4 N6dJtXeo02OTQA8x6hBbunFDhmJqZW+Nk/BseF202fO1geaq9ad9PVdOYnlzx/CM uCSj4WNMPkymxrGz24OLeS//qya5vqRrurAyGDIpRigdAXEVdUN/akb5pjL0jxrp uSsW/QW8AVoyEKoNGdX/Aw8+RRnJWwv0YvDQk+piXzZMzH4YSGV+XddmokS2klN/ 32JspaRVpir5/hs1l76MCW9dWBMNt4V6YDlnNNam0zMBipILUiQ7ixiNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADpLxfgm6bqg/iFdtxQaDQRVVDnMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9RKkcX3 q3vxUKQ9PV464uBALT+rLhOOGvO2aMUcDx7hUtkPFQKW1mjntXgVT47BI0MdUfXV eMzkIQALCW/jX9i/sWzXiJnHlro/3lPPjib9tGZPt8A/yGknRR44UbsPbaEx9mqs KhlgKGRup98rvT1xlkPpqhhMYMJ3gPLhJv/cWFjmwYQCQjWhniv/H8PnZOyZzUBC 1JvxDIxGtOAQT7rfjop/yfad3EuU7oiSZKFnQFZJkKYOqH1K1uq1JjR9XipOQAd4 o/hr56NqdhRfZZnvCcP+7NjIpGFkf2Lh1al5kERIZBOewa0vuBUYEeQvhhx1bvXR T0+cm5I83nqtaw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:31 2026 by rpki-client