This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json) Hash identifier: fFBbiZrR0eQKsnwBaQyojgUmVRQiECD91ptb0F2I3M8= Subject key identifier: DC:0D:FB:3F:73:DA:77:93:0B:7A:90:93:91:AD:D6:5E:99:A7:DF:B5 Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019B2708A7236D42F7CF1A975DBBDC153068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 12:00:36 +0000 Manifest this update: Tue 16 Dec 2025 12:00:36 +0000 Manifest next update: Wed 17 Dec 2025 12:00:36 +0000 Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=) 2: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (hash: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM=) 3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=) 4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: QKwaWpka8T5n/Z2Ksdr50uiL2mxbflMcqHdTEMqOoR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:08:a7:23:6d:42:f7:cf:1a:97:5d:bb:dc:15:30:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Dec 16 12:00:36 2025 GMT Not After : Dec 17 12:00:36 2025 GMT Subject: CN=dc0dfb3f73da77930b7a909391add65e99a7dfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:ba:6f:cb:5c:48:4a:32:15:6d:35:9d:a0: 51:3d:94:cd:8c:05:62:23:7a:67:93:7e:9c:a1:39: 6f:13:52:ec:0c:3d:67:2f:cd:f2:e0:4c:56:9f:9f: 28:1e:4a:78:aa:2b:01:90:0a:23:0f:c7:0b:b3:22: 63:c2:0c:60:9b:43:6e:4b:91:98:b6:1e:41:26:d2: 58:20:c5:79:1a:29:6f:d1:a6:a8:f7:8d:e6:35:92: 65:d1:ce:d1:a4:96:4a:4b:ae:ed:19:bb:f4:38:57: fd:07:d2:0a:1f:57:93:b4:5d:c4:52:86:b2:d9:c1: 9b:03:8f:bf:d9:21:1c:8a:47:ea:65:7a:7b:57:0a: 8b:37:cb:0a:87:6f:d6:0a:31:fa:49:17:49:c5:65: 94:09:1b:7a:58:09:d6:a7:f5:77:c5:4f:06:20:41: c9:e4:ad:bb:f6:01:c1:46:38:ff:7b:9e:06:b3:04: 57:ca:5e:7e:48:5c:75:ab:fd:b6:b0:70:d7:22:c2: d9:04:00:48:1b:4c:ed:61:4b:2a:92:2d:f3:cf:33: 91:a8:4b:68:e6:58:8c:cd:91:c7:84:bc:c4:16:5d: 3c:7f:46:bc:23:e5:a1:4a:38:f3:10:7d:fe:ed:38: 04:11:34:31:97:b7:b3:77:74:16:ee:89:89:1c:b3: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:FB:3F:73:DA:77:93:0B:7A:90:93:91:AD:D6:5E:99:A7:DF:B5 X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:46:d7:3e:55:d9:3a:46:0e:a4:b5:0f:85:e9:34:66:2d:87: ea:40:b0:3f:c2:f7:2f:37:c3:a8:f8:41:61:2a:d0:c8:e1:59: 35:d1:c3:d7:96:65:1f:79:47:c5:9c:95:03:a6:81:f3:63:06: 55:1c:e8:d5:e9:43:be:77:cd:e6:49:bd:0b:c8:45:94:f3:9b: 66:bb:ba:59:ba:eb:14:de:9f:4b:17:3d:22:30:04:81:8f:c5: a2:de:b1:53:d9:1a:3b:0c:4b:a2:9e:95:b5:02:98:cb:70:49: 59:ea:9d:84:b6:e9:86:9e:e1:5b:89:25:07:3e:99:85:70:76: 24:8a:1a:fd:69:26:33:c6:32:99:d9:c0:de:fc:e7:d8:4b:c4: b3:6c:1d:26:94:4f:7b:d4:05:98:80:57:e9:60:f8:aa:24:a0: 67:fa:2c:e6:da:5d:ce:20:2b:a2:34:20:e7:ea:33:22:27:8a: 98:53:c7:b1:96:7c:2a:75:c6:f7:57:de:1b:c4:39:d1:52:c3: e9:78:3f:28:3b:ce:ca:4f:b8:3b:86:9e:30:df:e2:37:83:19: e1:e2:c1:8c:e5:90:83:07:db:2c:5d:83:42:9d:f1:63:05:02: 3d:3f:00:04:e2:96:a7:73:67:7f:04:f2:33:83:25:89:c8:d3: ff:15:6a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnCKcjbUL3zxqXXbvcFTBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjUxMjE2MTIwMDM2WhcNMjUxMjE3MTIwMDM2WjAzMTEwLwYDVQQD EyhkYzBkZmIzZjczZGE3NzkzMGI3YTkwOTM5MWFkZDY1ZTk5YTdkZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvG6b8tcSEoyFW01naBRPZTNjAVi I3pnk36coTlvE1LsDD1nL83y4ExWn58oHkp4qisBkAojD8cLsyJjwgxgm0NuS5GY th5BJtJYIMV5Gilv0aao943mNZJl0c7RpJZKS67tGbv0OFf9B9IKH1eTtF3EUoay 2cGbA4+/2SEcikfqZXp7VwqLN8sKh2/WCjH6SRdJxWWUCRt6WAnWp/V3xU8GIEHJ 5K279gHBRjj/e54GswRXyl5+SFx1q/22sHDXIsLZBABIG0ztYUsqki3zzzORqEto 5liMzZHHhLzEFl08f0a8I+WhSjjzEH3+7TgEETQxl7ezd3QW7omJHLPMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwN+z9z2neTC3qQk5Gt1l6Zp9+1MB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEbXPlXZ OkYOpLUPhek0Zi2H6kCwP8L3LzfDqPhBYSrQyOFZNdHD15ZlH3lHxZyVA6aB82MG VRzo1elDvnfN5km9C8hFlPObZru6WbrrFN6fSxc9IjAEgY/Fot6xU9kaOwxLop6V tQKYy3BJWeqdhLbphp7hW4klBz6ZhXB2JIoa/WkmM8YymdnA3vzn2EvEs2wdJpRP e9QFmIBX6WD4qiSgZ/os5tpdziArojQg5+ozIieKmFPHsZZ8KnXG91feG8Q50VLD 6Xg/KDvOyk+4O4aeMN/iN4MZ4eLBjOWQgwfbLF2DQp3xYwUCPT8ABOKWp3NnfwTy M4MlicjT/xVqIg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:26:55 2025 by rpki-client