This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json) Hash identifier: /Vf9/GH5eRLkx6JODo8udBvl6WXuGxV6IlFYMXEgsUM= Subject key identifier: 33:5D:A4:B8:C0:49:61:D0:05:81:00:55:1D:36:CF:7F:65:29:13:AE Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019B251A41D374DEE2A353D025B85135926F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 03:00:36 +0000 Manifest this update: Tue 16 Dec 2025 03:00:36 +0000 Manifest next update: Wed 17 Dec 2025 03:00:36 +0000 Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=) 2: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (hash: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM=) 3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=) 4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: FMXqDSTtJTwK5lyJBbg4zW9/riuwPZDYpSJr/Yxzj1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:41:d3:74:de:e2:a3:53:d0:25:b8:51:35:92:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Dec 16 03:00:36 2025 GMT Not After : Dec 17 03:00:36 2025 GMT Subject: CN=335da4b8c04961d0058100551d36cf7f652913ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:ab:0b:ed:27:41:ed:93:36:b1:2c:4b:b7: ba:5d:58:62:07:71:d7:71:e1:c7:9a:e5:e4:fd:2b: 51:d2:1a:74:a4:85:8d:dd:a2:ca:a6:f8:e6:4e:6e: 8e:ca:e3:aa:b4:fa:28:75:6a:10:79:78:a6:7a:d3: 1a:3f:80:82:6f:50:8f:71:24:ae:be:00:89:e4:b3: de:e5:b8:55:44:18:30:2b:ce:e0:ec:02:2d:8e:d6: dd:e1:22:24:3a:aa:d0:5f:14:1c:46:fb:52:d4:92: c1:cb:aa:1f:1d:86:8c:99:6d:1b:27:5d:50:e2:4d: ee:df:82:d2:4d:16:3d:3f:34:b1:ad:7e:9b:3e:53: ae:87:ad:94:70:e8:9e:02:52:02:16:25:b6:14:56: 99:4e:26:a2:50:e0:a9:84:db:0f:85:e8:28:5a:f7: 43:ca:30:1f:82:b1:be:12:26:e9:a9:57:77:7e:50: 5b:96:63:60:e3:fb:4b:43:85:29:72:b2:4e:22:a3: 49:77:a7:0c:a4:dd:3f:02:93:c3:aa:64:9f:3d:3f: f9:0f:04:13:af:fe:49:87:b7:d4:59:25:bb:1d:95: 0b:77:b9:1d:1f:c3:dd:cd:39:32:fd:4b:d6:f0:64: 20:6c:1c:b9:ac:8f:22:8e:e0:f1:62:d9:21:0f:4c: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:A4:B8:C0:49:61:D0:05:81:00:55:1D:36:CF:7F:65:29:13:AE X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f6:80:4d:aa:61:29:8a:cf:40:33:8e:d1:1e:ef:1f:d6:ba: 87:8f:04:10:65:b1:85:7e:ef:60:54:02:b8:47:42:3c:88:7a: 2f:94:20:c3:73:39:9a:cb:2e:87:df:00:c4:e4:d9:54:5f:0c: c8:c6:be:ff:0b:12:ac:3f:00:af:6e:65:70:49:c5:64:3b:5e: fa:02:08:83:d9:aa:b6:ad:3f:7f:dc:2d:c5:54:5b:96:f3:23: ac:78:dc:71:2b:8b:e7:d2:09:d0:f7:a9:c1:cf:ab:08:3d:c7: fd:c0:d8:f2:58:0d:97:89:7e:5a:eb:43:6e:0a:88:18:24:64: 0f:08:d5:75:60:57:02:a3:af:4f:81:0e:c2:3a:ce:8e:78:20: df:ec:11:31:be:c9:99:04:e8:b7:fb:d0:e5:5a:5d:08:9d:6e: 1f:17:f0:02:ab:8e:78:d1:7b:2d:51:7d:13:a5:d3:01:c0:f6: cb:c3:54:93:52:4b:d3:14:c8:1b:ac:a1:0d:e5:74:08:9b:40: de:b5:85:df:d7:98:e6:79:0a:f6:a5:57:c7:03:1d:31:fa:3f: 2a:01:45:7c:8d:25:a8:96:54:f7:58:d7:8b:ae:62:fa:83:2e: c9:ca:d8:a4:47:48:f4:8c:4b:8a:9a:f8:03:4e:e7:f4:27:20: 41:85:42:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGkHTdN7io1PQJbhRNZJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjUxMjE2MDMwMDM2WhcNMjUxMjE3MDMwMDM2WjAzMTEwLwYDVQQD EygzMzVkYTRiOGMwNDk2MWQwMDU4MTAwNTUxZDM2Y2Y3ZjY1MjkxM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTqrC+0nQe2TNrEsS7e6XVhiB3HX ceHHmuXk/StR0hp0pIWN3aLKpvjmTm6OyuOqtPoodWoQeXimetMaP4CCb1CPcSSu vgCJ5LPe5bhVRBgwK87g7AItjtbd4SIkOqrQXxQcRvtS1JLBy6ofHYaMmW0bJ11Q 4k3u34LSTRY9PzSxrX6bPlOuh62UcOieAlICFiW2FFaZTiaiUOCphNsPhegoWvdD yjAfgrG+EibpqVd3flBblmNg4/tLQ4UpcrJOIqNJd6cMpN0/ApPDqmSfPT/5DwQT r/5Jh7fUWSW7HZULd7kdH8PdzTky/UvW8GQgbBy5rI8ijuDxYtkhD0y+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNdpLjASWHQBYEAVR02z39lKROuMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPaATaph KYrPQDOO0R7vH9a6h48EEGWxhX7vYFQCuEdCPIh6L5Qgw3M5mssuh98AxOTZVF8M yMa+/wsSrD8Ar25lcEnFZDte+gIIg9mqtq0/f9wtxVRblvMjrHjccSuL59IJ0Pep wc+rCD3H/cDY8lgNl4l+WutDbgqIGCRkDwjVdWBXAqOvT4EOwjrOjngg3+wRMb7J mQTot/vQ5VpdCJ1uHxfwAquOeNF7LVF9E6XTAcD2y8NUk1JL0xTIG6yhDeV0CJtA 3rWF39eY5nkK9qVXxwMdMfo/KgFFfI0lqJZU91jXi65i+oMuycrYpEdI9IxLipr4 A07n9CcgQYVCkw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:44:23 2025 by rpki-client