This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: fFBbiZrR0eQKsnwBaQyojgUmVRQiECD91ptb0F2I3M8=
Subject key identifier: DC:0D:FB:3F:73:DA:77:93:0B:7A:90:93:91:AD:D6:5E:99:A7:DF:B5
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019B2708A7236D42F7CF1A975DBBDC153068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1781
Signing time: Tue 16 Dec 2025 12:00:36 +0000
Manifest this update: Tue 16 Dec 2025 12:00:36 +0000
Manifest next update: Wed 17 Dec 2025 12:00:36 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (hash: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: QKwaWpka8T5n/Z2Ksdr50uiL2mxbflMcqHdTEMqOoR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:08:a7:23:6d:42:f7:cf:1a:97:5d:bb:dc:15:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Dec 16 12:00:36 2025 GMT
Not After : Dec 17 12:00:36 2025 GMT
Subject: CN=dc0dfb3f73da77930b7a909391add65e99a7dfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:ba:6f:cb:5c:48:4a:32:15:6d:35:9d:a0:
51:3d:94:cd:8c:05:62:23:7a:67:93:7e:9c:a1:39:
6f:13:52:ec:0c:3d:67:2f:cd:f2:e0:4c:56:9f:9f:
28:1e:4a:78:aa:2b:01:90:0a:23:0f:c7:0b:b3:22:
63:c2:0c:60:9b:43:6e:4b:91:98:b6:1e:41:26:d2:
58:20:c5:79:1a:29:6f:d1:a6:a8:f7:8d:e6:35:92:
65:d1:ce:d1:a4:96:4a:4b:ae:ed:19:bb:f4:38:57:
fd:07:d2:0a:1f:57:93:b4:5d:c4:52:86:b2:d9:c1:
9b:03:8f:bf:d9:21:1c:8a:47:ea:65:7a:7b:57:0a:
8b:37:cb:0a:87:6f:d6:0a:31:fa:49:17:49:c5:65:
94:09:1b:7a:58:09:d6:a7:f5:77:c5:4f:06:20:41:
c9:e4:ad:bb:f6:01:c1:46:38:ff:7b:9e:06:b3:04:
57:ca:5e:7e:48:5c:75:ab:fd:b6:b0:70:d7:22:c2:
d9:04:00:48:1b:4c:ed:61:4b:2a:92:2d:f3:cf:33:
91:a8:4b:68:e6:58:8c:cd:91:c7:84:bc:c4:16:5d:
3c:7f:46:bc:23:e5:a1:4a:38:f3:10:7d:fe:ed:38:
04:11:34:31:97:b7:b3:77:74:16:ee:89:89:1c:b3:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:FB:3F:73:DA:77:93:0B:7A:90:93:91:AD:D6:5E:99:A7:DF:B5
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:d7:3e:55:d9:3a:46:0e:a4:b5:0f:85:e9:34:66:2d:87:
ea:40:b0:3f:c2:f7:2f:37:c3:a8:f8:41:61:2a:d0:c8:e1:59:
35:d1:c3:d7:96:65:1f:79:47:c5:9c:95:03:a6:81:f3:63:06:
55:1c:e8:d5:e9:43:be:77:cd:e6:49:bd:0b:c8:45:94:f3:9b:
66:bb:ba:59:ba:eb:14:de:9f:4b:17:3d:22:30:04:81:8f:c5:
a2:de:b1:53:d9:1a:3b:0c:4b:a2:9e:95:b5:02:98:cb:70:49:
59:ea:9d:84:b6:e9:86:9e:e1:5b:89:25:07:3e:99:85:70:76:
24:8a:1a:fd:69:26:33:c6:32:99:d9:c0:de:fc:e7:d8:4b:c4:
b3:6c:1d:26:94:4f:7b:d4:05:98:80:57:e9:60:f8:aa:24:a0:
67:fa:2c:e6:da:5d:ce:20:2b:a2:34:20:e7:ea:33:22:27:8a:
98:53:c7:b1:96:7c:2a:75:c6:f7:57:de:1b:c4:39:d1:52:c3:
e9:78:3f:28:3b:ce:ca:4f:b8:3b:86:9e:30:df:e2:37:83:19:
e1:e2:c1:8c:e5:90:83:07:db:2c:5d:83:42:9d:f1:63:05:02:
3d:3f:00:04:e2:96:a7:73:67:7f:04:f2:33:83:25:89:c8:d3:
ff:15:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:26:55 2025 by rpki-client