This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json) Hash identifier: deq7J8lUpboVRyH9ryadWRGMBK0Wp8r+dhLdAfR4250= Subject key identifier: 6A:F0:63:81:8D:B4:30:2B:D0:C4:89:0E:53:C6:BF:A8:B5:52:32:AC Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019B348D6BA1DF2C81732BCB7EF573C1D959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 03:00:41 +0000 Manifest this update: Fri 19 Dec 2025 03:00:41 +0000 Manifest next update: Sat 20 Dec 2025 03:00:41 +0000 Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=) 2: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (hash: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM=) 3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=) 4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: jLuBkeiPMIkOePW7dRXIXc3Kq5G0nac+HZ5FbN5TFjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:6b:a1:df:2c:81:73:2b:cb:7e:f5:73:c1:d9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Dec 19 03:00:41 2025 GMT Not After : Dec 20 03:00:41 2025 GMT Subject: CN=6af063818db4302bd0c4890e53c6bfa8b55232ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:80:81:2c:03:fb:a5:12:9c:da:1e:44:c8: 28:6e:2b:57:17:87:8c:5e:74:5e:61:01:1e:98:da: 23:84:65:16:6d:93:65:3e:7a:a1:8a:63:01:2a:2a: 44:79:b0:ee:84:ec:12:77:b4:8c:c4:5a:3c:9d:8c: 15:09:da:bb:df:ad:9b:f7:bc:59:64:43:3a:52:20: ff:89:eb:fe:84:8f:a5:07:c8:95:f6:e0:e4:41:52: 94:82:1f:22:5c:80:3c:83:71:d8:e5:a0:94:de:54: 9d:40:5f:5a:29:aa:f8:5b:43:64:12:4e:79:26:c7: 66:a3:00:a8:a3:dd:78:96:e9:6a:20:05:d9:3f:ca: c9:62:21:6a:ec:47:cf:21:dc:50:7c:9a:86:09:5b: f2:30:06:0a:17:19:e7:9a:10:4e:99:2e:b3:b7:1b: ed:12:09:9b:a2:1e:8d:6e:30:ae:b3:ca:0b:93:e5: 93:2c:2d:62:61:5d:6c:1a:f1:47:4b:f0:ab:63:99: c3:f9:0e:f7:0f:59:51:05:3f:60:e6:b9:67:af:09: f6:71:ba:24:38:d7:87:a9:39:6d:89:aa:af:18:02: 04:20:5c:da:af:bf:e6:ce:8d:aa:17:3c:5f:3a:36: 64:a3:a6:a8:1d:b1:e3:85:d5:61:b5:f4:22:8b:65: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:63:81:8D:B4:30:2B:D0:C4:89:0E:53:C6:BF:A8:B5:52:32:AC X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:00:b5:4b:70:c8:b5:de:f3:1c:5b:9f:41:c9:32:3e:59:eb: 80:c9:59:e9:b3:d2:6f:04:57:e9:1e:94:dc:7d:fe:8d:12:ce: b1:81:11:ea:3e:0c:ce:2f:d5:83:02:c9:84:71:db:09:00:81: bd:10:3c:f5:ad:fb:67:86:e7:59:92:fc:55:9c:b9:5a:cf:e8: 55:5d:ef:13:1a:c1:33:28:57:95:0b:11:29:ad:f5:94:65:17: ec:14:71:e9:8b:dd:23:9f:aa:b2:eb:2a:9b:da:6a:65:42:13: 0e:f3:d9:89:dc:2c:14:f0:f2:9e:b4:82:b1:c1:54:5d:93:ed: b3:be:f8:0c:da:de:30:7b:c7:da:9e:93:ac:33:21:b5:b7:66: f9:32:94:21:bf:4b:12:4b:66:92:30:96:5f:5d:fa:69:38:6b: 12:7e:98:51:9b:2e:ef:64:3c:67:db:31:92:cd:d0:5e:78:65: c6:ce:bb:dd:33:b3:1a:17:fb:f4:5d:85:a2:7c:e4:9d:50:3f: b3:2b:32:a7:f9:3c:8d:3d:84:5a:84:0b:5a:12:2a:f3:c1:fa: fa:87:ea:66:43:d7:a4:03:44:4c:a1:f0:db:73:ee:1c:e0:68: 3e:ff:c1:a2:84:ce:42:15:d3:14:d7:c1:5f:5e:13:ed:b3:c2: b1:80:66:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jWuh3yyBcyvLfvVzwdlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjUxMjE5MDMwMDQxWhcNMjUxMjIwMDMwMDQxWjAzMTEwLwYDVQQD Eyg2YWYwNjM4MThkYjQzMDJiZDBjNDg5MGU1M2M2YmZhOGI1NTIzMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8+AgSwD+6USnNoeRMgobitXF4eM XnReYQEemNojhGUWbZNlPnqhimMBKipEebDuhOwSd7SMxFo8nYwVCdq7362b97xZ ZEM6UiD/iev+hI+lB8iV9uDkQVKUgh8iXIA8g3HY5aCU3lSdQF9aKar4W0NkEk55 JsdmowCoo914lulqIAXZP8rJYiFq7EfPIdxQfJqGCVvyMAYKFxnnmhBOmS6ztxvt Egmboh6NbjCus8oLk+WTLC1iYV1sGvFHS/CrY5nD+Q73D1lRBT9g5rlnrwn2cbok ONeHqTltiaqvGAIEIFzar7/mzo2qFzxfOjZko6aoHbHjhdVhtfQii2UAuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrwY4GNtDAr0MSJDlPGv6i1UjKsMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswC1S3DI td7zHFufQckyPlnrgMlZ6bPSbwRX6R6U3H3+jRLOsYER6j4Mzi/VgwLJhHHbCQCB vRA89a37Z4bnWZL8VZy5Ws/oVV3vExrBMyhXlQsRKa31lGUX7BRx6YvdI5+qsusq m9pqZUITDvPZidwsFPDynrSCscFUXZPts774DNreMHvH2p6TrDMhtbdm+TKUIb9L EktmkjCWX136aThrEn6YUZsu72Q8Z9sxks3QXnhlxs673TOzGhf79F2FonzknVA/ sysyp/k8jT2EWoQLWhIq88H6+ofqZkPXpANETKHw23PuHOBoPv/BooTOQhXTFNfB X14T7bPCsYBmZA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:00 2025 by rpki-client