This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json) Hash identifier: yO1WV3lyz01QxbcBuyAn4b+Fd+ghwA/gAU2k4txUolY= Subject key identifier: F0:F1:12:6A:41:84:0F:BE:7F:C4:C7:81:38:89:95:70:B6:45:ED:84 Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019BF6884AFA9F28700C97BAD55818046146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=) 2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=) 3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=) 4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: yR4WT/HfTb7+SAP8mvOnszt6l3QA6IZgI8ikZiX+ER0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4a:fa:9f:28:70:0c:97:ba:d5:58:18:04:61:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=f0f1126a41840fbe7fc4c78138899570b645ed84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:0e:bc:7d:a9:20:21:21:e1:df:57:c5:ad: f5:c5:ce:f8:c8:7b:bf:98:82:13:ed:15:1d:ba:94: 0a:93:bc:e4:8a:ea:be:6c:bc:a7:74:31:58:41:cb: e1:8c:2e:01:f1:c4:95:28:63:d3:35:1f:e5:c6:ff: ff:f8:a0:11:aa:34:4d:a0:48:91:e2:11:f6:06:96: a3:6d:73:0e:30:11:44:7d:8c:bf:f3:1d:f6:7d:84: 3f:4a:b6:d9:1c:36:20:52:18:10:a8:f7:8d:8d:30: 89:61:b2:e2:8a:e3:04:93:e3:de:ef:77:93:24:7c: 97:d6:22:ef:66:2f:8d:4f:72:b2:81:f1:17:1f:85: 4b:bd:46:1b:d5:56:64:7a:70:7b:c0:8d:10:0c:c4: 5c:bf:9a:ef:15:ce:bd:05:65:31:e6:4e:73:53:7b: 92:0b:4d:8a:7a:a7:51:ab:ed:47:11:c9:c2:31:d5: bd:ec:99:2b:e9:e8:35:84:e9:a7:14:cf:76:be:b7: db:c3:79:31:62:32:8c:ee:74:97:2e:c8:0e:1e:18: 80:31:7f:ab:2c:24:ec:42:4c:02:60:83:c5:d1:12: 1c:c7:dd:6f:7b:34:21:20:f0:a5:a0:ac:11:5a:e7: 9d:05:88:14:30:fc:c0:7d:be:37:b6:d7:49:c5:12: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:12:6A:41:84:0F:BE:7F:C4:C7:81:38:89:95:70:B6:45:ED:84 X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c2:77:68:5a:43:7d:4b:b8:92:a4:c0:1c:8a:b7:59:3f:86: 8e:2d:44:09:8b:09:0a:a7:5f:48:0c:b5:b5:1d:59:86:f3:4b: 73:f4:b8:51:7c:b4:79:73:29:b2:5b:6a:d5:94:a2:0f:70:31: 59:df:c1:e5:63:6f:0e:00:74:e8:44:bb:18:f3:03:eb:44:4b: 01:00:da:7a:c8:64:17:12:5a:9f:48:ce:d5:04:23:eb:f4:25: cb:31:30:ca:49:b3:c8:13:30:ae:b4:47:f3:d4:cb:25:be:fe: d1:51:cc:2b:48:9d:a3:13:6e:c2:41:a6:ee:b5:a9:b7:65:26: 53:43:f7:9d:c4:7f:de:c3:c3:e1:38:02:43:b2:2b:5b:61:82: 89:0f:fd:55:45:4c:67:c6:34:84:d4:22:ad:e9:c0:9d:c1:40: 30:0f:7b:2c:31:ff:c7:42:22:14:56:fe:86:81:32:f6:0d:cc: ef:f7:cf:8c:62:a7:e9:32:ff:4d:f6:51:86:a8:7d:c7:61:d4: ff:de:e1:08:ab:c3:d8:b1:3e:96:63:23:86:60:9c:e7:7a:56: e9:75:da:bd:ff:c2:f7:99:c4:0b:9c:87:7a:ec:98:8d:d3:59: e7:40:ac:ad:b4:5d:e8:39:2a:be:51:df:26:fc:43:d8:25:56: 17:98:2c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEr6nyhwDJe61VgYBGFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD EyhmMGYxMTI2YTQxODQwZmJlN2ZjNGM3ODEzODg5OTU3MGI2NDVlZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yQOvH2pICEh4d9Xxa31xc74yHu/ mIIT7RUdupQKk7zkiuq+bLyndDFYQcvhjC4B8cSVKGPTNR/lxv//+KARqjRNoEiR 4hH2BpajbXMOMBFEfYy/8x32fYQ/SrbZHDYgUhgQqPeNjTCJYbLiiuMEk+Pe73eT JHyX1iLvZi+NT3KygfEXH4VLvUYb1VZkenB7wI0QDMRcv5rvFc69BWUx5k5zU3uS C02KeqdRq+1HEcnCMdW97Jkr6eg1hOmnFM92vrfbw3kxYjKM7nSXLsgOHhiAMX+r LCTsQkwCYIPF0RIcx91vezQhIPCloKwRWuedBYgUMPzAfb43ttdJxRITTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDxEmpBhA++f8THgTiJlXC2Re2EMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMJ3aFpD fUu4kqTAHIq3WT+Gji1ECYsJCqdfSAy1tR1ZhvNLc/S4UXy0eXMpsltq1ZSiD3Ax Wd/B5WNvDgB06ES7GPMD60RLAQDaeshkFxJan0jO1QQj6/QlyzEwykmzyBMwrrRH 89TLJb7+0VHMK0idoxNuwkGm7rWpt2UmU0P3ncR/3sPD4TgCQ7IrW2GCiQ/9VUVM Z8Y0hNQirenAncFAMA97LDH/x0IiFFb+hoEy9g3M7/fPjGKn6TL/TfZRhqh9x2HU /97hCKvD2LE+lmMjhmCc53pW6XXavf/C95nEC5yHeuyYjdNZ50CsrbRd6DkqvlHf JvxD2CVWF5gsCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:52 2026 by rpki-client