This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json) Hash identifier: 5eFocSVJlrQkmSwqhnHmHgql0AvrXTCAGgzSW/wL9rE= Subject key identifier: 68:E2:9B:FF:E8:44:00:E1:7B:0F:E5:AE:7A:AD:D6:BB:ED:9F:0A:A1 Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019AF2E43AD9D7D667018DF4E89F4224947B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 09:00:34 +0000 Manifest this update: Sat 06 Dec 2025 09:00:34 +0000 Manifest next update: Sun 07 Dec 2025 09:00:34 +0000 Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=) 2: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (hash: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM=) 3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=) 4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: zvQq9un7MF7MXLGpQWnOs5DMJ7wGkEPTSq+YTD2qZgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3a:d9:d7:d6:67:01:8d:f4:e8:9f:42:24:94:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Dec 6 09:00:34 2025 GMT Not After : Dec 7 09:00:34 2025 GMT Subject: CN=68e29bffe84400e17b0fe5ae7aadd6bbed9f0aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:e0:55:65:7d:dc:3b:b1:1b:72:dd:39:09: e5:18:40:79:cc:ee:03:dc:9e:f6:51:43:83:1d:a0: d6:f0:d9:37:f4:e7:ec:58:70:9a:57:d9:44:e9:5b: 3f:03:e3:90:d6:fe:77:f6:dc:72:2f:4c:6e:50:94: de:0d:70:ec:a8:ff:cd:0a:b3:59:70:49:ac:43:66: 7b:ae:fc:df:15:dc:9b:d6:f6:f2:38:bb:73:f0:df: e9:a7:ba:81:2f:5d:92:e3:87:17:e7:fa:d5:8a:14: ae:e9:da:c4:42:e7:50:0d:91:b8:c6:d6:28:16:1f: b4:64:bf:ea:14:90:6c:71:fb:e9:45:16:14:45:93: 2b:ce:36:ef:46:3f:ca:c8:8d:96:07:66:bd:e6:7f: 02:fd:32:8a:e8:56:ae:93:72:43:1d:38:25:99:91: 09:5e:69:a4:e6:a7:9a:da:bd:47:b7:54:7d:7f:1f: d4:ab:10:45:ce:1d:a5:3f:69:00:5f:52:a3:b8:04: 45:27:83:99:fd:3a:d8:ad:4b:61:53:c4:1b:ad:73: ff:02:17:27:0b:5d:4c:5e:9f:ff:5f:41:09:39:7c: a1:22:ee:03:0a:78:cb:34:61:79:73:7f:f3:85:03: 05:d8:e2:3f:f5:1f:b9:6c:cf:f1:cf:de:ca:e1:81: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:9B:FF:E8:44:00:E1:7B:0F:E5:AE:7A:AD:D6:BB:ED:9F:0A:A1 X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:65:48:fe:8b:3f:bf:4c:c7:00:95:64:a1:82:55:c5:1c:b8: d6:19:4d:fe:63:f1:b6:51:95:80:ac:8b:15:68:a7:ca:67:c0: 8a:4d:16:4b:47:a0:57:f4:f2:6f:e7:d3:15:2e:2b:38:9b:99: 4b:e2:7f:1e:44:15:ed:8c:49:07:0d:29:4e:b5:fd:c6:99:d6: 5f:d1:e5:d7:1c:c5:7d:cb:d7:ef:91:3e:3c:15:21:ab:3d:cf: a1:87:e3:9b:94:dd:3c:76:0d:13:c5:b5:78:e4:47:fa:d1:2f: f5:4c:23:8a:53:6b:ce:9a:32:8c:be:de:18:9e:ec:62:69:7b: 62:4c:b9:b7:2e:97:a1:9d:45:92:4e:83:b0:f1:e8:4a:ab:fc: 52:29:36:23:94:8c:ca:8b:f6:1d:83:c6:e2:b5:ef:60:3d:7b: 3e:65:e3:5c:0d:96:c7:87:ff:08:05:a1:15:11:cc:95:31:bc: 6d:5e:d1:00:1a:e3:1f:a5:8a:31:13:fd:99:7a:78:93:87:23: 80:1c:c9:c8:42:0e:32:25:bb:6e:d5:f0:05:83:12:52:34:8e: ec:39:bb:66:2d:33:83:cc:58:e9:84:d8:10:8e:22:9c:c8:85: 93:f7:ef:97:0f:ca:f0:e3:57:a7:0c:bb:49:56:cd:d4:ea:1e: 43:14:1f:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DrZ19ZnAY306J9CJJR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD Eyg2OGUyOWJmZmU4NDQwMGUxN2IwZmU1YWU3YWFkZDZiYmVkOWYwYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LgVWV93DuxG3LdOQnlGEB5zO4D 3J72UUODHaDW8Nk39OfsWHCaV9lE6Vs/A+OQ1v539txyL0xuUJTeDXDsqP/NCrNZ cEmsQ2Z7rvzfFdyb1vbyOLtz8N/pp7qBL12S44cX5/rVihSu6drEQudQDZG4xtYo Fh+0ZL/qFJBscfvpRRYURZMrzjbvRj/KyI2WB2a95n8C/TKK6Fauk3JDHTglmZEJ Xmmk5qea2r1Ht1R9fx/UqxBFzh2lP2kAX1KjuARFJ4OZ/TrYrUthU8QbrXP/Ahcn C11MXp//X0EJOXyhIu4DCnjLNGF5c3/zhQMF2OI/9R+5bM/xz97K4YFgfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjim//oRADhew/lrnqt1rvtnwqhMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2VI/os/ v0zHAJVkoYJVxRy41hlN/mPxtlGVgKyLFWinymfAik0WS0egV/Tyb+fTFS4rOJuZ S+J/HkQV7YxJBw0pTrX9xpnWX9Hl1xzFfcvX75E+PBUhqz3PoYfjm5TdPHYNE8W1 eORH+tEv9UwjilNrzpoyjL7eGJ7sYml7Yky5ty6XoZ1Fkk6DsPHoSqv8Uik2I5SM yov2HYPG4rXvYD17PmXjXA2Wx4f/CAWhFRHMlTG8bV7RABrjH6WKMRP9mXp4k4cj gBzJyEIOMiW7btXwBYMSUjSO7Dm7Zi0zg8xY6YTYEI4inMiFk/fvlw/K8ONXpwy7 SVbN1OoeQxQfyA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:24 2025 by rpki-client