This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json) Hash identifier: hM0M9KRT7ma/IeFn/ULdeCVmMpB1QfrkzCkDxtCgAGA= Subject key identifier: AB:20:68:CE:85:58:B2:E9:04:DF:FA:61:5C:F6:D1:C4:3E:06:02:65 Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Certificate serial: 019B785C54877F32B755F54B197776D9042B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft Manifest number: 0BB3 Signing time: Thu 01 Jan 2026 07:01:15 +0000 Manifest this update: Thu 01 Jan 2026 07:01:15 +0000 Manifest next update: Fri 02 Jan 2026 07:01:15 +0000 Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: Bd9bTHmWJdEaIvDunmgxkGIt5RxYJ1ktQAg8/llT5rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:54:87:7f:32:b7:55:f5:4b:19:77:76:d9:04:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Validity Not Before: Jan 1 07:01:15 2026 GMT Not After : Jan 2 07:01:15 2026 GMT Subject: CN=ab2068ce8558b2e904dffa615cf6d1c43e060265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:67:3f:a8:e9:bd:88:73:f5:fa:a0:5f:2c:28: ec:f2:41:ce:57:3a:e0:da:89:4b:86:c3:cb:a6:c3: 76:93:71:64:e6:0a:1b:dc:d3:3d:9e:f7:42:81:89: 19:c1:73:a2:97:1f:06:68:d0:15:14:6a:74:69:66: d6:4c:a7:d7:56:91:64:90:40:e1:84:46:38:2f:fa: 65:7e:69:4d:32:a8:ff:1c:ef:45:a0:66:e0:fc:1e: 18:67:ee:a4:7c:ac:a3:b9:81:a1:fd:99:5e:47:8d: e7:f0:d5:ae:c5:f6:45:72:85:5f:02:da:62:89:10: 24:02:f5:cd:0c:4f:4e:82:a9:05:ea:4a:64:21:06: 86:d8:73:c7:23:99:8e:ca:08:3d:ca:72:40:2a:ef: e7:04:22:f5:09:b7:db:62:e1:e6:5c:d0:d4:ff:86: c5:fd:0f:7e:96:de:d4:31:3f:60:c7:3d:92:f6:91: 07:ee:65:f1:52:13:c7:7f:59:44:a4:69:56:11:67: e6:2a:10:f6:a1:8e:cb:18:ff:2f:07:29:22:cd:4a: 05:29:16:81:ca:05:ed:10:f6:59:4e:86:25:6d:c6: c6:32:0b:e9:71:86:44:b8:93:ac:c2:b3:3d:ce:46: e8:5f:e5:13:d0:30:0c:a8:34:ac:a3:e7:c3:4d:b3: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:68:CE:85:58:B2:E9:04:DF:FA:61:5C:F6:D1:C4:3E:06:02:65 X509v3 Authority Key Identifier: keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:18:05:88:05:dd:cf:46:9d:5f:92:b4:7f:e8:78:a6:a9: 89:58:f9:80:67:71:60:cb:d4:fc:5e:18:8f:4a:9c:00:a0:ef: ba:72:b0:d0:85:91:1a:21:c0:24:08:7a:1c:f5:dc:64:49:c2: c9:ee:aa:88:07:50:97:3c:67:c4:60:1f:af:35:f6:08:22:22: ba:b8:fd:b6:6d:89:e2:2e:dd:65:bd:df:eb:12:ef:13:0d:e5: 24:25:aa:fe:e0:37:d7:c1:07:8a:9f:06:83:5a:bc:2e:df:c9: 9c:70:93:b0:ab:6d:b2:42:d2:a0:90:cc:80:62:97:78:17:9a: eb:b3:75:fb:34:ff:f5:82:b1:7b:95:c2:15:b9:34:c7:d8:1d: db:9e:a0:b6:a1:e4:fd:f8:75:57:e9:34:88:cb:c6:c4:3b:fc: de:b0:56:cd:a0:19:05:15:be:3d:c2:f7:fd:53:c2:bd:0c:e9: 11:0b:55:97:69:17:74:e5:5f:da:34:41:3e:76:b7:1b:69:7e: 55:3e:38:7b:31:38:1b:09:87:29:3d:01:28:2e:7c:02:f5:67: ca:97:7f:57:7f:ee:44:47:dc:75:22:68:04:37:3a:85:24:b5: 78:b4:3b:b1:41:d4:84:cc:8a:28:d2:5c:35:1e:6a:81:35:4d: 93:a3:a1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XFSHfzK3VfVLGXd22QQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi MzI1ZjQwHhcNMjYwMTAxMDcwMTE1WhcNMjYwMTAyMDcwMTE1WjAzMTEwLwYDVQQD EyhhYjIwNjhjZTg1NThiMmU5MDRkZmZhNjE1Y2Y2ZDFjNDNlMDYwMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGc/qOm9iHP1+qBfLCjs8kHOVzrg 2olLhsPLpsN2k3Fk5gob3NM9nvdCgYkZwXOilx8GaNAVFGp0aWbWTKfXVpFkkEDh hEY4L/plfmlNMqj/HO9FoGbg/B4YZ+6kfKyjuYGh/ZleR43n8NWuxfZFcoVfAtpi iRAkAvXNDE9OgqkF6kpkIQaG2HPHI5mOygg9ynJAKu/nBCL1CbfbYuHmXNDU/4bF /Q9+lt7UMT9gxz2S9pEH7mXxUhPHf1lEpGlWEWfmKhD2oY7LGP8vBykizUoFKRaB ygXtEPZZToYlbcbGMgvpcYZEuJOswrM9zkboX+UT0DAMqDSso+fDTbNL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsgaM6FWLLpBN/6YVz20cQ+BgJlMB8GA1UdIwQY MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0 LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovkYBYgF 3c9GnV+StH/oeKapiVj5gGdxYMvU/F4Yj0qcAKDvunKw0IWRGiHAJAh6HPXcZEnC ye6qiAdQlzxnxGAfrzX2CCIiurj9tm2J4i7dZb3f6xLvEw3lJCWq/uA318EHip8G g1q8Lt/JnHCTsKttskLSoJDMgGKXeBea67N1+zT/9YKxe5XCFbk0x9gd256gtqHk /fh1V+k0iMvGxDv83rBWzaAZBRW+PcL3/VPCvQzpEQtVl2kXdOVf2jRBPna3G2l+ VT44ezE4GwmHKT0BKC58AvVnypd/V3/uREfcdSJoBDc6hSS1eLQ7sUHUhMyKKNJc NR5qgTVNk6Ohrw== -----END CERTIFICATE-----Generated at Thu Jan 1 08:45:20 2026 by rpki-client