This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json) Hash identifier: aNeEio5iNcqmM8Y1poBNgTw0IdboR+nso7vIUp2hXZU= Subject key identifier: 2E:96:0E:1A:84:02:04:5F:30:A4:53:7D:4F:F6:71:7F:F7:D0:4B:15 Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Certificate serial: 019B59767F43F3C94A91EAB0C4AE2EDC96AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft Manifest number: 0BA3 Signing time: Fri 26 Dec 2025 07:01:36 +0000 Manifest this update: Fri 26 Dec 2025 07:01:36 +0000 Manifest next update: Sat 27 Dec 2025 07:01:36 +0000 Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: uT0huEXW8zvGqctjgdpkBJ0En+HKiFQNSAVkOCZsCvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:7f:43:f3:c9:4a:91:ea:b0:c4:ae:2e:dc:96:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Validity Not Before: Dec 26 07:01:36 2025 GMT Not After : Dec 27 07:01:36 2025 GMT Subject: CN=2e960e1a8402045f30a4537d4ff6717ff7d04b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:a9:0f:e5:ba:95:94:c2:52:b3:1c:26:20: 68:40:54:bb:41:63:cf:d8:1f:cd:ad:f8:01:69:bf: 41:80:45:bf:d1:9b:b9:66:3b:42:4f:15:26:01:6e: 4a:7a:b0:87:29:95:77:cd:ad:72:e7:60:a6:2e:3d: af:ab:60:9c:bf:4d:ee:77:4a:21:e6:74:f1:1a:71: 1e:8a:cd:be:05:b8:98:c4:9f:ba:fc:92:67:cf:9e: ba:8e:99:56:cf:15:ae:5c:1a:fb:2f:b5:ad:66:4f: d2:25:ce:63:e0:81:10:25:e9:7b:f3:b1:f6:85:e7: cb:9b:2e:81:4f:0b:2e:21:b3:0d:13:5a:81:1a:f6: ee:eb:c8:7b:b3:0a:fd:d4:79:91:1e:66:a4:7f:78: 8d:f9:e8:fc:e9:3e:a9:f1:a3:c8:56:61:5e:eb:30: e2:37:19:ab:3b:81:97:a7:39:81:cc:96:9b:b6:33: 33:fc:ef:b3:c4:08:69:2b:e6:ba:7f:5e:bc:9a:36: 4f:7c:97:f9:6d:6a:18:9c:9d:88:23:e9:cf:71:93: bf:b0:d3:f1:0d:bd:f3:f8:7b:f1:cb:69:f0:0d:03: 3f:21:5b:84:fb:8d:6e:13:bd:bb:cd:b9:30:cc:c7: a1:45:7a:eb:83:2c:03:2e:b0:81:c7:ad:3f:da:76: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:0E:1A:84:02:04:5F:30:A4:53:7D:4F:F6:71:7F:F7:D0:4B:15 X509v3 Authority Key Identifier: keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:10:f7:d2:64:b5:38:31:03:cd:14:b6:96:5a:b2:90:b2: 99:cb:68:d6:49:9d:13:e9:e9:e0:65:ed:2c:a4:37:26:99:bb: 9f:fe:10:2d:57:e5:a1:df:e3:a2:20:72:16:f2:ed:73:03:1f: 5f:41:df:9a:9b:d5:25:59:1e:f0:47:df:2b:78:9c:d1:6f:54: 1e:eb:ea:c2:22:ff:40:12:b4:42:b9:48:10:5f:96:9d:29:90: e2:ee:5f:a0:b4:d9:43:4a:79:71:5b:71:fc:f5:86:d0:d5:22: 70:0e:7d:e3:6b:b5:64:bc:9c:19:35:f2:75:03:be:88:d2:11: 50:3a:b5:a0:b1:85:3d:4c:1a:b8:37:b1:58:05:70:b2:01:f0: 25:f0:3c:cc:3d:3f:5b:ee:06:0b:15:ad:e9:4a:20:09:26:a1: ea:c0:07:a6:c7:d7:e1:03:00:d0:74:1a:cc:8c:b2:34:6c:1a: 40:c0:cb:e2:65:04:c8:29:f1:e6:28:da:36:8a:25:12:12:49: f6:e6:c0:25:5b:be:03:8e:ce:03:a9:18:b4:57:f8:3b:c2:54: dd:17:6b:ad:65:34:2d:23:3a:2a:fe:10:3e:ae:30:4f:cc:41: a0:5a:0e:91:e4:64:b8:26:0d:26:4f:2b:cf:fa:32:7b:a4:bf: 0a:30:6a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdn9D88lKkeqwxK4u3JaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi MzI1ZjQwHhcNMjUxMjI2MDcwMTM2WhcNMjUxMjI3MDcwMTM2WjAzMTEwLwYDVQQD EygyZTk2MGUxYTg0MDIwNDVmMzBhNDUzN2Q0ZmY2NzE3ZmY3ZDA0YjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34CpD+W6lZTCUrMcJiBoQFS7QWPP 2B/NrfgBab9BgEW/0Zu5ZjtCTxUmAW5KerCHKZV3za1y52CmLj2vq2Ccv03ud0oh 5nTxGnEeis2+BbiYxJ+6/JJnz566jplWzxWuXBr7L7WtZk/SJc5j4IEQJel787H2 hefLmy6BTwsuIbMNE1qBGvbu68h7swr91HmRHmakf3iN+ej86T6p8aPIVmFe6zDi NxmrO4GXpzmBzJabtjMz/O+zxAhpK+a6f168mjZPfJf5bWoYnJ2II+nPcZO/sNPx Db3z+Hvxy2nwDQM/IVuE+41uE727zbkwzMehRXrrgywDLrCBx60/2nYkgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6WDhqEAgRfMKRTfU/2cX/30EsVMB8GA1UdIwQY MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0 LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaIQ99Jk tTgxA80UtpZaspCymcto1kmdE+np4GXtLKQ3Jpm7n/4QLVflod/joiByFvLtcwMf X0HfmpvVJVke8EffK3ic0W9UHuvqwiL/QBK0QrlIEF+WnSmQ4u5foLTZQ0p5cVtx /PWG0NUicA5942u1ZLycGTXydQO+iNIRUDq1oLGFPUwauDexWAVwsgHwJfA8zD0/ W+4GCxWt6UogCSah6sAHpsfX4QMA0HQazIyyNGwaQMDL4mUEyCnx5ijaNoolEhJJ 9ubAJVu+A47OA6kYtFf4O8JU3RdrrWU0LSM6Kv4QPq4wT8xBoFoOkeRkuCYNJk8r z/oye6S/CjBq8g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:04 2025 by rpki-client