This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft File: Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json) Hash identifier: /i1LZNBxuRPqMR/69LnZand5hDKHJQo45b4ewcPxUZo= Subject key identifier: A0:68:9D:45:2F:34:7D:0E:23:C7:5D:9B:DE:67:DF:DD:B3:73:96:C9 Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D Certificate issuer: /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d Certificate serial: 019B1C854782A903A1A13D3D3A0DD6672B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 11:00:55 +0000 Manifest this update: Sun 14 Dec 2025 11:00:55 +0000 Manifest next update: Mon 15 Dec 2025 11:00:55 +0000 Files and hashes: 1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: V/KTruMqZh2nPatqgRVxg4N8dFFwSQEFxYCuZaZ7JQo=) 2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:47:82:a9:03:a1:a1:3d:3d:3a:0d:d6:67:2b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d Validity Not Before: Dec 14 11:00:55 2025 GMT Not After : Dec 15 11:00:55 2025 GMT Subject: CN=a0689d452f347d0e23c75d9bde67dfddb37396c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:bd:01:65:92:3b:50:e5:fe:1c:91:6a:4a: 4b:be:85:4a:77:bd:1a:e6:91:fa:cd:a1:86:f3:57: 18:ca:94:f8:49:e9:c0:61:5e:2e:fe:34:3c:2f:15: 02:75:51:d4:a5:93:b9:d0:54:cb:0b:20:d1:77:af: a9:23:1c:0c:93:90:20:01:c0:b5:d8:5b:45:dc:48: b8:18:94:83:ce:ef:90:72:3f:c8:66:5b:0c:23:ad: b4:60:10:98:d3:76:e3:a5:62:80:47:1e:8b:7f:26: 70:46:8d:d7:b4:ab:e7:13:b1:a2:2a:8a:7c:53:88: 0d:8f:08:31:45:e3:60:a6:a7:85:8a:4a:d9:e0:4f: c0:43:d9:50:15:f5:71:84:09:44:ab:79:9c:c9:62: dc:39:57:cd:60:ce:1e:45:ec:48:46:2b:e7:93:50: fc:c9:d4:a7:ca:cf:65:90:0b:03:76:65:85:29:ab: c7:a4:63:a3:f0:fd:b6:f5:5b:d8:de:19:bc:50:cb: 38:d7:35:dd:2a:de:7a:cb:57:54:40:93:f3:28:a0: e0:1f:ea:ec:04:6c:82:a4:65:2d:22:e3:36:cf:f3: 6e:4d:c4:66:dc:dc:52:cf:45:d0:0e:2a:66:59:40: b0:8b:f2:bf:17:6b:5e:52:7f:fb:3d:e2:c2:82:1c: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:68:9D:45:2F:34:7D:0E:23:C7:5D:9B:DE:67:DF:DD:B3:73:96:C9 X509v3 Authority Key Identifier: keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:34:97:08:b6:89:67:0d:0d:18:8f:fc:b2:3a:a9:5e:3d: 45:a0:23:8e:46:45:b5:e9:27:b6:fb:d6:d7:52:f4:4d:43:d0: 3e:7e:77:60:62:42:1b:86:55:0c:8a:e3:6e:97:f2:86:6f:99: ff:3c:ec:60:8c:a1:95:bc:65:d1:8b:0e:c6:71:7a:58:87:32: c9:c3:9d:73:f2:69:04:cb:df:8e:10:95:95:9a:ef:f2:4f:d2: a2:12:59:bf:6c:0f:83:9c:b8:af:8c:66:bc:15:fc:1f:10:1d: d5:2a:ee:96:68:aa:02:c2:e6:f7:ae:ba:0d:46:68:6c:c0:bb: 0f:03:98:ca:c5:e9:95:09:c8:00:ea:5b:48:58:83:66:55:75: 96:4d:0a:51:e0:41:28:62:33:f5:a1:d4:e6:64:4d:59:b7:a8: 66:5b:01:06:4a:6f:82:f1:a5:c5:98:a0:40:f8:57:f6:11:b9: 97:f1:20:76:b8:f1:aa:26:fd:c0:af:14:50:d7:d2:97:e8:c6: 7a:51:88:d7:97:08:7d:a6:4c:29:19:bc:ed:1c:56:9f:b1:12: a3:b7:90:dc:c4:6f:e7:d6:8a:36:8c:48:d3:55:01:19:25:55: 43:f8:6b:b5:c0:bc:24:9d:e8:57:d1:db:5a:62:1d:55:54:f2: 6d:8f:15:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschUeCqQOhoT09Og3WZytQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWZkMTM4ZjEwMmQ3ZGNiMTU4M2I0NDk0MTAyZjBmZTU4 N2U0NWQwHhcNMjUxMjE0MTEwMDU1WhcNMjUxMjE1MTEwMDU1WjAzMTEwLwYDVQQD EyhhMDY4OWQ0NTJmMzQ3ZDBlMjNjNzVkOWJkZTY3ZGZkZGIzNzM5NmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoG9AWWSO1Dl/hyRakpLvoVKd70a 5pH6zaGG81cYypT4SenAYV4u/jQ8LxUCdVHUpZO50FTLCyDRd6+pIxwMk5AgAcC1 2FtF3Ei4GJSDzu+Qcj/IZlsMI620YBCY03bjpWKARx6LfyZwRo3XtKvnE7GiKop8 U4gNjwgxReNgpqeFikrZ4E/AQ9lQFfVxhAlEq3mcyWLcOVfNYM4eRexIRivnk1D8 ydSnys9lkAsDdmWFKavHpGOj8P229VvY3hm8UMs41zXdKt56y1dUQJPzKKDgH+rs BGyCpGUtIuM2z/NuTcRm3NxSz0XQDipmWUCwi/K/F2teUn/7PeLCghwN9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBonUUvNH0OI8ddm95n392zc5bJMB8GA1UdIwQY MBaAFD4f0TjxAtfcsVg7RJQQLw/lh+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTIt YzU5ZTk0YmZmNzQzLzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTItYzU5ZTk0YmZmNzQz LzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrw0lwi2 iWcNDRiP/LI6qV49RaAjjkZFtekntvvW11L0TUPQPn53YGJCG4ZVDIrjbpfyhm+Z /zzsYIyhlbxl0YsOxnF6WIcyycOdc/JpBMvfjhCVlZrv8k/SohJZv2wPg5y4r4xm vBX8HxAd1SrulmiqAsLm9666DUZobMC7DwOYysXplQnIAOpbSFiDZlV1lk0KUeBB KGIz9aHU5mRNWbeoZlsBBkpvgvGlxZigQPhX9hG5l/Egdrjxqib9wK8UUNfSl+jG elGI15cIfaZMKRm87RxWn7ESo7eQ3MRv59aKNoxI01UBGSVVQ/hrtcC8JJ3oV9Hb WmIdVVTybY8Vvw== -----END CERTIFICATE-----Generated at Sun Dec 14 17:24:26 2025 by rpki-client