This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          jqqGZlEong8f2V3/12Qh0KiXEg0x4uON4iCaHBGersk=
Subject key identifier:   88:0C:8A:EB:57:63:56:7D:BC:8E:89:45:6E:CE:75:D5:54:0E:5C:EF
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       019C2DE4BD37BABE24E07DCDFED1D6AA2143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          1808
Signing time:             Thu 05 Feb 2026 13:01:31 +0000
Manifest this update:     Thu 05 Feb 2026 13:01:31 +0000
Manifest next update:     Fri 06 Feb 2026 13:01:31 +0000
Files and hashes:         1: 5WlkBW9jzB02ilWwcESnZBhBZcw.roa (hash: BeHCp8no7SRXOueP/j4ph7p2OgVkylIBkA/kOhEkKPk=)
                          2: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: ggxKWnto6WItaZfddqhGiuszns9NeEZd0yzy8s/pkz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:e4:bd:37:ba:be:24:e0:7d:cd:fe:d1:d6:aa:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Feb  5 13:01:31 2026 GMT
            Not After : Feb  6 13:01:31 2026 GMT
        Subject: CN=880c8aeb5763567dbc8e89456ece75d5540e5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:03:38:a7:fc:af:91:e9:96:cd:f2:fb:fa:
                    eb:c0:19:a2:4e:6d:ca:26:b5:4a:17:ca:6e:3c:d7:
                    86:d7:d6:89:ee:99:4e:a1:c2:55:a7:cf:fe:ab:ca:
                    ae:27:e2:10:98:b4:be:a1:37:07:db:c2:fe:71:1b:
                    d9:7b:f0:ed:16:35:f6:dd:25:6b:f8:de:72:df:a2:
                    f2:2e:b5:be:4d:a0:f3:64:cd:3d:a9:1a:43:a1:f2:
                    a6:e0:d3:a0:80:e4:3d:55:9a:0a:c7:8c:77:ea:53:
                    de:e6:b5:9b:60:11:80:4f:15:af:52:0f:28:a9:2f:
                    3a:85:b1:d0:53:80:70:f7:42:1b:6e:a8:2d:4f:d0:
                    ea:ba:e3:28:bd:2e:fc:23:72:a5:95:71:cd:d2:28:
                    37:78:0a:27:4e:b5:08:ae:b4:8a:86:7e:aa:78:c2:
                    b1:2e:aa:3b:b2:e7:95:18:34:f6:48:2a:a6:a3:dc:
                    9a:ae:19:5d:23:9b:31:5f:c0:97:02:c4:f1:d4:ad:
                    5a:52:a3:99:46:ca:8a:04:94:38:a9:5b:5f:44:af:
                    3b:5f:60:a4:f6:d3:37:07:06:c5:d5:8d:67:65:41:
                    4b:15:93:8f:10:1d:a8:45:f7:03:60:38:4a:fa:3d:
                    e7:88:68:78:e6:00:e0:d3:97:0e:29:62:fc:45:1e:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0C:8A:EB:57:63:56:7D:BC:8E:89:45:6E:CE:75:D5:54:0E:5C:EF
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:9e:aa:25:6b:df:f7:5f:1c:50:d4:67:95:01:64:18:39:
         a4:af:90:66:57:60:2b:72:bb:f3:85:0c:27:aa:f7:b7:6a:77:
         d6:8b:45:28:04:8b:60:64:96:c7:1c:d3:ab:89:5f:b8:e3:5d:
         65:37:70:91:27:e4:cb:e9:72:5e:6b:20:ad:87:8b:fa:82:6f:
         59:f9:82:70:5b:38:0e:c2:bb:c4:14:d4:a4:90:6f:a5:cb:9f:
         29:76:af:62:1a:a1:91:1d:86:62:4b:19:3f:2c:ad:52:df:eb:
         74:49:22:b5:b8:43:4c:a5:4e:c2:01:7e:d1:27:67:98:01:b6:
         e3:a9:80:4d:c6:d8:cc:6f:0f:09:55:52:df:4a:07:6d:ed:56:
         87:e4:1f:d0:f9:d4:cc:db:9c:8d:1a:89:7d:66:54:79:01:dc:
         ef:2a:15:6f:37:07:85:cc:02:af:06:4a:64:c0:88:1f:29:70:
         fe:46:05:32:5b:b0:cf:e6:46:fa:9e:c8:5d:20:c3:a1:51:b5:
         6f:36:1b:35:f5:39:d8:a2:6f:86:71:b2:89:09:7c:b3:7d:4d:
         fb:ef:a5:62:41:30:fa:a3:64:a5:f9:e5:f4:02:78:c2:bc:ad:
         f4:05:3f:f6:f2:a3:b0:45:cb:e0:8b:7b:ef:68:52:53:ce:33:
         b8:f9:8f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwt5L03ur4k4H3N/tHWqiFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWZkMTM4ZjEwMmQ3ZGNiMTU4M2I0NDk0MTAyZjBmZTU4
N2U0NWQwHhcNMjYwMjA1MTMwMTMxWhcNMjYwMjA2MTMwMTMxWjAzMTEwLwYDVQQD
Eyg4ODBjOGFlYjU3NjM1NjdkYmM4ZTg5NDU2ZWNlNzVkNTU0MGU1Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosEDOKf8r5Hpls3y+/rrwBmiTm3K
JrVKF8puPNeG19aJ7plOocJVp8/+q8quJ+IQmLS+oTcH28L+cRvZe/DtFjX23SVr
+N5y36LyLrW+TaDzZM09qRpDofKm4NOggOQ9VZoKx4x36lPe5rWbYBGATxWvUg8o
qS86hbHQU4Bw90IbbqgtT9DquuMovS78I3KllXHN0ig3eAonTrUIrrSKhn6qeMKx
Lqo7sueVGDT2SCqmo9yarhldI5sxX8CXAsTx1K1aUqOZRsqKBJQ4qVtfRK87X2Ck
9tM3BwbF1Y1nZUFLFZOPEB2oRfcDYDhK+j3niGh45gDg05cOKWL8RR6cMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgMiutXY1Z9vI6JRW7OddVUDlzvMB8GA1UdIwQY
MBaAFD4f0TjxAtfcsVg7RJQQLw/lh+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTIt
YzU5ZTk0YmZmNzQzLzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTItYzU5ZTk0YmZmNzQz
LzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKWeqiVr
3/dfHFDUZ5UBZBg5pK+QZldgK3K784UMJ6r3t2p31otFKASLYGSWxxzTq4lfuONd
ZTdwkSfky+lyXmsgrYeL+oJvWfmCcFs4DsK7xBTUpJBvpcufKXavYhqhkR2GYksZ
PyytUt/rdEkitbhDTKVOwgF+0SdnmAG246mATcbYzG8PCVVS30oHbe1Wh+Qf0PnU
zNucjRqJfWZUeQHc7yoVbzcHhcwCrwZKZMCIHylw/kYFMluwz+ZG+p7IXSDDoVG1
bzYbNfU52KJvhnGyiQl8s31N+++lYkEw+qNkpfnl9AJ4wryt9AU/9vKjsEXL4It7
72hSU84zuPmPDw==
-----END CERTIFICATE-----
Generated at Thu Feb 5 18:33:13 2026 by rpki-client