This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json) Hash identifier: eO3d3q2qpUX+Dr3vo7SNFe6vIQdBlgsn5CUYLbaVff8= Subject key identifier: 93:DE:06:C3:71:38:36:5B:41:45:26:E6:05:8B:99:5C:4C:0E:D5:12 Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Certificate serial: 019AF509F523D61A0D400902F9A169999492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 19:01:01 +0000 Manifest this update: Sat 06 Dec 2025 19:01:01 +0000 Manifest next update: Sun 07 Dec 2025 19:01:01 +0000 Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: 56jXqZWDQQEDq1qxJ18FSlGjjvMAIOPYwuO+p3ock60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f5:23:d6:1a:0d:40:09:02:f9:a1:69:99:94:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4 Validity Not Before: Dec 6 19:01:01 2025 GMT Not After : Dec 7 19:01:01 2025 GMT Subject: CN=93de06c37138365b414526e6058b995c4c0ed512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:c0:4f:dc:02:b5:b8:92:55:6a:d9:2f:bc: e2:9e:5f:47:d5:b1:42:ce:90:78:ae:73:d2:59:3a: a2:65:76:6b:9c:a3:d2:72:c6:7e:1a:e8:04:56:e3: 8a:ed:7c:ce:57:ee:3f:11:45:72:3a:30:a3:cf:1e: 0b:d5:3f:88:19:9b:fe:de:0b:69:a1:63:1f:5f:45: d0:e5:de:5f:d2:fa:e0:62:12:29:e5:27:05:68:33: b6:4c:1b:33:8c:da:77:c3:aa:53:90:6c:31:6a:65: 6f:90:3c:f5:46:94:98:b7:bd:98:a7:52:26:7d:1f: d4:06:20:32:cd:f8:81:c0:e8:e1:92:f0:f8:ac:15: 53:52:1d:4c:9d:ce:49:c2:30:d5:7e:ff:4e:7d:68: 9c:83:0f:35:f4:09:df:4c:95:b5:1e:af:64:f5:a1: 0a:dd:0b:e6:7a:79:4a:98:df:22:40:68:aa:73:41: 30:ab:bb:0b:2e:c0:9c:c4:35:03:16:8e:9f:2c:4e: f6:0e:f9:b1:f1:3b:ac:ed:ab:b9:01:ae:ff:de:c7: 8f:21:84:e1:31:9f:da:55:14:4d:4c:e5:79:9d:ea: 7b:13:83:99:50:b2:a4:76:d3:69:7d:69:9a:de:5e: 36:97:a6:81:25:c1:98:23:d9:b0:60:13:0f:f3:5d: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DE:06:C3:71:38:36:5B:41:45:26:E6:05:8B:99:5C:4C:0E:D5:12 X509v3 Authority Key Identifier: keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f3:8d:07:12:80:1d:a2:78:21:eb:08:b4:03:bf:a3:a2:9f: 56:22:c4:e0:17:47:b2:ef:e8:38:63:3f:b0:c5:90:f4:c1:25: 72:40:55:0f:8a:d1:40:35:16:0e:47:24:31:45:4c:85:4a:a3: 26:6c:0d:a9:0f:0b:21:12:9f:e2:26:fb:9b:dd:7e:89:0f:13: 65:2e:ba:fe:89:de:f8:e7:77:17:e5:ce:97:25:c0:28:60:fd: a7:a2:72:16:fc:a7:67:22:a5:5c:29:ee:73:a2:0d:79:fe:65: 5e:ea:89:4b:dc:50:bb:f9:21:39:ec:ae:1f:90:65:81:f9:66: 7e:d1:90:a8:ed:1b:8f:3d:4c:12:3e:c8:2d:a7:fe:f7:3f:ae: 22:8f:6b:aa:a0:58:48:57:a8:4e:30:3d:db:23:c7:bc:70:82: 1d:17:ae:12:a9:d6:df:9d:5e:c9:4f:26:cb:06:55:96:86:67: 3c:de:13:c4:1d:32:df:8d:42:d5:6a:0f:01:b2:b5:c7:a6:08: 02:bb:50:0d:df:c8:75:e8:34:45:b9:9b:ec:3a:f4:70:79:7e: 68:08:99:81:4e:f2:05:37:3f:fa:87:3c:6e:9b:95:84:a8:67: c8:7d:39:49:3f:d9:eb:59:6a:73:73:e6:4e:da:a0:1d:20:95: b4:4e:06:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfUj1hoNQAkC+aFpmZSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi MzI1ZjQwHhcNMjUxMjA2MTkwMTAxWhcNMjUxMjA3MTkwMTAxWjAzMTEwLwYDVQQD Eyg5M2RlMDZjMzcxMzgzNjViNDE0NTI2ZTYwNThiOTk1YzRjMGVkNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI/AT9wCtbiSVWrZL7zinl9H1bFC zpB4rnPSWTqiZXZrnKPScsZ+GugEVuOK7XzOV+4/EUVyOjCjzx4L1T+IGZv+3gtp oWMfX0XQ5d5f0vrgYhIp5ScFaDO2TBszjNp3w6pTkGwxamVvkDz1RpSYt72Yp1Im fR/UBiAyzfiBwOjhkvD4rBVTUh1Mnc5JwjDVfv9OfWicgw819AnfTJW1Hq9k9aEK 3QvmenlKmN8iQGiqc0Ewq7sLLsCcxDUDFo6fLE72Dvmx8Tus7au5Aa7/3sePIYTh MZ/aVRRNTOV5nep7E4OZULKkdtNpfWma3l42l6aBJcGYI9mwYBMP812bgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPeBsNxODZbQUUm5gWLmVxMDtUSMB8GA1UdIwQY MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0 LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPONBxKA HaJ4IesItAO/o6KfViLE4BdHsu/oOGM/sMWQ9MElckBVD4rRQDUWDkckMUVMhUqj JmwNqQ8LIRKf4ib7m91+iQ8TZS66/one+Od3F+XOlyXAKGD9p6JyFvynZyKlXCnu c6INef5lXuqJS9xQu/khOeyuH5BlgflmftGQqO0bjz1MEj7ILaf+9z+uIo9rqqBY SFeoTjA92yPHvHCCHReuEqnW351eyU8mywZVloZnPN4TxB0y341C1WoPAbK1x6YI ArtQDd/Ideg0Rbmb7Dr0cHl+aAiZgU7yBTc/+oc8bpuVhKhnyH05ST/Z61lqc3Pm TtqgHSCVtE4GsQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:09 2025 by rpki-client