This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: f7a7YjLmpUSrTHYJWrkuKlr2FksQZIxurKaGLoATos0= Subject key identifier: 16:D4:B4:50:3E:97:D2:93:F0:70:87:54:C6:8E:03:17:19:DB:68:E5 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 3BCD771DD32EB193F9053E1426D70C9D5E01B854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 029B Signing time: Sun 14 Dec 2025 14:00:08 +0000 Manifest this update: Sun 14 Dec 2025 13:55:08 +0000 Manifest next update: Mon 15 Dec 2025 15:52:08 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: 8dRX2yaxP5zzo131G9VvLdZ3qY1vg1IgN1TCj8nYPug=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 15:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cd:77:1d:d3:2e:b1:93:f9:05:3e:14:26:d7:0c:9d:5e:01:b8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 14 13:55:08 2025 GMT Not After : Dec 15 15:52:08 2025 GMT Subject: CN=16D4B4503E97D293F0708754C68E031719DB68E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:5a:e7:33:cf:88:09:ca:45:a8:71:1f:08: 13:3f:26:e6:5d:f3:37:00:7c:50:cd:0c:a0:99:75: 18:e6:38:78:f8:ba:2a:7c:3b:42:5f:19:46:91:3f: ee:af:33:e7:b1:ac:14:46:83:0a:dc:16:7e:c9:0c: ef:6d:8a:3c:d3:a5:38:4e:cd:e9:83:ee:64:34:30: 0b:c4:09:d7:57:cb:c1:90:b6:b4:56:f5:4c:de:f5: 04:bb:e4:0f:f9:15:51:6d:c4:df:c5:25:9c:e4:33: 3b:a9:2a:f5:6e:05:d7:04:df:01:55:8b:8c:9a:ed: 39:b1:a9:3c:8d:4f:47:fe:b5:69:fe:69:6b:24:d3: ed:3d:a4:1d:23:1d:86:ef:00:60:f0:91:73:96:bb: 73:ce:49:98:83:fb:fc:1a:1f:73:79:05:14:45:4d: 3e:5b:6b:ec:11:9d:62:50:03:0e:12:7f:13:5a:42: eb:93:33:d5:b2:03:c5:3b:79:d5:5d:6d:b2:31:96: ff:29:c8:cb:b3:9e:21:3c:72:bd:18:23:09:a8:53: 13:0b:cd:99:8a:c3:7e:36:bf:b1:e9:9f:00:ed:40: 77:a9:01:45:ee:42:74:7b:5e:5c:83:8d:88:a7:b5: a9:5a:9e:0f:b9:95:bc:01:88:cf:1a:b3:93:7b:78: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D4:B4:50:3E:97:D2:93:F0:70:87:54:C6:8E:03:17:19:DB:68:E5 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ee:9a:57:01:03:e0:2b:8f:52:47:0d:d9:a4:86:5d:cc:5f: 7f:cd:1d:16:fd:24:06:84:cc:6d:5f:88:47:76:8b:ba:ff:a0: a2:b8:00:9f:f8:28:1b:10:fe:f3:9d:76:ba:a0:f1:bf:6f:3c: e3:bd:80:14:34:44:b5:e4:47:57:8f:c2:3e:1a:33:b7:59:0a: 22:3c:9f:01:48:ed:b5:77:8b:49:14:17:bc:fa:0d:48:37:1f: e2:6b:f3:47:b3:a7:79:18:51:fb:c9:04:92:4a:80:e1:8e:ec: 33:93:d8:82:9f:2c:bc:92:7a:6c:07:c6:56:3c:a2:4d:0f:45: 67:ad:99:54:82:d2:1e:00:97:73:1b:9e:83:0f:69:5a:22:64: e2:2f:c6:9b:9b:70:86:72:79:69:1d:89:9f:21:cd:02:c7:4a: 7d:38:28:32:fc:e5:e3:3e:1c:b3:4d:fe:e1:d4:98:d2:4e:4c: b4:f5:37:ee:b8:80:db:93:b9:d3:50:4e:52:ee:c5:79:7b:b8: 05:47:22:74:89:4d:34:11:d0:a6:18:f3:f9:d9:de:1f:57:ea: 20:32:b8:0e:d3:1f:84:7f:af:25:d8:9d:1c:ed:3b:1c:65:cc: 65:b9:c3:d8:d5:46:f4:88:17:f8:4f:2f:f6:3a:8f:7f:1a:ff: eb:32:f7:4a -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUO813HdMusZP5BT4UJtcMnV4BuFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTQxMzU1MDhaFw0yNTEyMTUxNTUyMDhaMDMxMTAvBgNV BAMTKDE2RDRCNDUwM0U5N0QyOTNGMDcwODc1NEM2OEUwMzE3MTlEQjY4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4FrnM8+ICcpFqHEfCBM/JuZd 8zcAfFDNDKCZdRjmOHj4uip8O0JfGUaRP+6vM+exrBRGgwrcFn7JDO9tijzTpThO zemD7mQ0MAvECddXy8GQtrRW9Uze9QS75A/5FVFtxN/FJZzkMzupKvVuBdcE3wFV i4ya7TmxqTyNT0f+tWn+aWsk0+09pB0jHYbvAGDwkXOWu3POSZiD+/waH3N5BRRF TT5ba+wRnWJQAw4SfxNaQuuTM9WyA8U7edVdbbIxlv8pyMuzniE8cr0YIwmoUxML zZmKw342v7HpnwDtQHepAUXuQnR7XlyDjYintalang+5lbwBiM8as5N7eCldAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUFtS0UD6X0pPwcIdUxo4DFxnbaOUwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJTumlcBA+Arj1JHDdmkhl3M X3/NHRb9JAaEzG1fiEd2i7r/oKK4AJ/4KBsQ/vOddrqg8b9vPOO9gBQ0RLXkR1eP wj4aM7dZCiI8nwFI7bV3i0kUF7z6DUg3H+Jr80ezp3kYUfvJBJJKgOGO7DOT2IKf LLySemwHxlY8ok0PRWetmVSC0h4Al3MbnoMPaVoiZOIvxpubcIZyeWkdiZ8hzQLH Sn04KDL85eM+HLNN/uHUmNJOTLT1N+64gNuTudNQTlLuxXl7uAVHInSJTTQR0KYY 8/nZ3h9X6iAyuA7TH4R/ryXYnRztOxxlzGW5w9jVRvSIF/hPL/Y6j38a/+sy90o= -----END CERTIFICATE-----Generated at Mon Dec 15 04:32:22 2025 by rpki-client