This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: dwmCilNxY5WffVrsrFGSaWjUm/Pqp61V2nM9EKoE88Q= Subject key identifier: 87:91:1C:33:A9:7E:8F:B6:0A:52:04:FF:78:3D:A6:5D:2C:5D:DC:CE Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 48AB8A6AAAB65B30484967EA42D34DEE2A8B9990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 029F Signing time: Wed 17 Dec 2025 12:46:09 +0000 Manifest this update: Wed 17 Dec 2025 12:41:09 +0000 Manifest next update: Thu 18 Dec 2025 15:40:09 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: NLcBjqramgdMHvQEUNCDcbp/kRslUvTJxX9UKtbTM8w=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ab:8a:6a:aa:b6:5b:30:48:49:67:ea:42:d3:4d:ee:2a:8b:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 17 12:41:09 2025 GMT Not After : Dec 18 15:40:09 2025 GMT Subject: CN=87911C33A97E8FB60A5204FF783DA65D2C5DDCCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:83:77:1b:24:18:f8:04:0b:58:14:85:78: d1:5d:47:11:dc:4d:e8:1b:ba:d4:94:f4:59:86:59: a6:c1:81:ed:e4:e8:0e:12:3d:64:1b:31:18:d9:6a: ff:d6:46:ea:9d:7e:e3:7e:4d:7e:6f:98:9a:06:c9: 34:07:ec:49:27:33:7d:f7:3a:85:a6:11:35:f9:52: af:f8:11:55:95:de:7f:68:7f:07:ac:3e:b3:ed:5d: 28:f5:60:8e:aa:64:fb:4b:db:22:2d:4a:da:d3:f0: f0:c9:cd:e3:3f:5c:bc:81:24:ae:aa:8e:64:b9:0c: 76:72:e3:e9:bb:da:74:3e:d0:36:2e:21:15:f5:7d: 4a:9f:68:41:d2:91:45:41:72:62:f0:fd:ee:80:e3: a4:41:48:0d:06:40:6a:10:13:20:c6:0b:01:d2:53: 35:0f:a6:02:0d:49:dd:2c:76:d9:88:25:ce:43:61: 93:72:44:d0:ed:29:ab:d4:f7:38:d2:2e:f4:e4:8b: 9d:81:b3:d1:4a:9a:61:8c:ff:1e:05:cb:e0:56:fd: 4d:cd:e4:1b:30:20:bb:66:14:35:46:1a:05:6b:56: 9b:aa:e9:69:5f:65:3e:c4:d0:6d:05:b4:8a:0c:81: f8:81:20:df:26:0b:ba:4a:14:b3:65:d3:9b:c8:cd: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:91:1C:33:A9:7E:8F:B6:0A:52:04:FF:78:3D:A6:5D:2C:5D:DC:CE X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8c:36:62:70:1b:2e:07:d1:f4:3c:f2:07:46:ca:18:14:64: 94:eb:19:42:34:f6:4d:8e:ab:bd:69:ef:09:c1:c4:c7:24:36: a0:85:46:b8:2d:1a:64:5d:b0:a5:27:b8:52:f4:3e:ef:5f:bc: cb:e2:c1:cb:08:a0:8a:9d:11:14:20:8f:6c:e9:94:9d:cb:e4: 67:2f:ae:47:56:d4:ab:cf:c0:9a:b9:e2:7e:e1:1f:7f:ae:e6: e3:5c:66:0b:42:1f:31:49:a0:6c:b6:67:af:f3:a9:d4:a4:5a: d8:41:fb:3a:cd:56:e9:cc:26:e2:06:54:29:ff:ca:8d:ff:d0: a7:97:66:e7:04:ff:61:e2:e4:3e:90:99:58:42:7b:df:40:e1: 2a:bc:77:0d:2b:ae:26:f8:3f:7f:5d:dc:b3:0a:29:b9:52:a8: 24:b2:90:cb:42:19:6f:72:cd:fd:13:4b:c1:30:b7:76:dd:2f: 23:62:92:c5:08:ed:b0:ee:d9:f8:7d:e0:a2:01:2f:54:9c:c8: ca:03:11:51:fd:83:9c:f9:9d:46:bf:b9:7e:70:5e:a3:1c:f2: 05:7f:fe:dd:a1:21:43:cd:5c:40:df:f6:6f:8c:1a:f2:12:49: cd:fd:18:8b:61:a5:16:1c:8a:23:69:92:36:66:d1:37:2c:82: 2d:89:57:85 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUSKuKaqq2WzBISWfqQtNN7iqLmZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTcxMjQxMDlaFw0yNTEyMTgxNTQwMDlaMDMxMTAvBgNV BAMTKDg3OTExQzMzQTk3RThGQjYwQTUyMDRGRjc4M0RBNjVEMkM1RERDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H4N3GyQY+AQLWBSFeNFdRxHc TegbutSU9FmGWabBge3k6A4SPWQbMRjZav/WRuqdfuN+TX5vmJoGyTQH7EknM333 OoWmETX5Uq/4EVWV3n9ofwesPrPtXSj1YI6qZPtL2yItStrT8PDJzeM/XLyBJK6q jmS5DHZy4+m72nQ+0DYuIRX1fUqfaEHSkUVBcmLw/e6A46RBSA0GQGoQEyDGCwHS UzUPpgINSd0sdtmIJc5DYZNyRNDtKavU9zjSLvTki52Bs9FKmmGM/x4Fy+BW/U3N 5BswILtmFDVGGgVrVpuq6WlfZT7E0G0FtIoMgfiBIN8mC7pKFLNl05vIzbOZAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUh5EcM6l+j7YKUgT/eD2mXSxd3M4wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABGMNmJwGy4H0fQ88gdGyhgU ZJTrGUI09k2Oq71p7wnBxMckNqCFRrgtGmRdsKUnuFL0Pu9fvMviwcsIoIqdERQg j2zplJ3L5GcvrkdW1KvPwJq54n7hH3+u5uNcZgtCHzFJoGy2Z6/zqdSkWthB+zrN VunMJuIGVCn/yo3/0KeXZucE/2Hi5D6QmVhCe99A4Sq8dw0rrib4P39d3LMKKblS qCSykMtCGW9yzf0TS8Ewt3bdLyNiksUI7bDu2fh94KIBL1ScyMoDEVH9g5z5nUa/ uX5wXqMc8gV//t2hIUPNXEDf9m+MGvISSc39GIthpRYciiNpkjZm0Tcsgi2JV4U= -----END CERTIFICATE-----Generated at Thu Dec 18 05:39:59 2025 by rpki-client