This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: qk+hIscjE5yZZcvBtNygSfue4z5yZOmAECJMWQAUpPk= Subject key identifier: 91:A6:6F:B7:C6:46:78:11:CE:7C:42:1C:AA:35:F3:C8:34:B9:9A:BE Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 6693A0223BA8DB4BA4391DEBE15777825AC7D2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0297 Signing time: Thu 11 Dec 2025 15:40:14 +0000 Manifest this update: Thu 11 Dec 2025 15:35:14 +0000 Manifest next update: Fri 12 Dec 2025 16:41:14 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: kA3zVYNhh+VpgchW5IRugjkP5HA71Kxyd3SYiVudehg=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:93:a0:22:3b:a8:db:4b:a4:39:1d:eb:e1:57:77:82:5a:c7:d2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 11 15:35:14 2025 GMT Not After : Dec 12 16:41:14 2025 GMT Subject: CN=91A66FB7C6467811CE7C421CAA35F3C834B99ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:7e:68:e6:81:cb:89:70:97:ff:11:c6:5b: 75:22:61:ee:87:6a:a9:35:3b:63:68:03:50:aa:ee: 64:00:c3:52:e1:0a:9f:f5:b6:7d:0b:06:4d:a6:29: da:e0:77:07:93:03:8d:2b:17:38:ae:54:81:7c:71: ab:66:97:7c:32:5d:bc:33:db:e9:8b:7e:14:e9:c3: 67:bf:5f:4e:1c:f6:c7:89:55:e0:d6:cd:a5:23:05: 75:94:f1:70:8a:00:0f:40:ac:8f:69:30:01:30:6e: 01:52:ef:56:0f:cf:67:6a:07:87:61:eb:36:b7:a0: 29:1d:d6:dc:cc:3b:25:36:23:b7:ed:85:c3:e1:ff: 87:18:85:b9:7f:bf:04:94:c4:29:e4:29:d5:20:0b: 45:f4:88:77:04:6e:b3:23:a1:29:3b:ef:c1:d5:c2: a6:6d:24:66:d1:79:1d:ff:81:d3:3c:72:89:b2:f9: 6b:31:d5:cf:a4:c4:29:00:a8:66:9e:01:bd:05:4b: e6:b0:43:fd:77:45:a5:b8:9a:4c:3a:a5:ac:77:8b: 7b:a1:09:8a:80:f2:cb:5e:28:d8:d0:03:26:a5:12: 60:80:9c:e9:f1:61:05:88:af:95:c2:dd:f4:17:92: 38:1c:91:fb:b0:1c:e6:a6:07:a0:fb:98:7f:d1:25: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:6F:B7:C6:46:78:11:CE:7C:42:1C:AA:35:F3:C8:34:B9:9A:BE X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ad:a2:0c:d5:80:3d:c3:80:2a:b7:56:ef:2c:19:48:65:b8: fc:f6:96:cd:2a:41:e1:4d:99:e6:1f:c6:0f:73:78:71:dc:41: 6d:e3:64:cf:7d:f5:7a:50:02:94:45:a6:78:8c:1b:26:c2:25: 9c:6d:eb:96:35:81:a6:e0:ec:fb:ea:af:0c:cb:55:75:53:55: 81:e6:f6:01:e6:24:74:45:6b:aa:e9:1a:f3:5b:5a:44:c2:20: c1:eb:40:a3:df:f7:3f:7a:d9:15:16:b5:d6:5e:25:ab:4a:cb: 95:73:01:1f:b7:5d:74:0e:a9:b8:9f:02:83:7b:a1:9a:e0:52: f1:2e:03:ff:75:2c:f6:ff:a0:31:3c:d2:59:b6:85:c1:a4:4e: 14:de:4a:ee:5c:0c:45:0b:e0:a4:48:3e:57:95:ec:91:1c:44: c6:12:74:fc:c1:db:37:b6:b0:e5:7d:70:86:44:11:81:57:1a: a2:dd:61:e3:c8:c9:1e:6a:b8:88:39:3d:be:8c:50:ca:1c:63: 93:5f:d2:f4:e6:63:d0:1c:b7:fc:72:fe:5d:70:8e:a9:4a:69: 39:a8:f9:89:f7:60:99:e5:d7:e1:02:07:bd:00:ed:6f:ef:64: 21:88:a6:51:b3:be:92:f8:bf:70:cb:fe:71:3d:29:0b:7a:ac: ad:af:06:da -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUZpOgIjuo20ukOR3r4Vd3glrH0skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTExNTM1MTRaFw0yNTEyMTIxNjQxMTRaMDMxMTAvBgNV BAMTKDkxQTY2RkI3QzY0Njc4MTFDRTdDNDIxQ0FBMzVGM0M4MzRCOTlBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4n5o5oHLiXCX/xHGW3UiYe6H aqk1O2NoA1Cq7mQAw1LhCp/1tn0LBk2mKdrgdweTA40rFziuVIF8catml3wyXbwz 2+mLfhTpw2e/X04c9seJVeDWzaUjBXWU8XCKAA9ArI9pMAEwbgFS71YPz2dqB4dh 6za3oCkd1tzMOyU2I7fthcPh/4cYhbl/vwSUxCnkKdUgC0X0iHcEbrMjoSk778HV wqZtJGbReR3/gdM8comy+Wsx1c+kxCkAqGaeAb0FS+awQ/13RaW4mkw6pax3i3uh CYqA8steKNjQAyalEmCAnOnxYQWIr5XC3fQXkjgckfuwHOamB6D7mH/RJXYBAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUkaZvt8ZGeBHOfEIcqjXzyDS5mr4wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIOtogzVgD3DgCq3Vu8sGUhl uPz2ls0qQeFNmeYfxg9zeHHcQW3jZM999XpQApRFpniMGybCJZxt65Y1gabg7Pvq rwzLVXVTVYHm9gHmJHRFa6rpGvNbWkTCIMHrQKPf9z962RUWtdZeJatKy5VzAR+3 XXQOqbifAoN7oZrgUvEuA/91LPb/oDE80lm2hcGkThTeSu5cDEUL4KRIPleV7JEc RMYSdPzB2ze2sOV9cIZEEYFXGqLdYePIyR5quIg5Pb6MUMocY5Nf0vTmY9Act/xy /l1wjqlKaTmo+Yn3YJnl1+ECB70A7W/vZCGIplGzvpL4v3DL/nE9KQt6rK2vBto= -----END CERTIFICATE-----Generated at Thu Dec 11 20:15:30 2025 by rpki-client