This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: WcuhzX3tqlw8P8RKgCzdYpO8+4Lk7Gx6usZqkY3/tRA= Subject key identifier: C7:94:FA:19:F2:A6:76:41:DC:C8:43:0A:43:F8:D0:31:F5:67:B9:DF Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 7696C9531218B886896379027C43ED998C84B8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0282 Signing time: Tue 25 Nov 2025 18:12:43 +0000 Manifest this update: Tue 25 Nov 2025 18:07:43 +0000 Manifest next update: Wed 26 Nov 2025 19:34:43 +0000 Files and hashes: 1: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) 2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: KhCMkNVIwmLdoZM93M3bLTOeFcf/G4gorkdcmvzzXzM=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 19:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:96:c9:53:12:18:b8:86:89:63:79:02:7c:43:ed:99:8c:84:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Nov 25 18:07:43 2025 GMT Not After : Nov 26 19:34:43 2025 GMT Subject: CN=C794FA19F2A67641DCC8430A43F8D031F567B9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:7e:3b:4d:14:93:04:f3:3c:3b:48:69:9d: 22:ad:cc:24:c3:0a:e1:a8:09:70:2a:a8:e1:29:06: 85:0a:89:58:53:c7:a5:ce:1e:64:df:7e:46:5d:87: e5:9e:fd:da:03:12:f3:50:1a:0f:d6:99:9d:56:83: e2:a0:d4:88:20:68:07:56:d7:b8:b0:3d:4b:7d:93: af:8f:be:48:b8:88:b2:d3:dc:9a:e8:47:47:29:8a: a2:62:63:76:ca:69:b1:4a:1d:54:28:15:34:4b:99: 16:57:0b:0e:6e:af:73:a6:73:21:1e:59:18:24:ea: 27:44:96:a4:6a:96:4c:4f:53:58:8f:64:3b:b3:20: 02:cf:7b:c7:7c:7f:bd:31:8a:2d:41:9d:57:eb:87: 07:5e:77:3d:e0:7d:11:8b:16:44:54:b6:46:53:ff: 96:20:8e:75:fa:93:96:37:89:92:a6:6c:2b:70:cf: 1f:a4:84:d9:4c:41:53:4a:c5:a3:d5:bb:21:b8:cc: d8:f5:c2:62:db:8b:33:c4:81:f7:42:c6:2b:af:a6: 90:66:b2:d5:93:75:c2:e2:21:e9:3b:0a:be:12:ce: 1d:ee:5a:b4:61:06:b0:07:09:a2:3e:ab:28:08:4b: 00:6f:67:21:14:cd:78:27:47:ea:a5:7f:12:88:17: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:94:FA:19:F2:A6:76:41:DC:C8:43:0A:43:F8:D0:31:F5:67:B9:DF X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fa:78:6b:df:03:a3:6a:3b:5f:6f:b0:ec:1e:29:61:23:ff: 8c:fe:36:16:e0:07:48:23:99:63:25:8e:12:7d:d7:b3:9d:e2: 86:d7:ec:bb:a2:05:28:00:09:0d:ad:c1:b0:90:63:87:64:6e: 45:44:26:42:19:11:ac:f9:d6:5b:e7:e1:43:ba:92:7a:ee:e2: 4f:24:3d:d2:6b:2f:fd:43:bf:a0:a6:e5:51:84:0e:e5:08:95: 30:2c:20:e7:7a:56:75:4c:76:4c:d8:dd:cf:d2:77:14:99:99: 6f:23:6b:69:e5:9a:50:f0:ed:a3:9a:de:58:6c:2e:85:f5:dc: ac:1f:b6:a0:55:02:47:2a:3e:9d:7d:b8:4a:e4:2b:aa:86:49: d6:2f:bf:c2:f2:c7:b9:7a:a7:8a:27:bc:1f:24:3f:c0:16:a8: 05:e9:70:51:2f:e7:b0:21:b2:e8:c7:77:e2:d8:1d:ea:c8:6b: d6:e4:9b:14:5b:fd:5c:ff:c4:d4:d8:78:3a:03:42:2d:06:d2: 77:fd:95:6a:ff:eb:9a:b2:73:b6:48:a1:3e:33:b6:9f:95:d4: 4f:57:98:dd:b6:e1:35:53:de:38:e3:67:2f:10:b9:ed:fd:80: 65:8b:6e:7e:55:35:ad:e7:04:11:17:0f:34:5b:d1:36:17:a5: 7e:1b:c4:5e -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUdpbJUxIYuIaJY3kCfEPtmYyEuPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTExMjUxODA3NDNaFw0yNTExMjYxOTM0NDNaMDMxMTAvBgNV BAMTKEM3OTRGQTE5RjJBNjc2NDFEQ0M4NDMwQTQzRjhEMDMxRjU2N0I5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+347TRSTBPM8O0hpnSKtzCTD CuGoCXAqqOEpBoUKiVhTx6XOHmTffkZdh+We/doDEvNQGg/WmZ1Wg+Kg1IggaAdW 17iwPUt9k6+Pvki4iLLT3JroR0cpiqJiY3bKabFKHVQoFTRLmRZXCw5ur3OmcyEe WRgk6idElqRqlkxPU1iPZDuzIALPe8d8f70xii1BnVfrhwdedz3gfRGLFkRUtkZT /5YgjnX6k5Y3iZKmbCtwzx+khNlMQVNKxaPVuyG4zNj1wmLbizPEgfdCxiuvppBm stWTdcLiIek7Cr4Szh3uWrRhBrAHCaI+qygISwBvZyEUzXgnR+qlfxKIF/KfAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUx5T6GfKmdkHcyEMKQ/jQMfVnud8wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG36eGvfA6NqO19vsOweKWEj /4z+NhbgB0gjmWMljhJ917Od4obX7LuiBSgACQ2twbCQY4dkbkVEJkIZEaz51lvn 4UO6knru4k8kPdJrL/1Dv6Cm5VGEDuUIlTAsIOd6VnVMdkzY3c/SdxSZmW8ja2nl mlDw7aOa3lhsLoX13KwftqBVAkcqPp19uErkK6qGSdYvv8Lyx7l6p4onvB8kP8AW qAXpcFEv57AhsujHd+LYHerIa9bkmxRb/Vz/xNTYeDoDQi0G0nf9lWr/65qyc7ZI oT4ztp+V1E9XmN224TVT3jjjZy8Que39gGWLbn5VNa3nBBEXDzRb0TYXpX4bxF4= -----END CERTIFICATE-----Generated at Wed Nov 26 12:29:43 2025 by rpki-client