This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: z0vwcesZY+eQyoFOA+YfTj9QTS3H85LQfDo+0kmQkmc= Subject key identifier: 68:9D:37:03:86:10:93:9A:62:25:94:EB:F6:EB:9F:83:46:39:99:E3 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 1F90E27E2C039B711405370D1BAC8E08F2BEC72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0291 Signing time: Sun 07 Dec 2025 00:15:09 +0000 Manifest this update: Sun 07 Dec 2025 00:10:09 +0000 Manifest next update: Mon 08 Dec 2025 03:41:09 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: WuD87WBWDWx/utDxOURdvOVJL8fXk2upthKOg0yh9g8=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:90:e2:7e:2c:03:9b:71:14:05:37:0d:1b:ac:8e:08:f2:be:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 7 00:10:09 2025 GMT Not After : Dec 8 03:41:09 2025 GMT Subject: CN=689D37038610939A622594EBF6EB9F83463999E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:23:32:f3:e9:5f:d2:bc:56:27:fe:7e:3d: 84:58:87:76:0d:1c:bd:46:3e:c8:09:b5:6a:28:fc: 44:34:3f:39:8f:14:5a:80:93:b4:2d:0a:46:57:fe: f2:86:7b:37:d0:ff:5f:e9:13:bd:3b:62:fc:97:a2: e8:c0:e4:17:89:82:80:6a:1c:46:0b:56:71:75:2a: 07:aa:82:b1:29:a7:b7:a5:0c:a3:11:10:ee:88:64: 12:82:c5:5c:07:b1:22:22:7d:da:d1:e4:af:87:5c: ea:2b:31:d9:fa:35:e9:c9:4b:77:63:3b:09:71:b2: b1:be:b4:ee:bc:13:40:0f:80:30:86:2a:8a:9d:5e: 30:41:b2:3c:95:61:25:1d:3c:99:6d:b9:60:72:bb: 04:55:ec:46:7a:1f:16:5d:e8:e3:5e:6c:5b:56:de: b8:b9:08:36:e9:94:95:0e:e0:3d:ac:65:d6:52:04: 9c:64:55:3d:73:c2:ae:ff:6c:0e:91:b8:cb:06:51: be:45:58:39:29:2d:30:85:6d:72:5c:1a:61:c2:b5: f1:cb:e8:99:e3:a3:46:e2:f1:43:14:e0:0a:f8:dc: 03:70:26:7a:56:24:23:ba:c8:42:8b:77:d6:4d:df: a8:97:e1:cc:2f:9c:63:1b:34:45:3a:a9:7b:11:9c: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:37:03:86:10:93:9A:62:25:94:EB:F6:EB:9F:83:46:39:99:E3 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e5:55:97:8c:34:fc:3b:f5:b3:9e:37:8f:37:9c:6a:04:bd: cd:bc:ad:bb:84:56:9a:6b:8e:d5:86:94:f9:a1:be:fb:35:a0: 74:52:18:73:6c:c9:56:6a:d8:42:f0:51:7d:2a:21:4c:1f:d4: ed:4c:72:49:7c:8d:68:94:dd:41:52:b3:5f:a0:b7:4d:cd:55: 07:0a:b9:40:7d:64:c1:e5:9c:54:b1:2f:b6:6e:ee:9a:79:fe: 3b:c8:ae:70:7a:7a:46:46:81:eb:0e:48:c5:d5:73:07:a5:2d: ce:88:6e:e5:27:61:58:19:0d:81:44:1f:6c:23:b8:7f:d1:24: 3d:b4:95:cb:07:53:16:e5:05:f1:37:f0:b8:22:ce:67:f2:dd: bd:ee:40:9a:7e:29:ad:c8:62:9b:ef:14:b0:79:ef:e0:a7:98: a9:31:7e:04:6c:f8:8b:fe:e5:f2:9d:ef:0a:50:bb:09:7d:33: 73:84:a5:62:be:f0:f9:3a:35:56:4e:a6:85:d3:fd:32:4a:8d: 23:1c:aa:a3:b1:44:cb:6b:13:53:2c:a1:4e:5f:ca:a1:87:47: dc:63:80:ac:f8:97:e1:9e:7f:9f:62:da:e0:da:f7:8c:f3:23: 2b:0f:c3:f3:00:05:e8:5b:c4:1f:52:7f:ef:2e:01:9a:9a:05: 8f:55:83:c7 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUH5DifiwDm3EUBTcNG6yOCPK+xyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMDcwMDEwMDlaFw0yNTEyMDgwMzQxMDlaMDMxMTAvBgNV BAMTKDY4OUQzNzAzODYxMDkzOUE2MjI1OTRFQkY2RUI5RjgzNDYzOTk5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFyMy8+lf0rxWJ/5+PYRYh3YN HL1GPsgJtWoo/EQ0PzmPFFqAk7QtCkZX/vKGezfQ/1/pE707YvyXoujA5BeJgoBq HEYLVnF1KgeqgrEpp7elDKMREO6IZBKCxVwHsSIifdrR5K+HXOorMdn6NenJS3dj OwlxsrG+tO68E0APgDCGKoqdXjBBsjyVYSUdPJltuWByuwRV7EZ6HxZd6ONebFtW 3ri5CDbplJUO4D2sZdZSBJxkVT1zwq7/bA6RuMsGUb5FWDkpLTCFbXJcGmHCtfHL 6Jnjo0bi8UMU4Ar43ANwJnpWJCO6yEKLd9ZN36iX4cwvnGMbNEU6qXsRnE+dAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUaJ03A4YQk5piJZTr9uufg0Y5meMwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFXlVZeMNPw79bOeN483nGoE vc28rbuEVpprjtWGlPmhvvs1oHRSGHNsyVZq2ELwUX0qIUwf1O1Mckl8jWiU3UFS s1+gt03NVQcKuUB9ZMHlnFSxL7Zu7pp5/jvIrnB6ekZGgesOSMXVcwelLc6IbuUn YVgZDYFEH2wjuH/RJD20lcsHUxblBfE38Lgizmfy3b3uQJp+Ka3IYpvvFLB57+Cn mKkxfgRs+Iv+5fKd7wpQuwl9M3OEpWK+8Pk6NVZOpoXT/TJKjSMcqqOxRMtrE1Ms oU5fyqGHR9xjgKz4l+Gef59i2uDa94zzIysPw/MABehbxB9Sf+8uAZqaBY9Vg8c= -----END CERTIFICATE-----Generated at Sun Dec 7 06:45:39 2025 by rpki-client