This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: 2O/Z9GZ3j5xeoPku5vkfvlajycm+91pfVlxZnrDQqJ8= Subject key identifier: 8F:05:6E:4B:AF:72:68:02:A7:2E:0D:29:F5:3B:43:C5:5E:28:83:97 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 77A775A25EF248BE06E35C391CAF15CEB6BFA393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0284 Signing time: Thu 27 Nov 2025 06:12:45 +0000 Manifest this update: Thu 27 Nov 2025 06:07:45 +0000 Manifest next update: Fri 28 Nov 2025 07:41:45 +0000 Files and hashes: 1: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) 2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: OHr3ZpeV45XLfP8CuhVwI+6G32x4IhosiRLiy6ZgUvs=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 07:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a7:75:a2:5e:f2:48:be:06:e3:5c:39:1c:af:15:ce:b6:bf:a3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Nov 27 06:07:45 2025 GMT Not After : Nov 28 07:41:45 2025 GMT Subject: CN=8F056E4BAF726802A72E0D29F53B43C55E288397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:e2:fe:11:74:5e:7b:6f:2b:48:14:62:eb: 79:eb:81:13:a9:81:9f:3d:27:40:27:68:68:ed:06: d4:34:59:0d:90:a5:a2:af:d9:01:77:1e:85:eb:f8: 04:38:e5:1c:19:86:6a:55:9d:c9:e9:1f:89:34:59: c6:53:1e:6a:f8:28:a5:f1:ba:53:97:2f:af:cf:16: 8a:8b:bc:d4:02:5e:98:4c:a6:93:a8:b1:92:63:3b: 24:f8:ef:f7:52:e4:d3:9c:98:16:35:65:aa:d2:e3: 78:24:38:d8:a9:60:2e:28:e7:87:f4:85:cc:28:0f: 32:51:4d:85:06:f3:60:84:04:0c:a5:54:84:d5:78: b1:c4:c7:6c:91:40:00:65:d4:8c:44:1b:3b:db:2f: 5e:cb:e9:0b:45:af:bf:63:b6:4b:bf:88:0f:5a:d2: 7e:ee:8d:1b:14:f1:f6:c8:a0:8f:ad:6a:27:ab:82: 95:7f:2c:43:4a:56:08:c1:25:3f:49:ac:84:bc:3d: 0a:b0:bf:03:82:a5:70:da:56:65:7c:e8:fb:ae:3c: 5a:f2:19:be:7c:57:34:b8:03:c6:4f:f9:fc:eb:82: b8:63:b3:83:d5:57:cf:ff:50:18:8a:2d:8c:0f:9d: 39:4b:0e:8b:6f:48:df:87:9b:0d:08:f0:ec:08:81: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:6E:4B:AF:72:68:02:A7:2E:0D:29:F5:3B:43:C5:5E:28:83:97 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d6:8a:f7:79:c0:3b:78:14:5a:84:56:2e:0e:2f:b1:52:7d: 39:b1:fb:d3:dd:c5:e8:d8:88:e1:79:0a:20:81:7f:da:67:86: a0:bd:2a:b1:7d:52:b8:da:5a:38:b7:04:00:76:84:ad:68:fa: 6e:1c:bb:0e:98:6b:03:df:9f:8d:35:d9:8b:b6:a4:cb:57:2a: 02:fb:84:b2:e3:ae:6e:83:16:47:78:f2:95:bf:46:9a:94:16: 7f:10:63:b9:14:59:62:7a:67:64:df:12:d4:73:8f:65:98:de: 9a:8c:9d:12:5c:d1:b9:31:49:24:36:4c:d3:6a:be:89:67:c7: a6:15:c7:72:a0:96:fc:8b:00:f8:1c:94:1f:50:7a:6b:46:55: 36:b8:37:bd:31:fa:c4:fd:48:f5:9c:37:fb:ae:b9:cf:8a:20: 77:33:be:22:18:a8:d1:d3:58:6a:ef:69:a7:71:23:b3:f4:c9: 82:1f:18:5f:35:f1:4b:2e:95:4b:9f:46:94:c6:ba:88:24:0e: 3a:83:76:d4:13:cc:32:36:dc:77:d1:fd:85:3f:06:a6:a7:8f: 40:41:7a:88:af:c0:44:88:fd:ef:6c:40:a4:68:3f:e0:2e:34: 3e:80:1c:bc:f7:a6:05:d7:c3:0d:92:91:3b:e4:48:a1:d5:e9: f2:f2:ca:32 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUd6d1ol7ySL4G41w5HK8Vzra/o5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTExMjcwNjA3NDVaFw0yNTExMjgwNzQxNDVaMDMxMTAvBgNV BAMTKDhGMDU2RTRCQUY3MjY4MDJBNzJFMEQyOUY1M0I0M0M1NUUyODgzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQG+L+EXRee28rSBRi63nrgROp gZ89J0AnaGjtBtQ0WQ2QpaKv2QF3HoXr+AQ45RwZhmpVncnpH4k0WcZTHmr4KKXx ulOXL6/PFoqLvNQCXphMppOosZJjOyT47/dS5NOcmBY1ZarS43gkONipYC4o54f0 hcwoDzJRTYUG82CEBAylVITVeLHEx2yRQABl1IxEGzvbL17L6QtFr79jtku/iA9a 0n7ujRsU8fbIoI+taiergpV/LENKVgjBJT9JrIS8PQqwvwOCpXDaVmV86PuuPFry Gb58VzS4A8ZP+fzrgrhjs4PVV8//UBiKLYwPnTlLDotvSN+Hmw0I8OwIgUmJAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUjwVuS69yaAKnLg0p9TtDxV4og5cwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKnWivd5wDt4FFqEVi4OL7FS fTmx+9PdxejYiOF5CiCBf9pnhqC9KrF9UrjaWji3BAB2hK1o+m4cuw6YawPfn401 2Yu2pMtXKgL7hLLjrm6DFkd48pW/RpqUFn8QY7kUWWJ6Z2TfEtRzj2WY3pqMnRJc 0bkxSSQ2TNNqvolnx6YVx3KglvyLAPgclB9QemtGVTa4N70x+sT9SPWcN/uuuc+K IHczviIYqNHTWGrvaadxI7P0yYIfGF818UsulUufRpTGuogkDjqDdtQTzDI23HfR /YU/Bqanj0BBeoivwESI/e9sQKRoP+AuND6AHLz3pgXXww2SkTvkSKHV6fLyyjI= -----END CERTIFICATE-----Generated at Thu Nov 27 15:10:27 2025 by rpki-client