This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: PRlBxVK9xQJM3A3aKppE5ZkFMQIXL6fMN/7g4chfVIw= Subject key identifier: EE:CA:5C:5D:5E:99:BF:7E:E2:F4:E4:76:27:DE:D3:7E:E2:85:65:2C Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 52364D351544341F818C51C9636E314D0414DC34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0296 Signing time: Wed 10 Dec 2025 20:35:14 +0000 Manifest this update: Wed 10 Dec 2025 20:30:14 +0000 Manifest next update: Thu 11 Dec 2025 23:38:14 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: 7Y6eiIqwB8d6O5kdQI5fMCj1ltIolcVYeO3Zhpao0LE=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:36:4d:35:15:44:34:1f:81:8c:51:c9:63:6e:31:4d:04:14:dc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 10 20:30:14 2025 GMT Not After : Dec 11 23:38:14 2025 GMT Subject: CN=EECA5C5D5E99BF7EE2F4E47627DED37EE285652C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:e9:28:68:e5:b1:41:8b:84:00:b9:ee:d3: f4:11:2c:e3:d8:39:ab:69:c0:cc:7b:25:55:98:f3: 3e:16:a4:d8:67:d4:8f:49:50:21:6c:68:5c:68:e2: 2c:ef:e5:f4:a3:57:d0:f6:13:a4:10:52:4b:14:6b: 58:49:74:7e:ec:f6:c5:8a:15:84:72:67:f8:62:b1: c8:46:f9:99:00:7f:92:f0:25:39:e9:49:b2:5e:86: e8:38:de:52:c8:9b:59:aa:4c:5f:57:f3:55:63:b4: c4:78:9a:6d:74:00:1b:4d:29:80:a9:73:2c:4b:5b: 4e:d9:cb:67:d7:06:56:aa:02:6b:fa:0f:72:84:63: 95:ea:23:12:a1:1d:92:79:2f:38:94:d8:04:aa:f2: b5:dc:a9:a3:15:d4:fd:41:15:a4:59:3d:fa:fa:ee: d3:6f:d7:ce:b1:35:dc:88:fb:1e:2d:3a:5a:14:a3: f5:9c:11:1e:a5:88:2e:01:81:be:ab:2f:88:2e:a2: 1e:71:35:38:d7:17:50:8d:f6:f6:9b:66:c4:2d:a2: ec:a1:2f:1e:e7:b5:be:59:79:a3:1c:d2:e2:eb:d3: cd:f5:5e:91:5c:45:43:cb:cb:07:5b:86:55:7e:56: 3d:36:58:7d:37:6c:87:d4:58:87:dc:cf:e7:da:ce: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:5C:5D:5E:99:BF:7E:E2:F4:E4:76:27:DE:D3:7E:E2:85:65:2C X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b0:9c:45:80:75:74:67:c4:60:07:cd:54:52:27:89:6d:f0: 8a:7b:e9:7b:88:7a:1c:7b:d1:ff:e7:fa:56:37:a3:64:d9:94: b4:04:df:25:4d:17:d3:79:9d:95:5a:cc:37:10:bc:65:ba:04: 3f:8d:9d:c0:3d:8d:0a:77:d3:a6:bb:33:f8:a0:77:28:4a:94: 77:1d:b2:94:38:df:f3:54:ce:2a:e3:4b:16:6d:7e:3d:44:b3: 95:87:48:6c:c8:56:ca:5b:90:77:c8:a6:e2:ec:cf:12:4e:b7: 42:f4:ca:ed:20:b7:68:27:a9:5e:f6:d4:81:c9:44:24:8d:4c: 89:98:bd:1a:16:3e:f4:b9:d6:df:2c:7a:e3:b5:28:f2:1d:2e: c2:24:f6:58:12:1f:3a:46:e6:ef:a3:24:94:c6:3b:bd:25:98: 8b:90:8f:42:d6:f7:35:7a:4b:26:9e:97:dc:61:2e:29:ec:27: 4d:7d:87:6d:38:23:96:a5:31:78:a3:59:1c:f5:83:f6:d2:a8: 43:03:a8:3f:c3:71:aa:57:d5:b4:4c:bc:0b:86:99:71:c6:cb: 10:8a:e3:e7:43:ad:99:73:2c:e2:d5:aa:51:ab:91:bf:0f:08: 1b:d1:d4:5d:8b:e9:37:a2:66:83:17:1e:c8:d5:1c:d0:17:56: 0b:56:75:c8 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUUjZNNRVENB+BjFHJY24xTQQU3DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTAyMDMwMTRaFw0yNTEyMTEyMzM4MTRaMDMxMTAvBgNV BAMTKEVFQ0E1QzVENUU5OUJGN0VFMkY0RTQ3NjI3REVEMzdFRTI4NTY1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4OkoaOWxQYuEALnu0/QRLOPY OatpwMx7JVWY8z4WpNhn1I9JUCFsaFxo4izv5fSjV9D2E6QQUksUa1hJdH7s9sWK FYRyZ/hischG+ZkAf5LwJTnpSbJehug43lLIm1mqTF9X81VjtMR4mm10ABtNKYCp cyxLW07Zy2fXBlaqAmv6D3KEY5XqIxKhHZJ5LziU2ASq8rXcqaMV1P1BFaRZPfr6 7tNv186xNdyI+x4tOloUo/WcER6liC4Bgb6rL4guoh5xNTjXF1CN9vabZsQtouyh Lx7ntb5ZeaMc0uLr0831XpFcRUPLywdbhlV+Vj02WH03bIfUWIfcz+fazpThAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU7spcXV6Zv37i9OR2J97TfuKFZSwwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKuwnEWAdXRnxGAHzVRSJ4lt 8Ip76XuIehx70f/n+lY3o2TZlLQE3yVNF9N5nZVazDcQvGW6BD+NncA9jQp306a7 M/igdyhKlHcdspQ43/NUzirjSxZtfj1Es5WHSGzIVspbkHfIpuLszxJOt0L0yu0g t2gnqV721IHJRCSNTImYvRoWPvS51t8seuO1KPIdLsIk9lgSHzpG5u+jJJTGO70l mIuQj0LW9zV6Syael9xhLinsJ019h204I5alMXijWRz1g/bSqEMDqD/DcapX1bRM vAuGmXHGyxCK4+dDrZlzLOLVqlGrkb8PCBvR1F2L6TeiZoMXHsjVHNAXVgtWdcg= -----END CERTIFICATE-----Generated at Thu Dec 11 08:14:17 2025 by rpki-client