This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: s1ZjXmIs9+tRM7hszVLN9y78dR9xsaKKswd/ALskOGg= Subject key identifier: 94:BE:B6:6F:E3:EA:BB:C8:CD:CD:5D:57:4E:B3:7E:AD:61:D2:59:39 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 4BB9FD64DCA07572E54D0716B591994D0E96A8E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 028F Signing time: Fri 05 Dec 2025 12:10:08 +0000 Manifest this update: Fri 05 Dec 2025 12:05:08 +0000 Manifest next update: Sat 06 Dec 2025 15:54:08 +0000 Files and hashes: 1: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) 2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: dyMFZAv2RNmWRMfkQ8tmwutAu5YJadlxG1TGmje1NF8=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b9:fd:64:dc:a0:75:72:e5:4d:07:16:b5:91:99:4d:0e:96:a8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 5 12:05:08 2025 GMT Not After : Dec 6 15:54:08 2025 GMT Subject: CN=94BEB66FE3EABBC8CDCD5D574EB37EAD61D25939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:64:d9:4b:bd:c3:b2:4f:66:00:26:0a:5a: a5:bc:a1:1c:31:9c:d8:8b:09:f3:c2:50:8f:70:77: c2:0c:3e:12:c2:f4:c6:af:21:87:93:96:99:d1:a4: 32:68:ab:86:cf:31:b7:53:a2:83:45:6f:ad:40:7e: c2:ba:6c:f0:b5:8f:88:4e:78:f9:f4:5e:01:68:17: 8c:c9:35:da:bf:ac:0e:cf:eb:15:59:51:bd:af:45: 47:53:ce:e1:cd:7a:72:d9:07:87:e7:0a:90:fc:b9: cc:00:05:3f:11:b9:1a:1d:d6:86:c8:98:9a:89:c2: 47:34:ba:20:e0:55:68:db:1d:d5:ef:8f:16:76:75: d7:6d:f2:1f:26:43:c3:c5:c7:aa:5b:59:80:e6:3b: 91:e4:0c:7f:82:51:85:3b:cb:8f:d3:9c:a0:36:8a: 10:26:ae:12:a3:98:31:32:43:49:cf:1d:b1:55:a0: 35:55:39:ae:4f:9d:b8:1f:52:33:e3:d4:11:19:7e: 30:0d:8e:1b:de:94:50:65:30:a4:a6:b9:55:3b:ea: 82:af:4d:be:68:c9:83:e7:40:f6:71:c6:cd:ec:a4: 5d:22:28:9a:be:cf:a2:82:0c:d0:65:ce:7e:d7:f2: da:55:b8:80:0c:38:22:fe:99:62:38:fc:15:ee:24: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:B6:6F:E3:EA:BB:C8:CD:CD:5D:57:4E:B3:7E:AD:61:D2:59:39 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:54:87:70:a2:fe:b6:86:d9:80:03:50:58:b5:d4:71:e9:9c: f2:a4:d1:20:6e:ea:07:45:29:e8:5f:36:5e:d9:30:8f:e9:7f: aa:f8:6e:0c:24:61:1e:38:b3:bf:48:90:21:1b:bc:09:bc:88: 8b:42:11:cf:18:44:d7:75:4a:c6:aa:ee:9b:ab:38:17:21:b3: c7:33:2e:42:cd:34:2c:79:c4:f9:bd:11:2e:b5:9a:02:4f:c2: a4:7c:c2:14:6b:ca:be:86:ac:f2:a5:53:ab:03:29:cf:07:ea: ca:3e:c0:75:a2:89:77:f6:eb:55:e1:1a:3e:a4:9e:c4:c3:4c: 30:30:9e:a6:70:f7:5e:a5:4e:68:bd:85:9f:64:49:29:4c:82: 36:73:45:5a:29:7d:ed:f6:64:b1:d6:d6:1f:0c:a3:0f:98:9b: dc:b4:bc:83:40:94:66:87:6a:bc:e5:2b:53:1a:72:b3:90:ef: 0d:be:cc:9d:4d:11:0f:f2:6b:c4:9f:6d:18:43:16:11:0e:53: ce:67:12:0f:0c:a3:0d:ee:79:e8:c6:a0:db:10:d6:06:b9:29: 55:49:3f:6d:c9:88:2b:15:db:26:8e:21:50:d0:81:3f:dc:82: ba:6f:a3:5f:fe:c0:94:17:a1:70:0f:2c:93:b7:5c:65:0a:ae: e1:99:51:62 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUS7n9ZNygdXLlTQcWtZGZTQ6WqOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMDUxMjA1MDhaFw0yNTEyMDYxNTU0MDhaMDMxMTAvBgNV BAMTKDk0QkVCNjZGRTNFQUJCQzhDRENENUQ1NzRFQjM3RUFENjFEMjU5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5mTZS73Dsk9mACYKWqW8oRwx nNiLCfPCUI9wd8IMPhLC9MavIYeTlpnRpDJoq4bPMbdTooNFb61AfsK6bPC1j4hO ePn0XgFoF4zJNdq/rA7P6xVZUb2vRUdTzuHNenLZB4fnCpD8ucwABT8RuRod1obI mJqJwkc0uiDgVWjbHdXvjxZ2dddt8h8mQ8PFx6pbWYDmO5HkDH+CUYU7y4/TnKA2 ihAmrhKjmDEyQ0nPHbFVoDVVOa5PnbgfUjPj1BEZfjANjhvelFBlMKSmuVU76oKv Tb5oyYPnQPZxxs3spF0iKJq+z6KCDNBlzn7X8tpVuIAMOCL+mWI4/BXuJN0DAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUlL62b+Pqu8jNzV1XTrN+rWHSWTkwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKtUh3Ci/raG2YADUFi11HHp nPKk0SBu6gdFKehfNl7ZMI/pf6r4bgwkYR44s79IkCEbvAm8iItCEc8YRNd1Ssaq 7purOBchs8czLkLNNCx5xPm9ES61mgJPwqR8whRryr6GrPKlU6sDKc8H6so+wHWi iXf261XhGj6knsTDTDAwnqZw916lTmi9hZ9kSSlMgjZzRVopfe32ZLHW1h8Mow+Y m9y0vINAlGaHarzlK1MacrOQ7w2+zJ1NEQ/ya8SfbRhDFhEOU85nEg8Mow3ueejG oNsQ1ga5KVVJP23JiCsV2yaOIVDQgT/cgrpvo1/+wJQXoXAPLJO3XGUKruGZUWI= -----END CERTIFICATE-----Generated at Sat Dec 6 06:14:46 2025 by rpki-client