This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: RWFutNtQnf66hC/B6f3fxzIfzJoa4I/PKy3ZpU0vFPI= Subject key identifier: DA:3E:CE:14:19:65:50:EF:09:D3:22:6D:C2:E8:B5:18:2E:FD:3B:A4 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 21F90D2E9F5E3989B9B8C78A75C2023F960E2218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 029D Signing time: Tue 16 Dec 2025 00:51:09 +0000 Manifest this update: Tue 16 Dec 2025 00:46:09 +0000 Manifest next update: Wed 17 Dec 2025 03:14:09 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: u7E9vjtnIDwP+iP1stEUsYbyG5jC67dsL07oxXFOHaY=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f9:0d:2e:9f:5e:39:89:b9:b8:c7:8a:75:c2:02:3f:96:0e:22:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 16 00:46:09 2025 GMT Not After : Dec 17 03:14:09 2025 GMT Subject: CN=DA3ECE14196550EF09D3226DC2E8B5182EFD3BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:e4:44:d0:2d:8c:ca:f7:fa:99:91:91:8e: ed:63:a3:0b:e0:e2:38:37:4d:8c:5e:bd:fb:e3:a0: a4:54:98:84:ee:fb:29:75:27:bb:93:96:f0:75:72: b2:5c:b6:9c:c6:21:b1:ad:e7:7d:99:6d:8d:95:86: bf:8e:87:0c:c9:f7:65:ce:89:c8:58:27:eb:b4:93: 19:bb:1f:80:b4:2a:16:0a:18:8e:85:58:4c:62:33: 07:09:bd:bf:7c:4c:24:a8:e7:cb:56:0f:1e:5d:2f: ea:40:2e:89:ba:de:1e:46:c3:eb:d3:af:e4:8d:5d: 06:2e:48:f7:1f:aa:42:f8:b0:08:1e:06:76:cf:40: 34:47:cf:b6:77:fe:22:f6:75:e7:92:c5:c2:1a:e1: 3a:dc:65:a6:db:9a:93:96:90:ce:71:19:aa:10:14: dd:69:41:d6:ef:8a:cc:0d:d4:78:60:a6:0c:71:65: 14:0b:a6:e3:e6:e2:17:1f:20:17:f0:b3:e2:f4:be: 38:db:cb:7b:60:4c:b8:dc:d3:f6:11:b6:32:62:97: 0d:4c:5f:10:f7:b5:30:27:8f:8b:59:9a:f5:41:ee: 01:af:1c:c8:01:3f:2a:18:c0:48:b9:e3:fa:2f:ac: cd:1b:48:4c:11:22:55:f3:6a:c0:8b:20:cc:db:a6: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3E:CE:14:19:65:50:EF:09:D3:22:6D:C2:E8:B5:18:2E:FD:3B:A4 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:44:a4:4f:d9:7e:fe:16:7f:1b:bb:c8:c5:e6:48:ca:62:46: 62:61:f7:e1:aa:0b:ca:ef:98:b0:3e:52:c1:2b:10:c4:60:03: 5d:31:5d:7f:94:72:90:b1:ca:67:ab:df:af:12:3e:d2:42:ba: 02:ee:6c:8f:fc:a8:46:56:16:16:8c:31:82:fa:28:18:a8:71: 9c:24:ac:fb:bb:0f:d5:0b:b6:43:f6:56:7b:97:21:79:02:64: ca:e2:c5:80:f9:87:7f:13:4c:08:71:99:0c:77:c6:00:27:4a: 36:90:d9:ae:3b:3b:1a:a5:72:92:47:36:19:a5:6d:ff:c9:18: b5:dc:4e:8e:0a:24:5a:78:31:eb:e2:8c:d5:4d:60:7d:9c:b3: 0c:0f:1a:69:52:aa:17:a0:93:db:e0:52:a0:66:b5:78:52:99: 91:d8:ba:7b:e2:e7:3e:3d:f1:2a:be:6a:13:1f:02:9f:0c:98: 8a:1d:1d:90:39:91:19:04:b3:54:fc:16:30:2e:8b:21:73:1b: 8f:16:1f:35:9d:53:27:9a:55:2c:1f:37:03:8d:d9:4c:cb:3b: 1a:02:25:dd:96:7f:f9:1e:33:16:2c:de:6b:7a:45:1b:7a:1a: d4:3b:bc:4e:22:6e:fc:ab:5b:8f:21:75:7b:61:2a:59:4b:48: 3c:cd:9d:8a -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUIfkNLp9eOYm5uMeKdcICP5YOIhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTYwMDQ2MDlaFw0yNTEyMTcwMzE0MDlaMDMxMTAvBgNV BAMTKERBM0VDRTE0MTk2NTUwRUYwOUQzMjI2REMyRThCNTE4MkVGRDNCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvORE0C2Myvf6mZGRju1jowvg 4jg3TYxevfvjoKRUmITu+yl1J7uTlvB1crJctpzGIbGt532ZbY2Vhr+OhwzJ92XO ichYJ+u0kxm7H4C0KhYKGI6FWExiMwcJvb98TCSo58tWDx5dL+pALom63h5Gw+vT r+SNXQYuSPcfqkL4sAgeBnbPQDRHz7Z3/iL2deeSxcIa4TrcZabbmpOWkM5xGaoQ FN1pQdbviswN1HhgpgxxZRQLpuPm4hcfIBfws+L0vjjby3tgTLjc0/YRtjJilw1M XxD3tTAnj4tZmvVB7gGvHMgBPyoYwEi54/ovrM0bSEwRIlXzasCLIMzbpuh1AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU2j7OFBllUO8J0yJtwui1GC79O6QwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB1EpE/Zfv4Wfxu7yMXmSMpi RmJh9+GqC8rvmLA+UsErEMRgA10xXX+UcpCxymer368SPtJCugLubI/8qEZWFhaM MYL6KBiocZwkrPu7D9ULtkP2VnuXIXkCZMrixYD5h38TTAhxmQx3xgAnSjaQ2a47 OxqlcpJHNhmlbf/JGLXcTo4KJFp4MevijNVNYH2cswwPGmlSqhegk9vgUqBmtXhS mZHYunvi5z498Sq+ahMfAp8MmIodHZA5kRkEs1T8FjAuiyFzG48WHzWdUyeaVSwf NwON2UzLOxoCJd2Wf/keMxYs3mt6RRt6GtQ7vE4ibvyrW48hdXthKllLSDzNnYo= -----END CERTIFICATE-----Generated at Tue Dec 16 12:46:34 2025 by rpki-client