This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: dzCIZAP+Cnr4ri4wB2zzN0KtEJeXeFjBKIow7QMBZMQ= Subject key identifier: 5E:DF:A0:BC:15:F0:45:9C:57:A3:AF:C5:CA:18:55:30:FC:7C:5B:F7 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 2A7ABDB583099EEF1BE2A099B97B3EA76C083CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0298 Signing time: Fri 12 Dec 2025 08:45:18 +0000 Manifest this update: Fri 12 Dec 2025 08:40:18 +0000 Manifest next update: Sat 13 Dec 2025 11:22:18 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: xDD5PoCCqmv7sU2sSqkHcpfPegemzWWiZXQVO2KVfLA=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 11:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7a:bd:b5:83:09:9e:ef:1b:e2:a0:99:b9:7b:3e:a7:6c:08:3c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 12 08:40:18 2025 GMT Not After : Dec 13 11:22:18 2025 GMT Subject: CN=5EDFA0BC15F0459C57A3AFC5CA185530FC7C5BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:bc:cf:15:92:c9:09:4f:de:d0:4e:10:43: 43:da:6d:fb:7a:21:08:45:26:1c:a7:08:c9:89:11: dc:33:e8:e0:52:21:61:9e:e3:43:41:c2:eb:c7:f7: 37:67:44:a0:58:66:03:06:5e:b8:1d:e0:31:42:c0: 2a:0c:04:a3:45:44:32:65:fb:dd:df:68:02:bb:26: 28:a6:c7:fd:67:42:20:56:3d:a8:dc:fc:dc:8e:c2: 39:77:e4:9e:19:76:49:ae:a5:e3:6e:d0:cf:18:8c: 10:84:83:5c:0f:5b:c5:4f:b4:72:22:e2:02:38:81: 4b:e7:02:10:9a:2e:04:c3:1d:31:a0:3e:88:2a:d2: 60:34:80:e1:9a:d9:a1:43:15:a5:50:95:eb:e2:92: c3:7c:88:f3:bf:1b:0c:bf:a5:1b:40:30:46:a1:f2: 59:af:52:c5:96:89:c2:90:dc:ca:03:cb:cc:01:a6: 91:7f:cc:ae:51:ed:94:8d:a9:04:66:63:8f:b1:f7: bd:10:5f:75:1f:b3:b9:c0:2a:b4:f9:ad:9f:51:c1: bb:15:e7:58:59:9e:97:88:15:5f:9d:c2:80:2e:d0: a2:60:ae:7e:5d:a9:21:08:9b:1c:d6:f7:a4:90:de: 09:c8:ee:cc:53:2b:4b:58:88:fb:d6:de:d3:15:14: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DF:A0:BC:15:F0:45:9C:57:A3:AF:C5:CA:18:55:30:FC:7C:5B:F7 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fe:2d:cb:a9:9a:8d:63:36:1d:ac:82:57:08:bf:89:70:2b: f9:c2:ee:79:f1:c3:15:f9:8a:3f:e2:18:25:27:c6:61:f9:3e: 6b:17:09:60:31:b8:1a:ec:f6:43:9e:13:40:32:47:21:dd:57: af:ae:0b:3c:c9:1c:bf:26:ab:96:88:8d:6c:25:27:e0:36:c5: 73:58:60:4c:3c:7c:bd:52:a1:68:53:16:16:f7:d6:b7:34:06: f9:b7:1f:66:80:68:09:a3:6f:46:18:9a:93:d7:19:b4:cc:3e: 45:44:e7:ac:a8:77:9f:4e:6f:07:46:03:48:bc:10:ed:72:bd: d4:f1:f6:66:6b:da:fe:9a:b5:28:18:8f:ed:c6:01:b4:79:37: 06:8d:ef:86:67:3b:2e:7c:7e:b2:41:00:3c:c8:e1:a9:26:68: aa:59:97:d2:19:6b:dd:b8:ad:44:73:72:e9:b5:c0:01:04:6b: 3b:e9:82:79:21:e2:1f:a8:55:41:0e:03:5d:5a:8d:c5:63:b6: e3:f8:84:7d:61:63:16:81:49:d7:3c:48:5d:4c:ad:98:01:c4: 48:2a:86:9f:44:17:d9:f0:c1:81:b6:06:ce:8d:aa:a4:7c:1a: 40:81:57:5d:36:7c:a8:bf:00:06:8f:ca:82:23:4a:b5:21:5e: f1:df:9e:c7 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUKnq9tYMJnu8b4qCZuXs+p2wIPPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTIwODQwMThaFw0yNTEyMTMxMTIyMThaMDMxMTAvBgNV BAMTKDVFREZBMEJDMTVGMDQ1OUM1N0EzQUZDNUNBMTg1NTMwRkM3QzVCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgrzPFZLJCU/e0E4QQ0Pabft6 IQhFJhynCMmJEdwz6OBSIWGe40NBwuvH9zdnRKBYZgMGXrgd4DFCwCoMBKNFRDJl +93faAK7Jiimx/1nQiBWPajc/NyOwjl35J4ZdkmupeNu0M8YjBCEg1wPW8VPtHIi 4gI4gUvnAhCaLgTDHTGgPogq0mA0gOGa2aFDFaVQleviksN8iPO/Gwy/pRtAMEah 8lmvUsWWicKQ3MoDy8wBppF/zK5R7ZSNqQRmY4+x970QX3Ufs7nAKrT5rZ9RwbsV 51hZnpeIFV+dwoAu0KJgrn5dqSEImxzW96SQ3gnI7sxTK0tYiPvW3tMVFKcvAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUXt+gvBXwRZxXo6/FyhhVMPx8W/cwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABD+Lcupmo1jNh2sglcIv4lw K/nC7nnxwxX5ij/iGCUnxmH5PmsXCWAxuBrs9kOeE0AyRyHdV6+uCzzJHL8mq5aI jWwlJ+A2xXNYYEw8fL1SoWhTFhb31rc0Bvm3H2aAaAmjb0YYmpPXGbTMPkVE56yo d59ObwdGA0i8EO1yvdTx9mZr2v6atSgYj+3GAbR5NwaN74ZnOy58frJBADzI4akm aKpZl9IZa924rURzcum1wAEEazvpgnkh4h+oVUEOA11ajcVjtuP4hH1hYxaBSdc8 SF1MrZgBxEgqhp9EF9nwwYG2Bs6NqqR8GkCBV102fKi/AAaPyoIjSrUhXvHfnsc= -----END CERTIFICATE-----Generated at Fri Dec 12 22:12:31 2025 by rpki-client