This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: uAo4mnXnwLGxUPl6D8+86u4+2uQU5gU1lF/Su7Qe+mo= Subject key identifier: 6F:70:3C:ED:AB:6C:C3:1B:CA:E8:63:65:20:27:4B:9E:52:9A:C7:3F Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 1C381A5AD3029A076F6BDD4C129BB8132EC132BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0286 Signing time: Fri 28 Nov 2025 18:02:48 +0000 Manifest this update: Fri 28 Nov 2025 17:57:48 +0000 Manifest next update: Sat 29 Nov 2025 19:26:48 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: ALv/+BT8oR+MubQey00V9rAwgENgfS4hfmOMxfBFsl0=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 19:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:38:1a:5a:d3:02:9a:07:6f:6b:dd:4c:12:9b:b8:13:2e:c1:32:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Nov 28 17:57:48 2025 GMT Not After : Nov 29 19:26:48 2025 GMT Subject: CN=6F703CEDAB6CC31BCAE8636520274B9E529AC73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:29:5b:ba:47:bd:6a:3d:25:fa:ac:ca:38: 67:98:f5:1e:2e:97:e5:67:cd:60:67:16:b8:9b:3c: 71:6b:0b:d4:47:f9:07:91:c8:4c:aa:39:b1:f0:ab: e8:2d:c9:af:e8:9c:46:bf:ae:fa:79:bf:68:a5:cf: 04:55:50:84:4e:0d:29:fd:2d:96:7a:5d:0c:a2:5c: e7:fb:56:50:a2:8b:74:b5:ce:fd:66:3a:e3:2c:14: 17:92:3c:80:96:d8:da:64:1b:e3:ef:80:80:4f:c8: c4:2d:d8:5a:a0:6b:a7:bd:7b:c8:94:19:94:1a:1a: ee:60:87:1a:1f:74:03:fc:20:6e:c2:45:1e:dc:0f: 27:e8:f9:5e:fd:58:89:e3:b6:cd:ab:58:fc:09:78: 8d:8c:5e:c4:f6:0a:d6:39:d7:4b:80:97:16:02:60: 93:09:59:f6:59:7a:00:f0:56:63:ed:19:05:1f:4f: 76:79:34:97:40:e3:2b:f4:02:4d:e1:53:9c:f6:4f: 12:0d:fc:60:12:06:34:c9:03:92:5f:23:d3:74:4a: 71:b2:63:01:ed:28:1a:28:cc:ca:0c:cb:89:0f:d1: 6f:b2:dd:49:94:7b:09:20:39:9b:0a:76:5e:0f:48: b0:22:75:8e:ef:18:1a:3a:fe:10:cf:29:dd:71:f0: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:70:3C:ED:AB:6C:C3:1B:CA:E8:63:65:20:27:4B:9E:52:9A:C7:3F X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:48:8f:8d:e7:b6:3e:6f:31:42:5d:bf:7d:a6:28:ec:6a: 82:c6:1d:e0:35:72:a6:ea:ed:cb:e5:ee:a5:be:a6:be:af:0a: c5:eb:8c:a8:e1:e6:68:79:3a:b3:aa:47:89:88:34:c9:01:a3: 3e:b2:89:88:90:c3:31:65:6c:a0:47:73:b7:52:7b:5d:6e:90: 90:9c:9c:9a:c3:34:e1:d3:16:22:0f:e7:7c:cd:de:73:8e:ad: d0:4e:f8:2a:9e:12:ab:8e:76:57:e8:5e:ae:61:b6:89:c4:44: 0d:12:b4:f7:a6:97:57:e2:d7:93:a9:6b:3d:8d:26:a6:d0:df: 95:1b:76:3d:e7:0a:49:cb:da:37:b6:ac:b8:7d:06:09:49:d7: dd:f2:d0:2f:c0:d7:aa:78:75:82:25:c5:ec:72:68:92:de:88: 0e:e6:a7:77:0d:13:4d:f0:1c:cf:ac:85:ee:f6:93:03:c2:bc: 8e:7b:f0:fb:d1:5e:5e:a2:51:66:13:40:15:66:a2:a9:5d:fe: 15:8d:e5:f5:ad:77:b4:e7:1f:7c:58:f8:21:9c:2a:40:a9:a6: b9:8f:7a:2d:c7:cd:33:3f:9e:bf:08:8d:38:a0:a5:75:2a:49: 1e:e0:21:f4:3e:2c:88:42:0a:79:8c:92:41:e1:72:6f:60:c3: ce:a5:02:31 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUHDgaWtMCmgdva91MEpu4Ey7BMr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTExMjgxNzU3NDhaFw0yNTExMjkxOTI2NDhaMDMxMTAvBgNV BAMTKDZGNzAzQ0VEQUI2Q0MzMUJDQUU4NjM2NTIwMjc0QjlFNTI5QUM3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfilbuke9aj0l+qzKOGeY9R4u l+VnzWBnFribPHFrC9RH+QeRyEyqObHwq+gtya/onEa/rvp5v2ilzwRVUIRODSn9 LZZ6XQyiXOf7VlCii3S1zv1mOuMsFBeSPICW2NpkG+PvgIBPyMQt2Fqga6e9e8iU GZQaGu5ghxofdAP8IG7CRR7cDyfo+V79WInjts2rWPwJeI2MXsT2CtY510uAlxYC YJMJWfZZegDwVmPtGQUfT3Z5NJdA4yv0Ak3hU5z2TxIN/GASBjTJA5JfI9N0SnGy YwHtKBoozMoMy4kP0W+y3UmUewkgOZsKdl4PSLAidY7vGBo6/hDPKd1x8Hi3AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUb3A87atswxvK6GNlICdLnlKaxz8wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACw3SI+N57Y+bzFCXb99pijs aoLGHeA1cqbq7cvl7qW+pr6vCsXrjKjh5mh5OrOqR4mINMkBoz6yiYiQwzFlbKBH c7dSe11ukJCcnJrDNOHTFiIP53zN3nOOrdBO+CqeEquOdlfoXq5htonERA0StPem l1fi15Opaz2NJqbQ35Ubdj3nCknL2je2rLh9BglJ193y0C/A16p4dYIlxexyaJLe iA7mp3cNE03wHM+she72kwPCvI578PvRXl6iUWYTQBVmoqld/hWN5fWtd7TnH3xY +CGcKkCpprmPei3HzTM/nr8IjTigpXUqSR7gIfQ+LIhCCnmMkkHhcm9gw86lAjE= -----END CERTIFICATE-----Generated at Sat Nov 29 04:03:08 2025 by rpki-client