This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: CeZ0ylXWO09GzcfPHxGeO9fUSYcopd2cMTSnvRbs1zc= Subject key identifier: A2:D5:3A:01:87:C2:9C:A6:F3:6C:A4:66:1E:B1:2D:4B:9F:BF:9D:78 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 722BB83F775F0E5B8CD9573549B710FDEB5FC69A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 027E Signing time: Sat 22 Nov 2025 18:52:34 +0000 Manifest this update: Sat 22 Nov 2025 18:47:34 +0000 Manifest next update: Sun 23 Nov 2025 21:31:34 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: 2L7naQexlWGAJgw4xnlaFiqRJZCDo6XAuGboNcX+weo=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2b:b8:3f:77:5f:0e:5b:8c:d9:57:35:49:b7:10:fd:eb:5f:c6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Nov 22 18:47:34 2025 GMT Not After : Nov 23 21:31:34 2025 GMT Subject: CN=A2D53A0187C29CA6F36CA4661EB12D4B9FBF9D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:63:b1:83:91:aa:68:cd:6f:67:ff:df:7f: 03:bb:05:ec:17:bf:06:35:90:0d:78:2d:5b:1e:02: 40:1c:e8:22:89:af:fb:a8:d4:43:d9:b2:73:9e:4c: a5:6c:13:18:ae:3d:5d:43:49:5c:11:78:53:a5:8e: cb:15:bf:93:74:5d:aa:39:77:97:58:bd:09:56:4c: d5:0d:78:00:69:1f:ea:1c:bc:3b:cb:b1:2b:4d:4d: 4c:6c:81:fd:bb:97:dc:12:22:02:da:28:02:3a:0e: c6:03:26:fa:0f:3c:77:b1:a5:87:d8:4e:8c:c7:9e: cf:de:48:50:8d:6c:62:be:97:89:f3:40:8b:54:77: 4c:f2:ea:0a:f1:98:ee:cb:f9:ed:e9:f9:9e:48:de: 4f:fe:6c:ef:42:ef:c3:e0:6e:2e:6c:04:19:f6:14: 5e:bd:30:c2:61:25:68:b7:82:dc:f4:24:a0:4e:10: 87:7e:c7:ce:c9:bc:c5:7b:9c:9b:6f:3f:05:4b:d7: 62:7c:a0:f7:72:a2:9d:9f:c9:47:c5:fb:a7:8e:5f: 04:aa:d1:74:18:10:83:e5:99:3c:53:f5:87:c3:53: 52:41:63:d6:3d:9a:f1:2a:a2:fa:7d:2f:25:86:be: 63:fe:ce:ad:56:78:e6:8f:c7:60:93:63:0d:f6:b8: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D5:3A:01:87:C2:9C:A6:F3:6C:A4:66:1E:B1:2D:4B:9F:BF:9D:78 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:73:bc:df:98:dd:9c:fc:99:13:b7:2d:59:2b:6f:5c:00: ab:8c:7b:00:7c:b4:b1:fb:4a:cd:e6:d1:93:22:43:89:ca:9f: 21:a8:2b:dc:a9:9c:b5:84:db:fd:8e:f5:e0:4b:4c:55:ef:17: 2f:8f:54:fe:de:c2:64:4c:cf:ca:b4:6d:dc:75:c3:4a:4a:04: e1:34:67:17:53:38:01:91:89:7b:be:bf:bc:0a:d2:02:bc:d2: 63:73:e4:00:db:f6:92:6a:85:6a:ce:aa:95:c5:e6:ab:04:7e: d4:b0:3f:87:ea:c0:45:2e:c7:b5:2d:bb:e0:6f:2c:46:bf:4c: 4a:04:d5:2b:5f:31:91:d9:5b:54:ac:d0:b6:b1:46:8b:8a:ed: ab:ab:50:2e:0e:a2:74:38:5c:85:85:2a:68:9f:36:2a:43:7d: c6:f5:cc:cd:3c:0a:1a:4f:6d:fb:ed:91:88:89:95:b1:95:7c: 11:e2:60:35:a2:2d:de:25:dc:36:5c:4d:52:fd:d2:b4:8f:6c: 1e:ea:1d:b7:41:02:cb:82:9f:5c:99:d3:72:e5:92:ae:27:ea: 13:42:5e:d9:32:0b:fd:0d:e8:13:4a:03:a4:20:27:93:a6:e0: 79:d2:bc:c1:fe:01:25:fa:bc:d8:45:50:1b:f5:9e:67:a9:06: 87:cd:71:14 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUciu4P3dfDluM2Vc1SbcQ/etfxpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTExMjIxODQ3MzRaFw0yNTExMjMyMTMxMzRaMDMxMTAvBgNV BAMTKEEyRDUzQTAxODdDMjlDQTZGMzZDQTQ2NjFFQjEyRDRCOUZCRjlENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQmOxg5GqaM1vZ//ffwO7BewX vwY1kA14LVseAkAc6CKJr/uo1EPZsnOeTKVsExiuPV1DSVwReFOljssVv5N0Xao5 d5dYvQlWTNUNeABpH+ocvDvLsStNTUxsgf27l9wSIgLaKAI6DsYDJvoPPHexpYfY TozHns/eSFCNbGK+l4nzQItUd0zy6grxmO7L+e3p+Z5I3k/+bO9C78Pgbi5sBBn2 FF69MMJhJWi3gtz0JKBOEId+x87JvMV7nJtvPwVL12J8oPdyop2fyUfF+6eOXwSq 0XQYEIPlmTxT9YfDU1JBY9Y9mvEqovp9LyWGvmP+zq1WeOaPx2CTYw32uPKxAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUotU6AYfCnKbzbKRmHrEtS5+/nXgwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFBDc7zfmN2c/JkTty1ZK29c AKuMewB8tLH7Ss3m0ZMiQ4nKnyGoK9ypnLWE2/2O9eBLTFXvFy+PVP7ewmRMz8q0 bdx1w0pKBOE0ZxdTOAGRiXu+v7wK0gK80mNz5ADb9pJqhWrOqpXF5qsEftSwP4fq wEUux7Utu+BvLEa/TEoE1StfMZHZW1Ss0LaxRouK7aurUC4OonQ4XIWFKmifNipD fcb1zM08ChpPbfvtkYiJlbGVfBHiYDWiLd4l3DZcTVL90rSPbB7qHbdBAsuCn1yZ 03Llkq4n6hNCXtkyC/0N6BNKA6QgJ5Om4HnSvMH+ASX6vNhFUBv1nmepBofNcRQ= -----END CERTIFICATE-----Generated at Sun Nov 23 12:22:34 2025 by rpki-client