This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: /by7gAXX7nDryZ5K231VMh2eiP05+8isnZZ8Uvi1uRY= Subject key identifier: 8E:A0:4B:23:6E:8A:45:E0:3F:4A:E8:39:AA:D5:30:CC:B0:86:19:DD Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 0448A91919BF58DA57201B754B411C3D4A3BDDC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0295 Signing time: Wed 10 Dec 2025 01:25:13 +0000 Manifest this update: Wed 10 Dec 2025 01:20:13 +0000 Manifest next update: Thu 11 Dec 2025 04:33:13 +0000 Files and hashes: 1: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) 2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: wNahFowTKq0yomlUCgHgm3tzwIXgskCrKmHM4f+GtN8=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:48:a9:19:19:bf:58:da:57:20:1b:75:4b:41:1c:3d:4a:3b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 10 01:20:13 2025 GMT Not After : Dec 11 04:33:13 2025 GMT Subject: CN=8EA04B236E8A45E03F4AE839AAD530CCB08619DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:6c:71:b0:09:ce:0f:e3:6b:9f:38:d2:16: 30:f9:2d:79:27:3c:3a:31:a2:75:11:4c:bd:d1:43: 71:b6:71:02:8b:f1:83:d0:95:03:c7:20:7c:55:26: 9e:73:91:48:ca:b4:a3:14:9e:e6:9d:49:b0:d3:f5: e2:2c:78:48:0b:3a:07:c1:c5:74:4a:ff:4c:e0:26: e7:c2:97:0d:4c:8b:9b:e6:a5:ba:dd:7e:2d:f0:66: 1c:1a:46:5d:d2:bb:71:45:e4:8f:35:62:e5:71:57: d9:96:87:2e:13:26:51:a1:f3:34:8f:28:a5:61:81: 25:eb:e3:a2:20:97:6d:9a:16:e2:8f:7f:a6:8f:ca: 07:11:21:53:0c:b1:26:9d:dd:f8:37:cf:26:27:cb: 40:fc:2f:cd:20:d9:ed:e6:7c:d2:d8:c4:51:72:de: 40:22:13:da:f6:89:40:3a:76:54:90:66:47:49:f7: 34:a2:7e:ec:8e:bb:71:27:ca:53:b4:cf:84:b4:75: 0d:03:fa:96:79:62:60:b1:02:94:f7:ac:67:d8:7e: a4:98:62:7d:cb:df:6d:83:79:e3:a3:d1:4a:f8:35: 4b:e1:37:ff:e7:01:23:5e:9c:ee:f8:cc:ca:37:ad: 0a:f7:90:e9:c0:54:25:65:de:8e:ef:f5:23:af:d8: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:4B:23:6E:8A:45:E0:3F:4A:E8:39:AA:D5:30:CC:B0:86:19:DD X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:78:a6:db:ae:10:78:f0:61:ae:2b:16:29:35:4b:d2:14:22: 68:c1:7d:3b:c8:ae:cc:d9:96:fd:ed:89:d1:e8:47:70:be:43: 8c:3c:2b:90:b4:23:34:75:7b:86:70:19:58:10:75:c1:92:68: ed:af:33:83:82:81:ec:73:86:9c:01:ae:94:58:22:23:2b:ee: 55:3e:37:64:27:37:74:d0:71:be:6b:79:c2:fa:10:62:2a:c2: fb:eb:26:7d:b9:4c:8d:f6:d3:19:2a:40:8f:7a:58:08:b7:11: 67:a0:47:86:2e:56:46:38:5b:12:e6:0d:48:a3:62:3e:b3:d4: cf:c4:70:4e:f9:e3:bd:58:84:d8:f0:90:2a:d4:e6:47:6b:85: 91:20:24:41:3c:8f:6f:80:1f:b6:51:01:38:53:4c:82:a4:2d: ac:29:e7:a7:c7:87:e7:4f:3a:b8:4f:ed:e6:76:29:52:28:9b: fe:da:63:c7:ef:4c:97:9f:17:a5:9b:e1:3a:6d:ff:ef:44:27: 98:a5:cb:bf:83:5f:ce:89:89:0a:81:b2:fc:25:15:2f:30:ce: ec:00:6c:8d:2e:50:83:28:25:68:38:75:eb:3c:b1:a8:f7:38: 7e:c8:d2:89:bb:46:a3:07:17:08:6b:46:ed:d7:0c:8e:98:d2: 09:bd:28:ac -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUBEipGRm/WNpXIBt1S0EcPUo73cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTAwMTIwMTNaFw0yNTEyMTEwNDMzMTNaMDMxMTAvBgNV BAMTKDhFQTA0QjIzNkU4QTQ1RTAzRjRBRTgzOUFBRDUzMENDQjA4NjE5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ImxxsAnOD+NrnzjSFjD5LXkn PDoxonURTL3RQ3G2cQKL8YPQlQPHIHxVJp5zkUjKtKMUnuadSbDT9eIseEgLOgfB xXRK/0zgJufClw1Mi5vmpbrdfi3wZhwaRl3Su3FF5I81YuVxV9mWhy4TJlGh8zSP KKVhgSXr46Igl22aFuKPf6aPygcRIVMMsSad3fg3zyYny0D8L80g2e3mfNLYxFFy 3kAiE9r2iUA6dlSQZkdJ9zSifuyOu3EnylO0z4S0dQ0D+pZ5YmCxApT3rGfYfqSY Yn3L322DeeOj0Ur4NUvhN//nASNenO74zMo3rQr3kOnAVCVl3o7v9SOv2AMhAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUjqBLI26KReA/Sug5qtUwzLCGGd0wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAt4ptuuEHjwYa4rFik1S9IU ImjBfTvIrszZlv3tidHoR3C+Q4w8K5C0IzR1e4ZwGVgQdcGSaO2vM4OCgexzhpwB rpRYIiMr7lU+N2QnN3TQcb5recL6EGIqwvvrJn25TI320xkqQI96WAi3EWegR4Yu VkY4WxLmDUijYj6z1M/EcE75471YhNjwkCrU5kdrhZEgJEE8j2+AH7ZRAThTTIKk Lawp56fHh+dPOrhP7eZ2KVIom/7aY8fvTJefF6Wb4Tpt/+9EJ5ily7+DX86JiQqB svwlFS8wzuwAbI0uUIMoJWg4des8saj3OH7I0om7RqMHFwhrRu3XDI6Y0gm9KKw= -----END CERTIFICATE-----Generated at Wed Dec 10 08:13:54 2025 by rpki-client