This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: PayuQ60FqhzICzul0rXBgY96uD4Eifom3nWGXMeo+hY= Subject key identifier: 50:CC:37:6B:A3:08:C2:24:C6:DB:96:35:A5:DA:16:68:CE:01:A5:24 Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 40A23E0A95A0ADEB733B408583087D35D6AA0430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 028A Signing time: Mon 01 Dec 2025 20:24:38 +0000 Manifest this update: Mon 01 Dec 2025 20:19:38 +0000 Manifest next update: Tue 02 Dec 2025 21:18:38 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: PgpN6JqexkM6AIkNS/pDlOn6keoqvinKpRSNwDtIseA=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 19:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a2:3e:0a:95:a0:ad:eb:73:3b:40:85:83:08:7d:35:d6:aa:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 1 20:19:38 2025 GMT Not After : Dec 2 21:18:38 2025 GMT Subject: CN=50CC376BA308C224C6DB9635A5DA1668CE01A524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:b3:91:0d:91:e1:60:11:ac:eb:72:4d:a8: 4a:0f:d8:29:7c:cc:ef:ac:d6:df:ce:77:0d:dd:95: 3d:64:23:26:37:f9:c3:0e:f2:b2:60:90:b5:79:8e: 07:53:c5:57:01:b4:22:43:0d:69:22:2c:40:83:db: 5b:ff:0a:9f:2e:55:89:f2:99:4a:25:d0:52:e6:16: 42:19:ea:5a:ed:34:8c:96:9c:ab:55:e3:c4:85:96: b4:c1:51:0d:06:7e:30:10:da:e6:92:57:ff:f1:75: 6b:02:64:31:d6:03:87:8d:24:04:ec:b4:52:c3:05: c7:95:ce:39:83:cc:50:25:19:21:33:7b:1d:c6:86: 2f:a5:ff:f5:04:02:37:1d:4b:7c:ca:dd:82:b4:ac: 51:72:aa:b5:eb:53:f5:cd:98:56:5a:c9:4e:2b:92: d0:d9:6a:2a:5b:03:d4:dc:5c:94:08:a3:50:ec:aa: 63:93:8c:77:8e:a2:d7:dd:f9:6f:c6:50:45:24:92: d5:43:68:17:4e:12:e9:fc:e2:3f:07:53:c4:64:b1: 44:01:12:8c:78:76:cf:e1:13:ab:a0:03:81:0c:87: 16:16:07:c9:8f:de:e0:0c:a4:88:9a:35:93:fc:ef: 69:ed:db:47:52:da:02:46:15:e3:8d:01:74:64:01: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CC:37:6B:A3:08:C2:24:C6:DB:96:35:A5:DA:16:68:CE:01:A5:24 X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1c:6b:17:36:9c:0c:1e:b8:65:56:40:45:8e:2c:d1:03:0e: 32:9f:6b:fe:d0:63:73:4b:a2:f9:75:92:11:90:21:20:1d:02: e4:58:70:ad:bd:d3:dd:95:60:83:68:e4:06:c7:fa:07:a0:7a: 03:a8:c1:3b:44:12:b6:a4:67:d3:17:d0:60:e3:78:9a:a5:2a: 38:96:cf:12:7a:06:4e:99:ab:4d:00:2f:3d:3c:b0:1b:3f:be: 86:a0:aa:b5:30:df:19:20:a4:08:7d:82:3b:32:73:98:f9:7a: 6d:7d:6b:12:09:f6:99:19:8c:8e:8b:dc:c0:1a:a1:e5:5f:4d: ae:e1:6c:2d:86:78:15:1a:31:28:b2:ac:bf:c1:91:5a:2c:cd: 87:bb:37:83:cb:71:cf:13:17:13:3d:ae:41:f1:79:f0:d0:e7: 2e:7a:dc:c9:6d:01:36:a0:f8:16:81:81:cf:c4:c0:51:0b:41: 68:a8:72:17:64:b9:87:0d:9a:cc:f3:0c:27:c0:54:03:22:27: 27:c0:5d:75:db:cc:04:c9:5d:84:ba:ec:86:9f:51:38:7d:dd: 73:06:54:38:72:c0:db:de:27:fc:ae:46:6a:b6:7b:bc:9d:94: 8a:49:ab:fd:da:57:bc:a7:7f:92:98:eb:83:58:59:6b:8e:0e: 53:2d:56:13 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUQKI+CpWgretzO0CFgwh9NdaqBDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMDEyMDE5MzhaFw0yNTEyMDIyMTE4MzhaMDMxMTAvBgNV BAMTKDUwQ0MzNzZCQTMwOEMyMjRDNkRCOTYzNUE1REExNjY4Q0UwMUE1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClc7ORDZHhYBGs63JNqEoP2Cl8 zO+s1t/Odw3dlT1kIyY3+cMO8rJgkLV5jgdTxVcBtCJDDWkiLECD21v/Cp8uVYny mUol0FLmFkIZ6lrtNIyWnKtV48SFlrTBUQ0GfjAQ2uaSV//xdWsCZDHWA4eNJATs tFLDBceVzjmDzFAlGSEzex3Ghi+l//UEAjcdS3zK3YK0rFFyqrXrU/XNmFZayU4r ktDZaipbA9TcXJQIo1DsqmOTjHeOotfd+W/GUEUkktVDaBdOEun84j8HU8RksUQB Eox4ds/hE6ugA4EMhxYWB8mP3uAMpIiaNZP872nt20dS2gJGFeONAXRkAfNjAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUUMw3a6MIwiTG25Y1pdoWaM4BpSQwHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIEcaxc2nAweuGVWQEWOLNED DjKfa/7QY3NLovl1khGQISAdAuRYcK29092VYINo5AbH+gegegOowTtEErakZ9MX 0GDjeJqlKjiWzxJ6Bk6Zq00ALz08sBs/voagqrUw3xkgpAh9gjsyc5j5em19axIJ 9pkZjI6L3MAaoeVfTa7hbC2GeBUaMSiyrL/BkVoszYe7N4PLcc8TFxM9rkHxefDQ 5y563MltATag+BaBgc/EwFELQWiochdkuYcNmszzDCfAVAMiJyfAXXXbzATJXYS6 7IafUTh93XMGVDhywNveJ/yuRmq2e7ydlIpJq/3aV7ynf5KY64NYWWuODlMtVhM= -----END CERTIFICATE-----Generated at Tue Dec 2 03:44:30 2025 by rpki-client