This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: 911H+OUSA/ahaweBd5fZ/ujiFjIXdhGcnNV8LyIv2Eo= Subject key identifier: 00:3B:68:2A:A9:41:0E:9F:0D:C9:B2:E2:7D:B6:0C:A5:8A:E6:7E:6B Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 068DA64492CB847995769D2BAF8EC2B2DA6AA94E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 029E Signing time: Tue 16 Dec 2025 19:16:09 +0000 Manifest this update: Tue 16 Dec 2025 19:11:09 +0000 Manifest next update: Wed 17 Dec 2025 20:46:09 +0000 Files and hashes: 1: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) 2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: zJbOV0tRKtfZ7LTLAKapj0vud0DPHVnS5BiqEcrGXow=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8d:a6:44:92:cb:84:79:95:76:9d:2b:af:8e:c2:b2:da:6a:a9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Dec 16 19:11:09 2025 GMT Not After : Dec 17 20:46:09 2025 GMT Subject: CN=003B682AA9410E9F0DC9B2E27DB60CA58AE67E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:fe:53:b2:50:49:2d:bc:9d:09:40:6b:62: 66:03:74:3f:45:03:d1:54:c8:e2:2c:bb:4c:7b:d2: ac:e9:a7:0e:66:64:1d:61:be:9d:7f:ab:33:bb:04: cb:7a:93:13:97:27:36:ee:8f:ae:a4:fd:87:64:53: d0:2f:98:d7:0a:7f:24:d5:b3:1a:bc:9d:54:02:88: 70:91:d1:45:ae:5a:d3:a8:bb:56:dd:74:e5:4a:eb: e0:7d:c0:56:ff:8a:6f:27:f5:01:23:4d:2e:e1:12: e3:7b:4e:b3:b3:54:91:74:ea:9a:28:77:cd:78:0b: f1:bd:81:59:6c:54:98:5a:a4:4b:be:7a:49:ec:5c: 90:99:56:ff:84:2d:8c:9f:d6:e7:6f:12:6b:06:e6: df:bf:33:a4:0a:9c:46:06:2b:41:bb:51:95:ae:33: 5b:14:cd:8f:92:aa:da:4a:70:95:25:e0:83:07:0a: 3f:db:df:09:7b:be:ec:4d:c3:66:1b:6b:2f:cd:a4: ac:08:09:1c:6c:d4:2a:d6:bc:dc:67:36:cf:25:98: f4:c6:07:87:f2:d4:e2:56:cd:22:3d:a3:0d:33:05: 5b:c0:c1:f5:57:59:b7:8a:39:c4:04:32:d6:4b:e3: 71:46:18:a2:a1:ab:30:bb:4c:02:b9:e4:8c:67:de: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:68:2A:A9:41:0E:9F:0D:C9:B2:E2:7D:B6:0C:A5:8A:E6:7E:6B X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0e:55:04:48:ec:02:f2:42:ca:6e:13:99:dc:25:64:0d:7e: 13:5a:70:7e:4a:f2:ae:c7:03:9f:3f:81:d1:04:7c:81:93:f1: 2e:95:da:e0:f8:4c:a6:dc:59:22:a4:a3:9f:3f:8d:cc:81:4a: ae:50:97:bd:75:8d:be:fa:17:86:2d:e7:9c:a2:5f:db:00:3f: 62:83:aa:ed:b1:e3:a8:fb:35:1e:af:67:a5:48:e1:d8:13:38: 1e:7f:75:09:64:19:a4:fe:96:ec:73:5d:f4:9f:87:5a:43:1c: 3b:f1:45:c8:c4:45:d6:16:56:6b:f1:89:bd:3b:31:d5:15:71: ff:01:6b:a1:04:c8:1b:2b:4e:b8:3b:86:f6:a6:3f:09:6e:3e: d0:f7:35:71:1e:9f:66:3e:5c:a3:d3:bd:ff:74:5e:80:eb:51: 9c:67:34:43:ff:48:bc:8b:e6:c2:7d:e1:61:aa:d9:c9:75:01: 40:1a:df:63:d6:af:40:e8:df:35:48:4a:63:b1:65:21:e2:11: 06:50:4b:d4:15:1b:14:f6:8e:95:b2:d4:98:98:88:d7:c8:a0: 22:d1:9e:0b:9a:bf:c8:7c:6c:af:c7:01:b3:9f:fb:e0:eb:4d: f2:42:26:4d:f9:7b:97:99:bb:ce:16:df:16:0f:22:18:e5:53: 6c:cc:70:0f -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUBo2mRJLLhHmVdp0rr47CstpqqU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTEyMTYxOTExMDlaFw0yNTEyMTcyMDQ2MDlaMDMxMTAvBgNV BAMTKDAwM0I2ODJBQTk0MTBFOUYwREM5QjJFMjdEQjYwQ0E1OEFFNjdFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFB/5TslBJLbydCUBrYmYDdD9F A9FUyOIsu0x70qzppw5mZB1hvp1/qzO7BMt6kxOXJzbuj66k/YdkU9AvmNcKfyTV sxq8nVQCiHCR0UWuWtOou1bddOVK6+B9wFb/im8n9QEjTS7hEuN7TrOzVJF06poo d814C/G9gVlsVJhapEu+eknsXJCZVv+ELYyf1udvEmsG5t+/M6QKnEYGK0G7UZWu M1sUzY+SqtpKcJUl4IMHCj/b3wl7vuxNw2Ybay/NpKwICRxs1CrWvNxnNs8lmPTG B4fy1OJWzSI9ow0zBVvAwfVXWbeKOcQEMtZL43FGGKKhqzC7TAK55Ixn3s1DAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUADtoKqlBDp8NybLifbYMpYrmfmswHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL8OVQRI7ALyQspuE5ncJWQN fhNacH5K8q7HA58/gdEEfIGT8S6V2uD4TKbcWSKko58/jcyBSq5Ql711jb76F4Yt 55yiX9sAP2KDqu2x46j7NR6vZ6VI4dgTOB5/dQlkGaT+luxzXfSfh1pDHDvxRcjE RdYWVmvxib07MdUVcf8Ba6EEyBsrTrg7hvamPwluPtD3NXEen2Y+XKPTvf90XoDr UZxnNEP/SLyL5sJ94WGq2cl1AUAa32PWr0Do3zVISmOxZSHiEQZQS9QVGxT2jpWy 1JiYiNfIoCLRnguav8h8bK/HAbOf++DrTfJCJk35e5eZu84W3xYPIhjlU2zMcA8= -----END CERTIFICATE-----Generated at Wed Dec 17 01:27:18 2025 by rpki-client