This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json) Hash identifier: HBdWDDDoWcaw6zMkvxnEoge0nyJDa/l3bpae2QbQSFQ= Subject key identifier: 61:91:D7:07:84:EB:04:DE:78:E4:67:D5:11:DD:34:07:00:C2:2D:3F Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Certificate serial: 3C36EAA2D7F3348D2381C2B97B5EA14BE494C19D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft Manifest number: 0285 Signing time: Thu 27 Nov 2025 23:42:47 +0000 Manifest this update: Thu 27 Nov 2025 23:37:47 +0000 Manifest next update: Sat 29 Nov 2025 01:59:47 +0000 Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: PDYY1alI6A52+3NEgjW33lpgDLtYxwXg+zK6Ox5AAUk=) 2: AS51396.asa (hash: 1ENBOcGdbtuoC2oHq9LiD7k1hldyllBsA7bZv/OKGg4=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:ea:a2:d7:f3:34:8d:23:81:c2:b9:7b:5e:a1:4b:e4:94:c1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2 Validity Not Before: Nov 27 23:37:47 2025 GMT Not After : Nov 29 01:59:47 2025 GMT Subject: CN=6191D70784EB04DE78E467D511DD340700C22D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:e9:d0:3d:a5:2b:22:cf:e8:82:8b:76:12: 80:0e:0e:69:9d:93:7d:74:91:11:ae:b9:0a:24:3e: f1:b9:07:55:02:d5:e9:ce:61:1c:75:fa:53:11:ac: 3f:4b:99:3e:5b:ff:4c:ac:3d:12:2b:34:b8:a4:9a: 94:c4:94:fc:e6:e3:b6:d5:26:94:52:84:08:37:95: bf:b0:a3:bb:61:a3:a7:9d:fe:d0:77:8d:fa:f9:df: bd:14:71:f1:b3:44:ae:23:9d:62:48:03:b4:3b:16: 6c:bd:c2:0b:e2:ea:39:06:59:ab:6c:3a:f4:b4:69: d9:24:8e:a7:a5:f7:a1:33:01:87:15:a9:80:5f:b2: 87:42:43:c7:3a:36:4f:dc:48:68:22:d1:4a:75:04: ac:d6:fe:ce:da:96:6a:c3:95:7e:ef:26:92:23:b2: 87:fc:75:a2:bf:3d:6d:08:f9:23:90:b1:8d:1a:6e: 27:a7:ce:56:75:ec:c5:bf:a3:70:f3:d6:f2:d7:c7: b4:16:85:02:8e:30:32:26:c5:40:58:eb:96:d3:88: bf:0f:dc:34:67:15:90:be:33:67:02:72:56:3c:de: 6d:cd:cd:6c:fc:95:a7:7b:aa:a8:f5:84:c3:c5:ce: 6d:dd:b3:7b:6a:54:05:9b:70:95:1c:90:d3:bd:7b: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:D7:07:84:EB:04:DE:78:E4:67:D5:11:DD:34:07:00:C2:2D:3F X509v3 Authority Key Identifier: keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a4:f3:92:9e:1e:5b:03:05:be:38:a6:21:19:49:0e:5f:f7: 4e:92:de:32:99:c3:dc:af:9f:86:e7:ed:05:91:89:3f:a8:a1: 2f:74:83:f7:c4:a3:39:35:b3:4f:59:53:9e:05:60:1a:24:5b: b5:78:91:7c:c1:75:52:9e:42:d1:75:90:5e:e7:30:49:aa:d8: a3:fb:70:04:17:ea:d7:13:1a:b6:e4:43:23:e3:d2:18:6d:42: 08:e5:dd:d9:9b:3c:fb:c3:83:bd:71:48:d2:95:5f:7d:9b:f5: 8d:41:98:6c:f5:43:91:4d:b4:43:9f:cc:d6:0a:8e:80:d8:92: 9c:e3:de:7a:d7:eb:d9:a8:fb:02:f8:c7:db:df:e1:d4:eb:89: a7:67:5c:39:cb:57:6f:89:b7:5f:bb:a1:b6:c8:b7:90:a9:fb: ea:3a:08:1d:a9:6d:bf:89:70:40:27:2c:88:df:76:3b:20:d7: 45:0f:ed:81:cf:e8:9d:69:08:e2:16:55:70:38:d9:21:7d:1e: 7d:76:e4:95:63:2b:f7:98:01:76:98:9a:0b:34:04:1b:13:bf: 7a:a5:90:99:0c:0e:0b:fc:75:55:a0:95:93:02:24:7c:5f:e2: ad:4e:08:4a:8f:e2:a8:d4:87:21:c8:45:97:e8:57:43:d6:76: 09:2a:ba:09 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUPDbqotfzNI0jgcK5e16hS+SUwZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi MWZiYzNhMjAeFw0yNTExMjcyMzM3NDdaFw0yNTExMjkwMTU5NDdaMDMxMTAvBgNV BAMTKDYxOTFENzA3ODRFQjA0REU3OEU0NjdENTExREQzNDA3MDBDMjJEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z+nQPaUrIs/ogot2EoAODmmd k310kRGuuQokPvG5B1UC1enOYRx1+lMRrD9LmT5b/0ysPRIrNLikmpTElPzm47bV JpRShAg3lb+wo7tho6ed/tB3jfr5370UcfGzRK4jnWJIA7Q7Fmy9wgvi6jkGWats OvS0adkkjqel96EzAYcVqYBfsodCQ8c6Nk/cSGgi0Up1BKzW/s7almrDlX7vJpIj sof8daK/PW0I+SOQsY0abienzlZ17MW/o3Dz1vLXx7QWhQKOMDImxUBY65bTiL8P 3DRnFZC+M2cCclY83m3NzWz8lad7qqj1hMPFzm3ds3tqVAWbcJUckNO9ewWhAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUYZHXB4TrBN545GfVEd00BwDCLT8wHwYDVR0j BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3 NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4 NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD2k85KeHlsDBb44piEZSQ5f 906S3jKZw9yvn4bn7QWRiT+ooS90g/fEozk1s09ZU54FYBokW7V4kXzBdVKeQtF1 kF7nMEmq2KP7cAQX6tcTGrbkQyPj0hhtQgjl3dmbPPvDg71xSNKVX32b9Y1BmGz1 Q5FNtEOfzNYKjoDYkpzj3nrX69mo+wL4x9vf4dTriadnXDnLV2+Jt1+7obbIt5Cp ++o6CB2pbb+JcEAnLIjfdjsg10UP7YHP6J1pCOIWVXA42SF9Hn125JVjK/eYAXaY mgs0BBsTv3qlkJkMDgv8dVWglZMCJHxf4q1OCEqP4qjUhyHIRZfoV0PWdgkqugk= -----END CERTIFICATE-----Generated at Fri Nov 28 03:27:38 2025 by rpki-client