This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft File: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json) Hash identifier: dd8jKnP861722Npgpr/LGrGtXZ7Y4p8teehg7jjep4Q= Subject key identifier: 42:B5:E7:E3:6A:3F:9D:93:BF:50:5D:7A:DC:F1:CF:7E:83:46:9F:F2 Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D Certificate issuer: /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d Certificate serial: 3A6A559B5284F92C4EEA19D556F471F6482BEE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft Manifest number: 0C Signing time: Wed 24 Dec 2025 04:13:06 +0000 Manifest this update: Wed 24 Dec 2025 04:08:06 +0000 Manifest next update: Thu 25 Dec 2025 04:58:06 +0000 Files and hashes: 1: AS51396.asa (hash: eaEnuDqquMnzN1UxoxjD+6BvzZHcFE8FQDbj+LvxLvY=) 2: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: 8FnEjzWDE0c+RlGTu40SHjh9hM31XMQyahOH6jQiSaQ=) 3: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: MsyraJ+raA0G3z8DLLjlQyfJ8//fsGH5jsDfx8phv5Y=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:55:9b:52:84:f9:2c:4e:ea:19:d5:56:f4:71:f6:48:2b:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d Validity Not Before: Dec 24 04:08:06 2025 GMT Not After : Dec 25 04:58:06 2025 GMT Subject: CN=42B5E7E36A3F9D93BF505D7ADCF1CF7E83469FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:00:bf:ef:fc:83:88:e3:81:11:d1:b1:9e: 28:ad:9b:5e:f7:83:6c:3e:ff:67:17:04:c3:da:c0: 17:e9:13:f7:83:8c:44:a9:ba:af:2a:21:51:0f:40: 73:b8:9c:4e:06:b1:74:0b:b1:00:0c:ab:73:76:d1: 26:91:b4:e3:dd:1e:5c:55:02:76:9d:08:40:b6:e3: 53:3a:8b:48:63:16:f0:87:c1:72:69:e5:b6:97:6e: 82:3c:b8:62:68:a1:6b:d2:b6:25:0d:e4:84:10:b8: b3:8b:6f:68:76:fe:1e:58:05:45:2e:b1:58:d9:ab: d0:fc:fb:ea:c0:4e:78:e2:55:c3:a4:44:03:3a:05: f9:0b:61:35:75:0d:ed:c8:3d:20:cb:c9:d2:20:f9: 64:93:39:27:b5:c0:96:e0:99:96:67:e6:e9:cd:77: 18:eb:dd:bf:d2:6f:27:e6:65:a3:d1:b3:2e:82:3d: 80:f7:dd:4c:98:e5:3c:4e:75:0e:01:b4:9b:a3:a5: b1:e0:95:cf:e6:e1:1d:99:69:dd:8d:f1:7a:79:ba: 03:c4:2e:07:2f:23:0a:c6:81:4b:d0:e9:5e:fa:b6: 0c:2e:74:24:72:a1:f7:f7:fb:ea:3b:c2:5c:0b:bd: 7f:10:0a:71:d9:22:c8:85:aa:b7:45:40:2f:4b:72: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:E7:E3:6A:3F:9D:93:BF:50:5D:7A:DC:F1:CF:7E:83:46:9F:F2 X509v3 Authority Key Identifier: keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:45:a9:17:01:6f:af:b0:45:73:47:dd:7a:c9:65:32:43:17: cf:00:00:5a:5c:48:3f:87:08:d6:95:3e:9c:78:94:d4:cf:d5: 2c:d3:45:ae:30:ad:3c:e1:7d:2f:b6:07:83:7d:f7:16:2e:26: 9f:96:ef:45:e5:14:0b:3f:8b:8b:75:06:3d:6a:07:6a:f0:30: e9:8a:fd:14:af:f1:93:50:b5:78:f8:df:1f:e7:27:02:63:9f: d8:34:7e:f4:02:3b:91:9b:28:2f:91:32:86:1b:67:10:c9:b9: a4:53:17:78:38:28:e7:04:5e:10:ee:ae:a6:18:e3:cc:eb:79: f7:f0:0b:44:50:00:76:cd:a7:af:41:df:ca:70:59:60:0c:ff: 49:fc:f2:88:89:43:c8:e9:bf:33:8a:68:16:f0:b5:ed:af:79: e4:36:b0:35:e0:ee:09:ce:1c:59:7b:36:05:78:25:29:a6:53: 8b:33:a9:7f:a0:06:6d:1b:bd:1f:a3:85:47:17:33:c6:c6:ec: 55:38:cf:10:40:e9:18:13:70:b0:b6:d4:ab:81:8d:c5:33:f4: 54:92:01:6c:d9:3f:a1:6c:2c:4d:9a:07:4f:4d:ad:58:47:84: c7:8f:9d:b2:83:6b:85:f6:d2:22:7f:b3:d8:88:ae:17:47:06: c3:36:3b:65 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUOmpVm1KE+SxO6hnVVvRx9kgr7nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2FlODE1MGU5NTk1ZGJlOWE3NGEyODliZmQwZThkMmIx Y2U2YjM4ZDAeFw0yNTEyMjQwNDA4MDZaFw0yNTEyMjUwNDU4MDZaMDMxMTAvBgNV BAMTKDQyQjVFN0UzNkEzRjlEOTNCRjUwNUQ3QURDRjFDRjdFODM0NjlGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yQC/7/yDiOOBEdGxniitm173 g2w+/2cXBMPawBfpE/eDjESpuq8qIVEPQHO4nE4GsXQLsQAMq3N20SaRtOPdHlxV AnadCEC241M6i0hjFvCHwXJp5baXboI8uGJooWvStiUN5IQQuLOLb2h2/h5YBUUu sVjZq9D8++rATnjiVcOkRAM6BfkLYTV1De3IPSDLydIg+WSTOSe1wJbgmZZn5unN dxjr3b/SbyfmZaPRsy6CPYD33UyY5TxOdQ4BtJujpbHglc/m4R2Zad2N8Xp5ugPE LgcvIwrGgUvQ6V76tgwudCRyoff3++o7wlwLvX8QCnHZIsiFqrdFQC9Lcj0vAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUQrXn42o/nZO/UF163PHPfoNGn/IwHwYDVR0j BBgwFoAUyugVDpWV2+mnSiib/Q6NKxzms40wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8yL0NBRTgxNTBFOTU5NURCRTlBNzRBMjg5QkZEMEU4RDJCMUNFNkIzOEQuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC95dWdWRHBXVjItbW5TaWliX1E2Tkt4em1z NDAuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzIvQ0FFODE1MEU5NTk1REJFOUE3NEEy ODlCRkQwRThEMkIxQ0U2QjM4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA1FqRcBb6+wRXNH3XrJZTJD F88AAFpcSD+HCNaVPpx4lNTP1SzTRa4wrTzhfS+2B4N99xYuJp+W70XlFAs/i4t1 Bj1qB2rwMOmK/RSv8ZNQtXj43x/nJwJjn9g0fvQCO5GbKC+RMoYbZxDJuaRTF3g4 KOcEXhDurqYY48zreffwC0RQAHbNp69B38pwWWAM/0n88oiJQ8jpvzOKaBbwte2v eeQ2sDXg7gnOHFl7NgV4JSmmU4szqX+gBm0bvR+jhUcXM8bG7FU4zxBA6RgTcLC2 1KuBjcUz9FSSAWzZP6FsLE2aB09NrVhHhMePnbKDa4X20iJ/s9iIrhdHBsM2O2U= -----END CERTIFICATE-----Generated at Fri Dec 26 15:40:42 2025 by rpki-client