This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft File: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json) Hash identifier: LrfAWpEgtiBy79338flgqsF+rxtqkyfSZAiKc9nM/Tg= Subject key identifier: DA:5C:ED:98:12:59:1D:C6:48:34:AA:3E:01:A1:5C:A8:B9:B5:39:0C Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D Certificate issuer: /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d Certificate serial: 45C2772BD4F0F7E7EB6DD7558D85E5DC24F3C6C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft Manifest number: 07 Signing time: Sat 20 Dec 2025 01:33:05 +0000 Manifest this update: Sat 20 Dec 2025 01:28:05 +0000 Manifest next update: Sun 21 Dec 2025 01:59:05 +0000 Files and hashes: 1: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: rZdgwwkQKmMWJ/38OSNt90pSGSYfN+NPUyW6jk6kjds=) 2: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: MsyraJ+raA0G3z8DLLjlQyfJ8//fsGH5jsDfx8phv5Y=) 3: AS51396.asa (hash: eaEnuDqquMnzN1UxoxjD+6BvzZHcFE8FQDbj+LvxLvY=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c2:77:2b:d4:f0:f7:e7:eb:6d:d7:55:8d:85:e5:dc:24:f3:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d Validity Not Before: Dec 20 01:28:05 2025 GMT Not After : Dec 21 01:59:05 2025 GMT Subject: CN=DA5CED9812591DC64834AA3E01A15CA8B9B5390C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:a4:b9:5e:54:2c:e0:3d:ef:14:46:61:ca: ba:c9:9e:ba:68:8d:a9:01:f2:2c:78:fc:d1:f8:d6: 35:69:5b:54:62:5f:9f:b7:d1:23:ab:0a:8b:cf:41: 51:72:63:4c:c7:bf:f2:dc:52:25:97:98:9f:cf:4e: 5d:64:0f:01:f5:bd:74:4b:2c:e1:66:93:7e:94:1b: 66:54:f9:af:94:68:08:3f:4d:89:5c:41:83:06:d1: 7f:e1:ee:05:66:53:3a:21:59:47:5b:b1:68:79:3c: 3e:4b:fd:b5:33:66:69:78:fc:8c:7b:a5:64:59:71: 3f:4d:ee:28:89:85:83:dd:68:14:cf:68:0f:9d:ed: 0b:49:39:59:85:01:67:1d:d4:e2:69:6b:9d:3e:8b: 7e:dd:f5:a0:4c:f2:4d:fc:9c:df:50:b8:d4:31:df: f7:ad:37:db:13:47:10:23:8c:f1:2d:bb:14:ce:a0: 2a:d0:75:fc:1c:96:3e:4e:7a:05:3c:2a:31:66:d1: b6:8e:29:47:1d:c0:cb:36:8d:a5:01:99:e9:5c:0b: d6:07:72:14:17:cf:bf:d7:e2:8f:c0:cd:f1:dd:cc: 68:1b:e3:e3:26:46:18:20:2e:a4:72:23:a7:9a:6a: 85:d3:f6:3c:6e:62:cf:fc:4c:b7:0e:13:84:eb:e1: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:ED:98:12:59:1D:C6:48:34:AA:3E:01:A1:5C:A8:B9:B5:39:0C X509v3 Authority Key Identifier: keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:96:e8:ab:51:9f:8b:ef:a7:17:83:2d:bd:02:dd:a3:86: c6:a4:63:29:ea:99:d5:7c:80:42:8c:da:0d:93:5b:6d:f9:4b: d6:e0:f0:f7:70:fd:d9:63:7c:3f:86:d9:19:e6:ff:25:00:9c: 52:58:a3:7f:ad:c5:d5:c4:2a:7f:68:32:3b:d3:6d:23:e0:b7: 8d:71:40:16:6e:f7:98:16:04:74:d4:e4:f3:64:af:32:4e:98: 87:71:99:42:7e:63:b4:a4:70:35:bf:cd:55:72:45:49:d2:c6: ae:2d:cf:53:a9:05:2e:82:5f:dc:77:37:9d:bf:a9:43:11:52: f5:08:f8:20:b1:38:2b:c4:b5:ed:5a:75:5b:b9:16:84:53:0b: c2:7b:aa:c9:13:56:8a:33:24:25:00:ff:28:da:e3:a9:fa:b3: f9:34:49:89:c3:68:cb:9e:b6:2c:5b:cc:4e:4e:cb:5b:0f:a2: 6f:cb:a3:e5:b8:a7:dc:0a:ac:48:da:ae:03:3f:b6:af:90:72: 78:2c:4b:83:10:98:66:64:2f:1d:e3:f6:28:80:df:3c:06:f5: dd:6a:d5:48:9c:8c:56:7a:24:a4:7a:41:1d:53:b8:f5:5a:6a: 72:65:2c:9f:cf:74:4c:20:d9:f3:7a:bd:26:da:05:0e:e8:d5: bc:ee:8b:46 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIURcJ3K9Tw9+frbddVjYXl3CTzxsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2FlODE1MGU5NTk1ZGJlOWE3NGEyODliZmQwZThkMmIx Y2U2YjM4ZDAeFw0yNTEyMjAwMTI4MDVaFw0yNTEyMjEwMTU5MDVaMDMxMTAvBgNV BAMTKERBNUNFRDk4MTI1OTFEQzY0ODM0QUEzRTAxQTE1Q0E4QjlCNTM5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k6S5XlQs4D3vFEZhyrrJnrpo jakB8ix4/NH41jVpW1RiX5+30SOrCovPQVFyY0zHv/LcUiWXmJ/PTl1kDwH1vXRL LOFmk36UG2ZU+a+UaAg/TYlcQYMG0X/h7gVmUzohWUdbsWh5PD5L/bUzZml4/Ix7 pWRZcT9N7iiJhYPdaBTPaA+d7QtJOVmFAWcd1OJpa50+i37d9aBM8k38nN9QuNQx 3/etN9sTRxAjjPEtuxTOoCrQdfwclj5OegU8KjFm0baOKUcdwMs2jaUBmelcC9YH chQXz7/X4o/AzfHdzGgb4+MmRhggLqRyI6eaaoXT9jxuYs/8TLcOE4Tr4RaDAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU2lztmBJZHcZINKo+AaFcqLm1OQwwHwYDVR0j BBgwFoAUyugVDpWV2+mnSiib/Q6NKxzms40wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8yL0NBRTgxNTBFOTU5NURCRTlBNzRBMjg5QkZEMEU4RDJCMUNFNkIzOEQuY3Js MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC95dWdWRHBXVjItbW5TaWliX1E2Tkt4em1z NDAuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzIvQ0FFODE1MEU5NTk1REJFOUE3NEEy ODlCRkQwRThEMkIxQ0U2QjM4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+EluirUZ+L76cXgy29At2j hsakYynqmdV8gEKM2g2TW235S9bg8Pdw/dljfD+G2Rnm/yUAnFJYo3+txdXEKn9o MjvTbSPgt41xQBZu95gWBHTU5PNkrzJOmIdxmUJ+Y7SkcDW/zVVyRUnSxq4tz1Op BS6CX9x3N52/qUMRUvUI+CCxOCvEte1adVu5FoRTC8J7qskTVoozJCUA/yja46n6 s/k0SYnDaMuetixbzE5Oy1sPom/Lo+W4p9wKrEjargM/tq+QcngsS4MQmGZkLx3j 9iiA3zwG9d1q1UicjFZ6JKR6QR1TuPVaanJlLJ/PdEwg2fN6vSbaBQ7o1bzui0Y= -----END CERTIFICATE-----Generated at Sat Dec 20 10:52:12 2025 by rpki-client