This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          AY77DIIkOh3hiVvfJnLGyRzYSgSWrgBN1J5EvOmNXVs=
Subject key identifier:   D9:98:93:48:2C:BD:06:BD:F3:FB:F1:EA:E6:FB:39:66:5D:40:70:72
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       3BC0539C80A0D3F5A127DD1E52BE1481DE63D3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          04FC
Signing time:             Tue 13 Jan 2026 08:53:02 +0000
Manifest this update:     Tue 13 Jan 2026 08:48:02 +0000
Manifest next update:     Wed 14 Jan 2026 10:01:02 +0000
Files and hashes:         1: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
                          2: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          3: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: TDDrsvSLxaFiBy1wYw5bHa4+9M2hLgy/kHqZTm4SjfA=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:53:9c:80:a0:d3:f5:a1:27:dd:1e:52:be:14:81:de:63:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Jan 13 08:48:02 2026 GMT
            Not After : Jan 14 10:01:02 2026 GMT
        Subject: CN=D99893482CBD06BDF3FBF1EAE6FB39665D407072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:e3:ef:b7:26:17:98:ce:bc:f3:e2:65:bd:
                    5c:f4:75:f6:ce:0d:c6:a4:4e:63:2c:f9:98:30:b8:
                    13:cc:93:e2:41:b5:0e:0b:5c:9b:83:dc:78:25:55:
                    e9:0d:0c:57:8d:2d:3d:85:35:a1:e6:2d:c3:73:db:
                    f1:93:88:f2:8a:b9:c5:00:ad:b9:3d:c8:86:f0:ed:
                    f1:af:90:52:08:1f:b9:7f:9f:96:b3:1d:de:74:6f:
                    9d:d0:4a:6d:4f:85:5a:86:86:ac:b4:11:86:8a:4e:
                    23:64:f5:af:74:00:fe:56:23:4a:e0:fb:d7:2b:9e:
                    d3:b3:d7:50:41:18:3a:81:7d:b1:5a:cb:1f:0d:7a:
                    77:af:a0:a3:cd:73:7f:95:61:9f:8b:7c:8f:e7:e3:
                    4d:f0:eb:99:2e:b7:f6:4c:a3:25:55:3c:2c:af:e6:
                    9d:01:64:b8:5b:a5:97:b8:bf:f7:08:a4:fc:08:1e:
                    88:1a:e8:7f:c0:7c:ee:83:27:82:fc:ea:e3:6e:ee:
                    d5:80:13:d2:d0:46:a0:f8:16:67:78:5d:0c:81:5e:
                    bd:bb:c8:f0:b0:25:fa:46:01:df:de:61:02:8f:6e:
                    44:a7:e8:93:f5:f2:6c:02:9a:9f:3b:e5:37:a0:64:
                    a2:5d:58:13:4e:26:8d:3a:ec:ff:78:81:8e:2b:bb:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:93:48:2C:BD:06:BD:F3:FB:F1:EA:E6:FB:39:66:5D:40:70:72
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:64:36:d1:5a:ef:db:98:eb:e1:13:07:7a:ad:73:99:1d:60:
         79:44:f5:24:3b:38:55:a0:98:c0:af:89:7b:40:5b:f1:4f:58:
         76:a9:dc:dc:17:bf:c5:87:57:c8:d1:d6:1d:b3:13:7a:c1:bf:
         12:1c:8a:ea:39:4a:93:b8:98:bd:f6:ff:1d:b3:90:d2:45:a8:
         60:88:53:89:60:0f:6d:88:37:34:b6:2d:b2:4a:44:23:f3:a8:
         22:d0:9e:89:3a:35:54:72:03:91:18:3e:d4:f9:a0:5d:26:2a:
         01:24:c9:97:76:1a:97:a6:a0:5d:61:73:17:37:41:77:87:cd:
         87:2e:9f:6a:08:10:47:07:27:9e:15:64:df:88:8b:7a:36:5a:
         1d:32:df:9b:04:38:95:20:4b:87:05:4d:34:a4:5f:c7:84:db:
         c3:bf:a6:cb:4a:24:41:fb:ec:3d:9d:f7:f7:4c:b5:0d:0d:8c:
         86:86:a5:93:ad:e5:3f:0a:fb:e2:31:c5:0d:20:f8:d7:b2:55:
         73:aa:90:cc:9e:aa:75:44:6e:c7:da:bd:d9:8d:57:d3:d7:62:
         fb:20:37:5a:ee:90:32:01:d5:01:ef:87:fc:18:d5:b5:66:b3:
         f0:50:e2:80:0a:a0:2c:ec:ad:7b:25:b7:81:fb:45:38:c8:5e:
         fc:69:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 16:23:13 2026 by rpki-client