This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          81h2LEsyeenNXGIlnmYGyoCE06wl1RBma6lMw7Fb5Uk=
Subject key identifier:   D9:96:11:B2:B1:87:D4:1D:27:0A:0B:82:72:A4:00:CE:E7:DB:6D:BE
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       5A9D3EF583C553AD3AD6ED4A8DB7D02A1464903A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          0516
Signing time:             Sun 01 Feb 2026 18:48:03 +0000
Manifest this update:     Sun 01 Feb 2026 18:43:03 +0000
Manifest next update:     Mon 02 Feb 2026 18:52:03 +0000
Files and hashes:         1: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: k3x/QczobopeJshE5cmxnQIeaHP/PUYwvp5iCTFDB3U=)
                          2: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          3: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9d:3e:f5:83:c5:53:ad:3a:d6:ed:4a:8d:b7:d0:2a:14:64:90:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Feb  1 18:43:03 2026 GMT
            Not After : Feb  2 18:52:03 2026 GMT
        Subject: CN=D99611B2B187D41D270A0B8272A400CEE7DB6DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:87:be:7c:80:3d:de:16:b9:86:ab:8b:6d:
                    a5:49:d3:ba:b9:3f:64:ed:ea:c4:69:62:c3:16:da:
                    70:c2:5d:34:cd:65:6a:08:48:ad:b7:b0:63:f2:76:
                    db:36:e8:09:1b:c9:6e:ba:62:9e:e8:9e:50:39:65:
                    e4:96:0d:4e:60:8e:48:4b:a6:03:eb:40:fe:09:6c:
                    f5:39:2c:54:d9:34:e3:ef:bc:e7:0f:40:dc:a9:53:
                    f4:9f:91:27:aa:3b:12:02:78:07:80:62:d1:9c:f6:
                    e4:aa:17:9c:64:0e:5f:97:06:00:f5:e5:9e:d9:cc:
                    2f:f6:f8:18:28:93:62:d6:e9:1e:79:92:b1:ac:c6:
                    1c:e0:2f:65:52:f2:8c:66:55:a7:a5:73:05:75:c4:
                    ae:7e:2e:38:b0:24:62:3a:5b:c3:ab:42:1f:18:74:
                    b5:f9:eb:9a:29:39:2d:22:77:f6:94:bb:ae:91:d2:
                    1a:31:b5:27:9e:17:9f:1c:72:9e:d5:ba:fa:bd:f3:
                    9a:ba:f0:13:6b:17:3f:b6:60:4a:a6:a2:4c:03:52:
                    03:56:35:37:ac:d5:62:fb:96:3e:52:54:54:66:6b:
                    88:6b:da:33:05:1f:98:83:99:4f:73:13:60:85:5c:
                    06:47:29:1b:43:af:b0:c9:04:84:66:28:a1:10:41:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:96:11:B2:B1:87:D4:1D:27:0A:0B:82:72:A4:00:CE:E7:DB:6D:BE
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:8e:8b:bd:45:34:f9:a0:d2:67:d3:87:66:72:8e:d8:50:
         81:90:80:a9:df:92:c6:04:f6:fb:19:2c:2e:6a:48:71:ca:1c:
         c2:a9:e6:e0:60:f1:c7:0e:fd:dd:d9:18:02:62:c8:f0:ee:aa:
         b1:17:67:25:f7:3e:3c:e4:c0:bf:69:05:01:35:de:37:8c:ff:
         d1:62:87:f0:47:26:bf:d5:e7:1f:57:d8:33:76:07:e2:a6:6c:
         76:1f:37:ac:89:37:84:99:c9:1c:41:a2:79:50:ae:50:fb:7b:
         86:0e:10:0b:2a:9a:c1:c3:f2:00:a4:7e:6a:f2:9d:61:d6:88:
         6c:49:a0:cb:9d:6f:f8:60:69:48:30:d9:a7:0e:27:50:17:1c:
         87:1f:be:d6:70:8b:3b:13:00:ce:da:8e:42:2a:3c:a3:e4:82:
         58:41:00:db:9b:81:32:03:67:98:e0:f8:43:e0:da:b2:29:cd:
         3e:6e:14:bb:0d:6c:d6:04:d5:ca:65:05:5e:33:4d:0c:7f:76:
         9f:b8:94:41:b2:87:2c:19:da:b1:c8:10:98:d1:32:03:5e:20:
         eb:e9:de:d2:32:e6:db:41:75:1b:26:17:e8:df:db:70:43:c1:
         14:f2:19:cf:be:f3:83:47:91:bd:15:37:16:b6:f6:92:b9:bd:
         76:13:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:27:39 2026 by rpki-client