This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          Q2ktIZsdQo+dNnte2USR/JtqUDfrgfdMYF3OFtTh4ns=
Subject key identifier:   FF:94:F3:2D:DF:95:E6:85:47:14:E0:36:8C:E5:31:95:58:83:77:13
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       480E58F8B67398E2E18FB28A71CD412886179923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          04DF
Signing time:             Mon 22 Dec 2025 22:37:09 +0000
Manifest this update:     Mon 22 Dec 2025 22:32:09 +0000
Manifest next update:     Wed 24 Dec 2025 00:27:09 +0000
Files and hashes:         1: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          2: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
                          3: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: y9cXljVm9DvtoOW5vPcE4cJZ0//qDFvXR5PZxS17tVE=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 00:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0e:58:f8:b6:73:98:e2:e1:8f:b2:8a:71:cd:41:28:86:17:99:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Dec 22 22:32:09 2025 GMT
            Not After : Dec 24 00:27:09 2025 GMT
        Subject: CN=FF94F32DDF95E6854714E0368CE5319558837713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:da:4c:47:bc:67:6e:18:13:1e:1b:ea:24:
                    ba:a2:63:56:55:db:0e:8a:a7:7e:d9:ce:ce:cf:5c:
                    b4:a7:5d:b8:db:b9:91:99:86:19:a2:c3:cb:46:d0:
                    41:cf:d8:fe:d4:cf:b6:e7:d4:4b:ef:02:a2:3e:e1:
                    f5:43:9a:e3:f5:c8:84:3f:1a:7b:5e:8f:5b:2f:04:
                    41:43:7c:ea:03:46:e0:f6:f3:cb:9e:23:40:52:b4:
                    f2:94:1e:70:4b:f1:b2:63:e1:70:3d:40:da:52:ef:
                    af:fe:60:1b:e1:dd:33:d2:06:18:ea:e7:c8:89:cb:
                    03:19:dc:3e:b8:a4:6f:6d:63:1f:75:c6:0e:a3:1a:
                    9f:ed:c8:24:ba:88:35:f7:d5:af:b3:fc:8e:55:a5:
                    7a:74:af:62:b3:a6:f2:08:cd:3b:93:58:bd:e8:ea:
                    64:55:29:16:28:48:68:3e:53:a7:8e:3c:19:1b:16:
                    9f:ba:29:4e:6f:12:4d:7f:c0:09:b6:04:17:96:a6:
                    c2:f4:fa:4d:18:81:1f:c4:6e:47:84:99:29:e6:2f:
                    d3:ea:6c:ac:04:6b:11:5d:6e:0b:ee:aa:cd:9d:a3:
                    12:9f:5f:f0:56:dd:93:82:32:2f:cb:cd:78:6e:27:
                    b8:be:14:90:14:d7:e0:05:79:ff:f3:7c:d7:f5:53:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:F3:2D:DF:95:E6:85:47:14:E0:36:8C:E5:31:95:58:83:77:13
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:ec:4a:e3:0a:93:16:5d:06:79:ee:e4:ed:70:74:f7:1d:
         69:17:b2:bc:0b:2a:7f:95:c5:0e:14:ea:0f:f5:4f:a5:26:bf:
         70:8a:e6:f9:9d:ca:3c:fb:fe:2b:6c:37:b5:46:71:98:0c:a2:
         4e:41:26:f5:38:2d:0a:cc:f4:40:14:29:2f:1c:11:50:ec:82:
         bb:06:7c:ef:db:77:0e:05:74:05:16:cc:98:59:15:a6:dc:e3:
         43:cd:f8:98:8e:55:90:02:ac:50:59:f4:59:78:e6:58:b0:be:
         29:c7:76:d8:fd:7a:b1:cb:94:8c:64:72:27:3f:a6:cb:38:da:
         64:77:d7:54:e8:dc:e2:ca:7a:4b:d1:63:6e:64:c1:cf:d2:72:
         9e:e8:d0:48:08:5a:66:57:ca:3c:10:5b:3b:d1:a7:b3:87:01:
         6f:31:48:dc:6e:c7:81:e8:d2:09:2c:c5:d8:f8:ca:0e:f4:16:
         bf:6a:d5:17:8c:61:19:f9:7c:b8:49:01:be:fc:17:e0:59:af:
         b7:db:e3:c1:f1:28:26:a6:d9:55:13:5a:e5:29:58:e1:3e:8d:
         8d:84:da:25:c3:a0:2b:cd:04:1d:cd:d4:03:76:21:b2:34:69:
         d5:42:f1:09:d0:38:23:0c:4b:37:c4:e8:bc:f4:f1:23:34:97:
         ed:2f:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:34:39 2025 by rpki-client