This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          IUEeoTYesDIBGH1iR8hjpWB7P3+3jaFbp142r+0qyRs=
Subject key identifier:   1C:2C:80:AC:95:53:9C:C9:66:8D:C1:B9:F0:C2:86:9F:23:5A:55:62
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       4023859CB1C6D0D6C55FC327287108E8DB887999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          0503
Signing time:             Sun 18 Jan 2026 12:53:02 +0000
Manifest this update:     Sun 18 Jan 2026 12:48:02 +0000
Manifest next update:     Mon 19 Jan 2026 15:04:02 +0000
Files and hashes:         1: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: lJA6q7NRTDYW+qs8FYGUcO7XReXy7UiWuuAaBDCrZvg=)
                          2: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          3: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 15:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:23:85:9c:b1:c6:d0:d6:c5:5f:c3:27:28:71:08:e8:db:88:79:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Jan 18 12:48:02 2026 GMT
            Not After : Jan 19 15:04:02 2026 GMT
        Subject: CN=1C2C80AC95539CC9668DC1B9F0C2869F235A5562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:12:4f:c4:f2:b1:3a:bc:87:df:88:05:c4:
                    04:5d:66:1d:eb:5a:38:ec:2d:c8:0f:ae:83:27:5d:
                    e7:71:38:48:e4:28:d5:f8:94:14:a1:f9:ae:95:7b:
                    d9:4b:ed:ec:ec:5a:8e:41:c4:98:ac:a2:42:9b:7a:
                    5c:a1:b4:e4:b8:ae:05:e1:65:50:56:80:36:a7:d3:
                    8c:26:f3:bc:33:c7:37:7a:8d:75:8d:46:4a:79:79:
                    69:f8:47:af:52:3e:57:fe:c2:fc:04:9c:81:a3:20:
                    e3:b4:fc:20:72:f5:46:57:fa:32:a4:52:6b:d5:38:
                    6d:0e:f5:66:83:2c:95:6f:84:af:39:d0:0b:0f:fd:
                    07:a4:37:29:19:62:03:91:ee:0a:09:fa:df:a1:5f:
                    b8:e9:0f:36:42:99:d6:ea:74:01:2f:c7:ee:f2:8e:
                    4b:dc:f0:32:dd:22:b0:30:5b:62:9d:b3:ee:93:74:
                    2c:f0:e0:4b:64:ad:1d:5c:96:7e:49:86:0b:3f:bd:
                    9d:3e:81:a1:8b:22:0c:d9:aa:61:13:45:20:ac:80:
                    f2:12:2e:20:17:64:a9:41:41:8d:eb:d4:67:39:99:
                    b9:70:6e:9b:60:8e:75:96:6f:90:a9:7a:46:f1:94:
                    24:23:e1:5c:05:fa:02:a6:a3:5e:e1:ea:02:ad:62:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:80:AC:95:53:9C:C9:66:8D:C1:B9:F0:C2:86:9F:23:5A:55:62
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:92:4b:c1:27:f1:3a:30:68:ac:88:6b:83:80:6b:5e:16:40:
         eb:e9:f5:bc:3c:ef:4d:d4:54:c8:dc:82:6a:53:2b:e0:45:ef:
         b7:47:dc:f1:98:a4:db:3a:cd:7c:42:57:0d:b7:b5:a3:97:20:
         4e:ec:a8:b6:4a:24:1f:56:92:1f:22:db:12:07:8f:4d:fc:91:
         27:26:9a:d9:f5:a6:cf:97:33:7e:db:37:b1:90:4b:76:a4:cf:
         4e:b0:ec:fe:50:85:8b:3e:64:72:12:a6:fc:65:5b:1a:88:e7:
         63:13:d8:de:85:22:44:3e:b2:0b:f0:3b:87:c3:9c:64:36:a5:
         12:c7:1c:d3:97:03:2b:81:2e:53:1d:bd:94:a2:04:b8:7c:68:
         7b:ee:f5:81:a8:a7:4f:85:c2:5c:30:64:16:1a:72:e7:35:79:
         6b:87:ba:3c:4d:3f:84:9d:e2:10:46:85:a2:88:8c:c2:20:cf:
         8a:56:0a:55:fa:d0:55:26:aa:7a:66:03:c8:91:9e:1d:fa:4a:
         be:8d:3c:10:74:6c:15:69:87:10:62:dd:c7:75:b1:bf:8e:a3:
         a7:cc:9d:14:42:17:6b:4d:56:fd:b1:bc:1a:5a:47:62:8a:63:
         ed:23:69:a7:1e:e3:e0:aa:fd:42:05:d0:a7:14:9d:a9:c6:40:
         37:bd:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 02:39:57 2026 by rpki-client