This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          FyE8PsZQyJ6+CkPdo/cf13l9QFHrnPyu+laxeFEbkCg=
Subject key identifier:   A0:70:F9:00:6E:5E:74:BA:FE:92:8D:EA:D1:68:A8:3B:3E:6C:D3:BC
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       4AB063642B99DC70735463FA4AAD887FAC9C0DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          04D1
Signing time:             Fri 12 Dec 2025 06:27:09 +0000
Manifest this update:     Fri 12 Dec 2025 06:22:09 +0000
Manifest next update:     Sat 13 Dec 2025 09:14:09 +0000
Files and hashes:         1: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
                          2: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          3: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: Nl3LgNOLu7ty7PMn6hG9xHua0Ob2WzykJ/JzvjfQ7YQ=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:63:64:2b:99:dc:70:73:54:63:fa:4a:ad:88:7f:ac:9c:0d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Dec 12 06:22:09 2025 GMT
            Not After : Dec 13 09:14:09 2025 GMT
        Subject: CN=A070F9006E5E74BAFE928DEAD168A83B3E6CD3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:80:30:50:69:a4:dc:ee:fc:65:50:89:27:
                    e8:c0:a5:22:7e:f0:20:6b:e1:85:19:4f:0e:44:fc:
                    67:d6:5a:5b:a0:36:4f:3a:e9:0c:c0:02:6a:bc:9a:
                    04:0c:a3:01:4a:80:a6:6e:14:a0:34:6f:a9:15:b8:
                    89:96:e1:22:73:ff:d6:10:b8:17:68:14:a3:4d:5f:
                    ad:a4:5b:45:cc:8d:7d:83:cd:34:16:e8:bc:6b:7c:
                    9e:1a:ac:a2:fa:82:07:83:65:3f:ed:03:fa:96:29:
                    b1:7d:49:2c:6a:c2:59:f3:6f:3b:31:e0:8e:e3:e1:
                    5b:29:88:61:a6:ae:26:2b:0d:ca:fd:76:4e:4a:1d:
                    96:ae:4d:b4:de:12:cf:63:ef:db:b3:d9:40:95:37:
                    47:ba:d2:1f:ac:c4:b7:e2:a4:cb:67:9f:ff:ab:d5:
                    fc:90:56:f1:09:65:ce:6a:e2:66:99:b0:d8:01:2c:
                    24:8d:e5:6a:c9:4b:f4:40:bf:b1:b9:95:90:4e:6d:
                    1f:24:b0:d4:14:5a:03:65:3c:a2:11:ae:dc:e6:ce:
                    ba:9a:62:d9:a3:52:95:58:33:37:9c:41:7d:34:43:
                    91:74:34:87:4e:14:8e:ed:fc:72:f0:f1:f4:7f:ad:
                    52:df:d6:53:4f:11:8f:0b:39:de:c4:be:cb:2c:ad:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:F9:00:6E:5E:74:BA:FE:92:8D:EA:D1:68:A8:3B:3E:6C:D3:BC
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:c3:5b:f3:2d:30:5c:05:de:4e:06:ad:36:de:07:34:76:
         61:ab:1e:06:eb:d5:bb:a0:9a:87:3b:53:e1:89:d1:a1:67:11:
         0f:9b:56:52:65:27:35:94:8e:e3:7f:c1:60:ba:88:f7:dc:61:
         70:af:1d:f6:1f:f7:8e:20:f7:06:f2:b1:88:61:b0:e0:00:24:
         75:57:05:bf:90:20:bc:a3:5c:64:5d:5c:97:9e:3d:9b:6e:6b:
         3d:0d:70:0a:81:b0:9f:1e:29:ac:f7:1f:7f:a7:e1:15:58:3b:
         ca:7b:7a:a9:8e:b4:02:bd:3d:cd:3c:d3:8c:6e:95:1e:4a:4a:
         fd:70:7c:7f:f5:a8:e5:52:64:ae:a9:d8:4a:38:c9:75:c8:3f:
         24:67:32:ba:c1:3c:32:46:00:ae:46:1f:07:e4:0a:2a:8e:09:
         d4:96:d9:08:fa:d8:d4:0e:7b:b6:c0:a2:7f:4c:bb:a4:ae:12:
         62:92:1f:03:d3:40:74:46:09:0a:a4:72:3a:4d:98:6d:af:cb:
         b4:a3:ec:11:d8:97:bb:da:4c:16:75:8c:ef:b3:1f:e3:e2:54:
         c1:8f:32:81:1f:c8:65:14:04:bf:fb:60:31:e3:d6:25:9d:0d:
         c3:84:98:d4:b3:dd:8b:62:e4:90:2d:63:fc:9a:90:66:60:6f:
         3d:4d:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:49:21 2025 by rpki-client