This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
File:                     7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft (raw, json)
Hash identifier:          a+OGx1I3Wz6z5eqj5IeCWppU5YwR/ASWxaV0xLWUUfY=
Subject key identifier:   60:5A:D7:39:E9:41:EB:AC:38:9E:81:EC:52:E5:CC:54:61:DD:D2:B0
Authority key identifier: 74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6
Certificate issuer:       /CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
Certificate serial:       58D3AE5B06E449933AF6E2F7EA71A8A202D56935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
Manifest number:          04C3
Signing time:             Mon 01 Dec 2025 14:15:35 +0000
Manifest this update:     Mon 01 Dec 2025 14:10:35 +0000
Manifest next update:     Tue 02 Dec 2025 14:25:35 +0000
Files and hashes:         1: 7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl (hash: If283eEgOze9M9O+ll5/LFlRfB5tTV4j9LG3L8H+mpE=)
                          2: AS60841.asa (hash: NurbYaLQPlWH9fn7GFtznYKWcHcFMCABGrNP0mh8ICQ=)
                          3: AS204857.asa (hash: qCoDhndB5123m/pz43NiOOf5GYK9r3A8IDls/SUH+Mo=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl
                          rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Dec 2025 14:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d3:ae:5b:06:e4:49:93:3a:f6:e2:f7:ea:71:a8:a2:02:d5:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7428cf8c838a9c7e5ce3d6da9368c013904ec5b6
        Validity
            Not Before: Dec  1 14:10:35 2025 GMT
            Not After : Dec  2 14:25:35 2025 GMT
        Subject: CN=605AD739E941EBAC389E81EC52E5CC5461DDD2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:ce:ca:28:66:cf:d4:96:f5:34:71:06:30:
                    50:71:b8:1a:c1:63:e0:6a:d9:44:94:4e:42:83:04:
                    d7:13:63:14:bb:6f:d3:e7:7d:d5:d4:6e:6c:c8:a8:
                    10:0b:e2:b5:4d:cd:d4:50:5d:0e:47:e6:f8:87:57:
                    ea:ef:84:a3:c8:2b:0a:9a:77:b7:fe:03:63:68:7f:
                    ec:19:22:47:81:54:8b:33:cd:74:7c:aa:4c:59:36:
                    28:f0:71:6b:54:b6:9b:45:a0:40:14:5a:f6:f7:cd:
                    67:4e:f0:65:f1:5b:0f:59:41:86:5e:0c:2d:22:60:
                    ff:13:f4:a3:12:61:c5:eb:9a:ef:67:0c:91:e3:b1:
                    4f:15:cb:d8:cb:9a:d3:96:75:c4:8d:be:e6:99:42:
                    c1:cb:cd:65:dd:ce:43:f3:67:64:dd:4c:3a:5e:e4:
                    0f:7f:ab:5d:ba:7b:be:95:6b:95:37:67:eb:1d:a5:
                    69:63:7f:03:81:00:6e:27:9d:ac:97:3a:d8:2d:a5:
                    69:25:65:68:3c:a4:c9:fa:bd:f9:d1:10:a2:1f:f6:
                    43:33:ef:a0:68:d4:1b:05:71:6b:1b:25:1f:ce:10:
                    00:2a:d5:cb:2b:df:87:1a:50:37:69:f1:49:28:47:
                    b3:44:66:36:7b:44:b9:10:16:8b:ec:40:8a:1b:ae:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:D7:39:E9:41:EB:AC:38:9E:81:EC:52:E5:CC:54:61:DD:D2:B0
            X509v3 Authority Key Identifier:
                keyid:74:28:CF:8C:83:8A:9C:7E:5C:E3:D6:DA:93:68:C0:13:90:4E:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCjPjIOKnH5c49bak2jAE5BOxbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/0/7428CF8C838A9C7E5CE3D6DA9368C013904EC5B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:01:01:ed:b8:3b:ff:b8:a4:3f:ba:0d:28:12:06:c8:7e:
         d6:b8:b5:73:af:07:bf:0a:43:f4:a0:4c:d8:ed:fa:20:62:43:
         2e:b4:dd:e4:5c:3d:5d:2b:8b:6c:4d:bc:74:49:6d:d3:14:14:
         20:b2:2f:5e:3e:b9:20:31:04:76:23:49:08:18:00:b5:d5:d0:
         a4:17:1d:da:3b:ac:45:21:72:e8:15:4b:78:86:fa:4f:97:bf:
         2c:fe:c9:0c:98:9c:7c:45:ea:4d:55:a6:33:28:50:3d:5c:9e:
         97:f5:d5:89:71:22:9b:f5:42:de:49:3b:f7:89:15:fd:2c:e7:
         bb:16:3a:21:e4:ed:97:2c:0c:ba:d6:bb:66:cc:e1:45:e0:e4:
         2c:2b:d2:54:a8:1a:41:08:00:5e:76:82:22:ab:40:d5:7a:39:
         56:c8:18:85:78:a4:ba:d4:06:43:31:75:ee:c9:fa:fe:b0:f9:
         e6:a0:7a:6a:ce:d3:00:cd:0b:e8:ce:a5:cb:c4:4e:86:3a:14:
         f2:f4:e2:e6:be:89:38:be:8b:0b:a9:63:37:84:b3:4d:97:36:
         8e:c0:4c:c8:5c:b3:f8:07:94:b9:55:72:85:1b:f6:04:3c:89:
         98:fc:cf:b9:34:11:c7:d5:92:4a:77:26:d0:1a:af:87:dc:1e:
         be:19:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 2 06:36:27 2025 by rpki-client