This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft File: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json) Hash identifier: KJSIMm/QrITCU5YoJveRPxhaBf75xAUy4JhvxZC85o0= Subject key identifier: 20:EE:42:B1:9C:9E:26:30:4A:6F:2C:F4:F9:E1:5B:BA:B4:3A:AA:2A Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 Certificate issuer: /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Certificate serial: 09DA047396564C7458ED38556CC3BD5CC893533C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft Manifest number: 7F Signing time: Fri 26 Dec 2025 07:10:45 +0000 Manifest this update: Fri 26 Dec 2025 07:05:45 +0000 Manifest next update: Sat 27 Dec 2025 07:48:45 +0000 Files and hashes: 1: AS214976.asa (hash: t2JcbLRiPmGZDPg8FNmObhmszmVDt+eApG1GUDGrAOE=) 2: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: 0H31cmAZX1F+wlIHC/EZ7ZnCqlgcSQyyWRdT1CAHx+g=) Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:da:04:73:96:56:4c:74:58:ed:38:55:6c:c3:bd:5c:c8:93:53:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Validity Not Before: Dec 26 07:05:45 2025 GMT Not After : Dec 27 07:48:45 2025 GMT Subject: CN=20EE42B19C9E26304A6F2CF4F9E15BBAB43AAA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b2:23:28:9a:a1:97:fe:0b:8b:8c:8e:0d:5b: f8:f2:c3:7c:6f:39:6a:00:1a:40:a6:f6:4e:49:59: 36:59:36:7f:b7:6b:7c:39:b7:d1:9c:6d:d8:b4:00: 41:73:7a:97:f0:c5:3a:0d:43:37:ea:30:4b:6b:c2: bf:de:71:26:21:fb:4d:67:be:18:c5:e8:72:08:09: bb:c2:c8:92:cd:c9:d4:d3:81:6f:4b:ad:90:2f:d5: 0e:4b:ea:f1:28:ee:15:7b:83:91:42:29:45:dc:6e: ae:ca:ad:d9:af:a4:7b:57:2a:4d:37:2e:36:f7:79: a3:19:a2:0b:3a:38:d7:e1:45:2f:57:c6:79:d0:7e: 38:63:9e:6a:a8:7a:3b:94:c1:75:04:bb:06:fc:59: 73:69:9e:87:a1:19:0a:42:a0:a7:9f:0a:46:b9:db: 7f:f1:d0:6c:3c:91:8a:0d:f9:79:a5:48:c0:ac:eb: e1:40:14:37:c9:42:a0:51:e9:eb:58:33:ad:bb:3f: d4:25:ff:cd:e9:81:cb:c4:95:f6:73:fc:c1:1f:9f: be:11:72:04:95:91:43:5b:33:c8:78:7d:cb:78:15: b4:f4:fe:39:78:d0:61:d1:f3:75:03:b7:e1:1b:db: 55:30:13:1f:8c:c6:78:c7:29:a1:71:7d:03:37:e4: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:42:B1:9C:9E:26:30:4A:6F:2C:F4:F9:E1:5B:BA:B4:3A:AA:2A X509v3 Authority Key Identifier: keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:94:b6:33:ee:ee:2a:ff:e9:d4:da:24:78:ba:74:7c:c3:dd: f7:27:c0:92:d6:da:d9:3b:c8:6f:35:4e:43:bf:7d:2e:ea:77: 0b:40:9d:1a:a9:7b:eb:18:1a:4c:6c:97:d1:05:79:71:fc:09: 66:72:ae:25:14:d1:d3:16:9f:07:4c:83:f9:64:8c:20:58:57: 14:e6:e0:e3:9f:49:8c:49:bb:d4:c3:7a:7c:cf:bf:af:e2:89: 74:74:b2:6d:6d:4d:1a:2f:56:1a:f4:c7:00:3f:d4:c9:eb:e8: fc:07:00:38:e1:c8:66:c8:cb:b8:85:03:0f:c1:7c:be:ac:a7: 95:67:09:69:c7:55:cb:09:ca:a4:b2:81:6d:d5:e2:74:f7:9d: 1b:8b:1c:00:cc:99:a4:f0:db:95:38:2e:41:3c:e4:5f:97:08: 0f:bd:79:e0:ce:91:bd:56:09:fa:32:ee:21:38:76:09:3d:0f: b6:21:d4:16:41:c9:35:9c:e4:5a:8d:a5:4b:0f:f9:6f:7d:19: 53:60:99:d3:2c:c9:6a:81:38:81:db:a1:e6:a8:33:19:fa:b0: 17:b8:fa:37:ad:86:42:f0:10:bc:b4:f0:c9:70:67:3d:bc:ac: 88:cf:66:8d:41:91:12:ae:65:eb:cb:2a:93:83:f6:91:1c:4b: bb:64:a4:d9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCdoEc5ZWTHRY7ThVbMO9XMiTUzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWEyOWYxOTFkYzZjZTc0N2RhNGEyYTJkOWYxM2U1NTdm NTBhZGY1NjAeFw0yNTEyMjYwNzA1NDVaFw0yNTEyMjcwNzQ4NDVaMDMxMTAvBgNV BAMTKDIwRUU0MkIxOUM5RTI2MzA0QTZGMkNGNEY5RTE1QkJBQjQzQUFBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3siMomqGX/guLjI4NW/jyw3xv OWoAGkCm9k5JWTZZNn+3a3w5t9Gcbdi0AEFzepfwxToNQzfqMEtrwr/ecSYh+01n vhjF6HIICbvCyJLNydTTgW9LrZAv1Q5L6vEo7hV7g5FCKUXcbq7KrdmvpHtXKk03 Ljb3eaMZogs6ONfhRS9XxnnQfjhjnmqoejuUwXUEuwb8WXNpnoehGQpCoKefCka5 23/x0Gw8kYoN+XmlSMCs6+FAFDfJQqBR6etYM627P9Ql/83pgcvElfZz/MEfn74R cgSVkUNbM8h4fct4FbT0/jl40GHR83UDt+Eb21UwEx+MxnjHKaFxfQM35AbfAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUIO5CsZyeJjBKbyz0+eFburQ6qiowHwYDVR0j BBgwFoAU6inxkdxs50faSiotnxPlV/UK31YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzEvRUEyOUYxOTFEQzZDRTc0N0RBNEEyQTJEOUYxM0U1NTdGNTBBREY1Ni5jcmww ZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZpbnhrZHhzNTBmYVNpb3RueFBsVl9VSzMx WS5jZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ku YXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8xL0VBMjlGMTkxREM2Q0U3NDdEQTRBMkEy RDlGMTNFNTU3RjUwQURGNTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjlLYz7u4q/+nU2iR4unR8w933 J8CS1trZO8hvNU5Dv30u6ncLQJ0aqXvrGBpMbJfRBXlx/Almcq4lFNHTFp8HTIP5 ZIwgWFcU5uDjn0mMSbvUw3p8z7+v4ol0dLJtbU0aL1Ya9McAP9TJ6+j8BwA44chm yMu4hQMPwXy+rKeVZwlpx1XLCcqksoFt1eJ0950bixwAzJmk8NuVOC5BPORflwgP vXngzpG9Vgn6Mu4hOHYJPQ+2IdQWQck1nORajaVLD/lvfRlTYJnTLMlqgTiB26Hm qDMZ+rAXuPo3rYZC8BC8tPDJcGc9vKyIz2aNQZESrmXryyqTg/aRHEu7ZKTZ -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:48 2025 by rpki-client