This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
File:                     64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft (raw, json)
Hash identifier:          G16QqmVKWj8AWmtJECfFGgJURH/CGKSWeHvlU3y+h4c=
Subject key identifier:   6E:72:D7:9E:A0:B3:8D:5D:A5:59:D8:62:3A:89:76:71:22:86:FD:76
Authority key identifier: 64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43
Certificate issuer:       /CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
Certificate serial:       61B73991A9637F53A97A377E96AF1043524F60AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
Manifest number:          67
Signing time:             Fri 26 Dec 2025 08:05:47 +0000
Manifest this update:     Fri 26 Dec 2025 08:00:47 +0000
Manifest next update:     Sat 27 Dec 2025 10:12:47 +0000
Files and hashes:         1: AS210464.asa (hash: wbbNcFL0vMtt7wAYM8Z6pNnLYXF35/Z0tdI8Wg6llJo=)
                          2: 64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl (hash: PYUi8BmLhQVTyOoATTu2miVSUB1niTbWvqsoNitDO5A=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:39:91:a9:63:7f:53:a9:7a:37:7e:96:af:10:43:52:4f:60:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
        Validity
            Not Before: Dec 26 08:00:47 2025 GMT
            Not After : Dec 27 10:12:47 2025 GMT
        Subject: CN=6E72D79EA0B38D5DA559D8623A8976712286FD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:72:f1:ae:a2:f9:b5:71:c4:6d:6b:15:4e:
                    88:ad:74:a6:ac:30:10:6f:c2:08:f9:b5:96:06:03:
                    19:87:80:0a:02:d0:cb:50:5e:03:1d:78:63:60:c0:
                    8f:cb:61:c2:2a:51:a3:3e:81:00:1e:0e:cc:23:d6:
                    34:f7:58:19:c7:c0:22:35:2b:63:70:e8:c4:bf:0f:
                    84:c2:40:e9:eb:a8:68:7a:2f:28:eb:59:00:ca:23:
                    7a:44:d2:75:a3:51:2c:b7:2d:88:a9:8d:6d:13:3b:
                    c9:7e:1d:80:b6:e4:46:01:22:f5:fa:10:e6:11:66:
                    aa:9d:b5:98:68:e5:73:39:77:88:8c:48:03:db:e1:
                    31:20:2c:f7:41:0d:47:78:ac:e9:3a:44:c0:d2:cf:
                    06:dd:e5:2e:4d:31:5d:19:bd:e5:1b:b6:0b:b7:d4:
                    26:2e:64:e2:8f:6d:c1:30:84:a4:0f:fe:b4:ca:bf:
                    3d:93:02:11:44:8f:a8:df:08:25:9d:2f:2b:82:19:
                    21:ef:39:ee:50:2d:14:f4:09:78:b5:a8:e8:d5:68:
                    88:48:22:5a:96:e3:61:fc:5d:e4:14:cf:fc:cb:0f:
                    99:bd:4d:49:6c:2e:32:18:8e:d5:0d:6f:28:0b:68:
                    25:e3:d9:78:07:fb:42:ea:05:bd:88:88:29:7f:2f:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:D7:9E:A0:B3:8D:5D:A5:59:D8:62:3A:89:76:71:22:86:FD:76
            X509v3 Authority Key Identifier:
                keyid:64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:aa:75:a4:cd:4d:e1:5c:21:2e:5f:43:35:e9:66:e8:8d:
         60:6b:77:0a:1a:16:bc:10:16:6b:23:00:03:ba:56:bb:45:f1:
         9f:7b:6e:58:8a:e4:be:a0:68:05:9a:b6:c6:e3:ba:57:9e:42:
         3a:b8:05:2b:93:a7:9f:43:76:e1:86:b3:c8:c8:20:b7:fe:8a:
         d0:89:bd:5f:e4:13:a7:02:18:17:09:88:5a:0f:f3:93:85:0f:
         c7:c4:36:12:96:4b:1e:d0:e4:a2:f0:61:32:4e:2e:5f:01:cf:
         1d:91:fe:1b:32:53:ea:6d:4b:01:98:e3:d5:df:40:8a:0e:61:
         2e:11:d8:1f:0d:59:d2:57:0f:43:ec:c7:6c:ef:ed:db:c0:fa:
         da:bc:7b:57:bc:c5:b2:71:64:de:45:e9:59:d0:63:ce:4c:13:
         ca:f5:c1:5f:78:db:7b:b5:4d:1f:15:0e:95:de:7d:81:e8:bd:
         79:06:78:08:b2:5c:b8:cd:02:b8:ad:d0:ed:b3:57:7f:25:2d:
         e7:13:f6:eb:ef:a3:b7:6d:14:c9:5c:15:13:75:51:c1:c0:74:
         a8:d3:51:75:04:a5:a8:34:25:d0:48:3e:6f:b9:54:af:fc:e2:
         3f:19:e0:44:ee:ee:36:af:94:ef:bb:e5:37:d7:68:23:78:49:
         d1:4c:2d:94
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUYbc5kaljf1Opejd+lq8QQ1JPYK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRhYmRiNDExMzJmYmNiZTViMmMxYzMwMjhjNTY0N2Rk
YmNiZDA0MzAeFw0yNTEyMjYwODAwNDdaFw0yNTEyMjcxMDEyNDdaMDMxMTAvBgNV
BAMTKDZFNzJENzlFQTBCMzhENURBNTU5RDg2MjNBODk3NjcxMjI4NkZENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCXLxrqL5tXHEbWsVToitdKas
MBBvwgj5tZYGAxmHgAoC0MtQXgMdeGNgwI/LYcIqUaM+gQAeDswj1jT3WBnHwCI1
K2Nw6MS/D4TCQOnrqGh6LyjrWQDKI3pE0nWjUSy3LYipjW0TO8l+HYC25EYBIvX6
EOYRZqqdtZho5XM5d4iMSAPb4TEgLPdBDUd4rOk6RMDSzwbd5S5NMV0ZveUbtgu3
1CYuZOKPbcEwhKQP/rTKvz2TAhFEj6jfCCWdLyuCGSHvOe5QLRT0CXi1qOjVaIhI
IlqW42H8XeQUz/zLD5m9TUlsLjIYjtUNbygLaCXj2XgH+0LqBb2IiCl/L5RjAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUbnLXnqCzjV2lWdhiOol2cSKG/XYwHwYDVR0j
BBgwFoAUZKvbQRMvvL5bLBwwKMVkfdvL0EMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzMvNjRBQkRCNDExMzJGQkNCRTVCMkMxQzMwMjhDNTY0N0REQkNCRDA0My5jcmww
ZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLdmJRUk12dkw1YkxCd3dLTVZrZmR2TDBF
TS5jZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ku
YXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8zLzY0QUJEQjQxMTMyRkJDQkU1QjJDMUMz
MDI4QzU2NDdEREJDQkQwNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHDqp1pM1N4VwhLl9DNelm6I1g
a3cKGha8EBZrIwADula7RfGfe25YiuS+oGgFmrbG47pXnkI6uAUrk6efQ3bhhrPI
yCC3/orQib1f5BOnAhgXCYhaD/OThQ/HxDYSlkse0OSi8GEyTi5fAc8dkf4bMlPq
bUsBmOPV30CKDmEuEdgfDVnSVw9D7Mds7+3bwPravHtXvMWycWTeRelZ0GPOTBPK
9cFfeNt7tU0fFQ6V3n2B6L15BngIsly4zQK4rdDts1d/JS3nE/br76O3bRTJXBUT
dVHBwHSo01F1BKWoNCXQSD5vuVSv/OI/GeBE7u42r5Tvu+U312gjeEnRTC2U
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:40 2025 by rpki-client