This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
File:                     A609E97AC39E3F53678C0C9422F89947B6146002.mft (raw, json)
Hash identifier:          k5hUP2JQRxNMVzxuznH+wkeqUAB7HrWLO6EdPWgAC1E=
Subject key identifier:   20:21:0E:3F:54:9A:38:0D:9A:7B:6D:7F:66:87:A2:AA:00:77:52:5F
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       11BADF0D624D88F1531FB3882EDF989089230686
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
Manifest number:          BC
Signing time:             Sat 20 Dec 2025 06:00:17 +0000
Manifest this update:     Sat 20 Dec 2025 05:55:17 +0000
Manifest next update:     Sun 21 Dec 2025 07:37:17 +0000
Files and hashes:         1: 326131343a373538333a3a2f33392d3339203d3e20323130343634.roa (hash: MjDlqyLqXAPlx4G6jj/eAEcU/aLYqdD8Oi3UpDW5w0M=)
                          2: A609E97AC39E3F53678C0C9422F89947B6146002.crl (hash: D88gDX6Xt1fJHc3aW0kDbTStpl+Pm7TN5wBfqS2qfZw=)
                          3: 326131343a373538333a3a2f33362d3336203d3e203233353037.roa (hash: glgfdV+PhGCRRHNDDvcfZnj+YSVY9ZJ2VPzzf2KV134=)
                          4: 326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa (hash: qQlstETzls89/hXo5myM2bkOC7VSlCrPNYMmfyxC3IU=)
                          5: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: cfocL5JGmKaDFV3DBEIXnvYU7oYVEnpzTpl+50F0FU0=)
                          6: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: ghgUC1FkuuCEpl7atds36b5VAhGeigyHvpmuAij4NF8=)
                          7: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: VFiJ4W9ZLKdE30mlgggk+678HfUJtZiMs/6T/WIzp3Y=)
                          8: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: BdqCuY29pkjqPpQnJRfVuCBZhAWV8h5UK3xwa1RL5Gc=)
                          9: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: K0Co1onM5BbkXQH/tFwckZOljCdXDgCDtKHluZWcCxU=)
                          10: 326131343a373538333a3a2f34302d3430203d3e20323134373537.roa (hash: hcCpHwIQLDuq622pIwKuAMoJYid6gLvp4xFqggJmodo=)
                          11: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: h/faRutmshXccwksfhnp0IW/q8FgXwcvdBIuyRruBio=)
                          12: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: +wJjjEed1Hiq+IO3zR9/ZUn4Yc6NLql02f1VUhQS1AI=)
                          13: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: +QJa85lXutaYGD3OTb0UoXLTx903qaGvpSr+nLgJI4g=)
                          14: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: ce8Nm82ycPW3eHRXTUdgrZjIqlZVJYRklHxCULXihlk=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ba:df:0d:62:4d:88:f1:53:1f:b3:88:2e:df:98:90:89:23:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Dec 20 05:55:17 2025 GMT
            Not After : Dec 21 07:37:17 2025 GMT
        Subject: CN=20210E3F549A380D9A7B6D7F6687A2AA0077525F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:9a:b5:96:68:d3:47:ac:b7:56:9a:5e:cd:
                    47:be:2e:e9:6d:0c:db:30:c6:3d:80:14:ea:9d:29:
                    91:29:96:95:a8:5d:a8:26:67:33:1f:df:e9:00:12:
                    a2:d2:27:2e:44:c9:50:52:e7:5f:cf:4e:10:76:21:
                    95:13:c2:ce:a3:fe:6d:50:77:6e:ee:f4:11:9f:97:
                    85:a2:55:13:24:24:91:74:51:84:65:15:13:81:b7:
                    93:1c:10:74:f7:2b:14:53:6e:a0:78:b4:26:bf:4d:
                    b0:69:36:7b:c8:4b:bb:b0:b0:b7:bc:bc:0b:ca:08:
                    6c:8b:7e:7a:53:56:a3:b2:bc:ba:61:03:53:6c:af:
                    18:a3:b1:bd:f4:5b:e9:3c:bd:db:8e:8e:76:bb:0f:
                    dc:e3:48:7d:3d:fd:b4:fd:d8:66:e1:af:ab:1d:02:
                    42:f7:83:71:8a:00:4e:f7:e8:5c:52:45:6b:a3:59:
                    9e:f6:3c:3d:ff:28:a3:93:62:13:fb:6b:74:35:fb:
                    3d:2a:e9:27:7d:d0:b6:ca:cc:3f:5f:aa:7b:31:44:
                    23:fe:24:cf:0f:93:81:12:fc:44:4c:09:aa:e5:82:
                    49:fa:d9:18:2e:d7:92:58:fd:7a:b1:b6:cd:f3:ab:
                    de:c4:cb:12:9e:8f:28:01:f5:78:86:87:37:12:c1:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:0E:3F:54:9A:38:0D:9A:7B:6D:7F:66:87:A2:AA:00:77:52:5F
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:0e:10:4a:01:65:9f:ce:20:7f:8d:68:d5:5f:41:68:9b:
         02:09:6e:8c:a6:26:63:40:51:5a:e0:5d:d3:5b:2a:a8:44:43:
         cd:2b:31:ed:41:02:03:c2:d8:bb:9a:d3:29:63:39:e7:bc:1e:
         65:cc:75:a8:7e:4a:02:2e:77:6d:04:fd:40:6c:16:37:a0:e7:
         4c:82:8d:76:be:66:cd:81:8e:1c:c6:e3:d1:24:50:5b:0c:b0:
         cc:15:48:8b:69:d5:fa:89:b1:2a:bb:9f:ff:8a:2a:cb:d9:9f:
         94:f9:59:9e:56:6b:b6:3d:bb:bf:8d:35:60:47:5d:c3:08:bb:
         92:d7:db:f2:ea:7a:b3:96:4a:f0:1d:47:f8:cc:5c:f3:79:02:
         ef:e7:9f:07:a9:fe:e9:e2:7f:8d:db:c9:56:2f:5f:7e:08:6c:
         63:a7:74:eb:ef:6d:46:9b:b9:c9:f8:9b:c4:83:7a:dc:bc:f1:
         e2:0c:91:03:15:f2:84:62:13:e9:64:a1:90:44:e5:b1:75:ef:
         1b:5a:a1:f5:f0:ec:ff:2e:d1:43:c2:29:66:95:1f:d9:7f:d9:
         1b:ae:6a:d1:e9:14:8d:a9:ad:78:d5:84:71:9f:f8:89:d3:a5:
         d2:aa:92:42:51:cf:be:6a:e1:42:68:c8:42:0e:2f:3d:d8:a7:
         56:08:ce:8f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUEbrfDWJNiPFTH7OILt+YkIkjBoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC
NjE0NjAwMjAeFw0yNTEyMjAwNTU1MTdaFw0yNTEyMjEwNzM3MTdaMDMxMTAvBgNV
BAMTKDIwMjEwRTNGNTQ5QTM4MEQ5QTdCNkQ3RjY2ODdBMkFBMDA3NzUyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX15q1lmjTR6y3VppezUe+Lult
DNswxj2AFOqdKZEplpWoXagmZzMf3+kAEqLSJy5EyVBS51/PThB2IZUTws6j/m1Q
d27u9BGfl4WiVRMkJJF0UYRlFROBt5McEHT3KxRTbqB4tCa/TbBpNnvIS7uwsLe8
vAvKCGyLfnpTVqOyvLphA1Nsrxijsb30W+k8vduOjna7D9zjSH09/bT92Gbhr6sd
AkL3g3GKAE736FxSRWujWZ72PD3/KKOTYhP7a3Q1+z0q6Sd90LbKzD9fqnsxRCP+
JM8Pk4ES/ERMCarlgkn62Rgu15JY/Xqxts3zq97EyxKejygB9XiGhzcSwel/AgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUICEOP1SaOA2ae21/ZoeiqgB3Ul8wHwYDVR0j
BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww
gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt
YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4
OTk0N0I2MTQ2MDAyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQLzAvQTYwOUU5N0FDMzlF
M0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE1PDhBKAWWf
ziB/jWjVX0FomwIJboymJmNAUVrgXdNbKqhEQ80rMe1BAgPC2Lua0yljOee8HmXM
dah+SgIud20E/UBsFjeg50yCjXa+Zs2BjhzG49EkUFsMsMwVSItp1fqJsSq7n/+K
KsvZn5T5WZ5Wa7Y9u7+NNWBHXcMIu5LX2/LqerOWSvAdR/jMXPN5Au/nnwep/uni
f43byVYvX34IbGOndOvvbUabucn4m8SDety88eIMkQMV8oRiE+lkoZBE5bF17xta
ofXw7P8u0UPCKWaVH9l/2RuuatHpFI2prXjVhHGf+InTpdKqkkJRz75q4UJoyEIO
Lz3Yp1YIzo8=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:11 2025 by rpki-client