This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft File: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json) Hash identifier: KCPvaa6zszRld0XyPgrNHrfWtGjJfX/PsZ+bysjnq7c= Subject key identifier: EC:40:DB:42:2B:39:8A:EB:0F:D2:67:78:2F:22:E0:CD:CB:E8:0C:8B Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 Certificate issuer: /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Certificate serial: 206754B48ED99BA2267B5B42EEC74E23B6BF7476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft Manifest number: 7B Signing time: Tue 23 Dec 2025 11:42:54 +0000 Manifest this update: Tue 23 Dec 2025 11:37:54 +0000 Manifest next update: Wed 24 Dec 2025 15:05:54 +0000 Files and hashes: 1: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: PRC1p8jWAU7eFz0ZkyZ95b1UgX9IzPC+GT6KM7OY0rk=) 2: AS214976.asa (hash: t2JcbLRiPmGZDPg8FNmObhmszmVDt+eApG1GUDGrAOE=) Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:54:b4:8e:d9:9b:a2:26:7b:5b:42:ee:c7:4e:23:b6:bf:74:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Validity Not Before: Dec 23 11:37:54 2025 GMT Not After : Dec 24 15:05:54 2025 GMT Subject: CN=EC40DB422B398AEB0FD267782F22E0CDCBE80C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:8f:24:14:f5:ca:8e:24:90:58:bc:47:72: 03:ea:52:96:3f:82:4b:86:8c:9a:d3:b6:19:59:12: 51:de:aa:83:45:0b:28:35:80:fc:3a:39:f2:82:25: 29:f8:b5:f6:7f:ae:7a:c5:19:48:c5:49:b9:d1:44: 26:bb:94:6a:f8:8f:71:e0:fb:18:08:01:42:46:a5: 88:a1:9f:19:54:b1:ae:b2:32:d5:a1:40:80:b7:0c: 0d:45:70:25:fa:ff:a4:9c:1d:9e:a9:58:9e:65:7e: 2e:07:37:b1:3d:bb:15:4e:8c:fe:d4:1c:78:73:c0: eb:b4:d2:56:cd:b0:d6:de:e0:9b:8d:54:8c:a7:67: 8e:23:0c:0c:06:de:0a:77:b6:8d:0c:ed:43:84:35: af:40:5f:f4:ca:b6:5a:5b:dd:e7:f9:8a:51:1c:83: 1a:97:b7:cf:54:6d:b2:59:fa:84:f7:c7:22:4d:6c: 2e:f6:ae:f4:c6:0e:90:29:39:7b:50:f8:78:de:df: 03:b6:9b:fb:8e:42:73:3e:54:9a:40:a6:30:01:7a: 2d:d3:3e:0a:4d:d1:99:ca:61:52:fd:79:68:35:0e: dd:32:92:d8:b9:af:86:7d:47:07:5d:22:42:9d:53: 12:73:a5:f5:a8:db:2f:c2:0f:a8:36:15:ec:d7:82: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:40:DB:42:2B:39:8A:EB:0F:D2:67:78:2F:22:E0:CD:CB:E8:0C:8B X509v3 Authority Key Identifier: keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:01:56:99:8f:7d:ca:3c:5c:69:12:11:fc:14:33:97:50:4e: 1a:32:9f:b6:43:5d:e9:85:eb:55:e5:3d:b2:ad:94:ad:72:8e: 41:1b:56:b9:b2:a2:c2:e5:4e:bd:72:9f:d5:7b:2b:54:09:25: 91:21:9e:93:17:32:7d:86:b9:2e:3a:33:aa:c6:36:ab:3b:d9: 09:85:bd:22:ea:4a:34:2a:47:84:8c:2a:7a:2f:8b:16:aa:b6: 49:28:89:91:cf:6f:21:74:cc:0b:2e:b1:a0:e6:e5:22:59:fa: 79:87:14:1c:3d:0e:b9:84:7a:dc:f8:25:dd:ef:4e:52:47:2f: e3:7c:80:d5:f3:20:b1:c9:bc:ce:f1:f2:ec:3b:4a:59:e3:49: 8c:22:81:22:a2:b0:7d:0c:0a:68:74:0d:ff:fd:5d:12:07:63: ec:22:10:dd:ee:7e:8b:8f:cd:f0:bf:ce:e9:54:45:4a:39:c3: d0:c7:d4:b1:a3:f2:6d:2d:5f:0c:98:14:9f:f4:1e:29:cc:c0: ca:cb:e3:32:68:f8:ec:c5:42:25:72:51:9b:d8:84:ee:5d:cd: 60:28:ce:f1:d8:89:53:46:59:3e:f8:4b:b2:ec:84:3b:54:a2: 11:71:4e:45:8e:e9:9a:be:91:af:93:f4:f9:17:c5:63:e1:49: 23:17:d3:d2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIGdUtI7Zm6Ime1tC7sdOI7a/dHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWEyOWYxOTFkYzZjZTc0N2RhNGEyYTJkOWYxM2U1NTdm NTBhZGY1NjAeFw0yNTEyMjMxMTM3NTRaFw0yNTEyMjQxNTA1NTRaMDMxMTAvBgNV BAMTKEVDNDBEQjQyMkIzOThBRUIwRkQyNjc3ODJGMjJFMENEQ0JFODBDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4I8kFPXKjiSQWLxHcgPqUpY/ gkuGjJrTthlZElHeqoNFCyg1gPw6OfKCJSn4tfZ/rnrFGUjFSbnRRCa7lGr4j3Hg +xgIAUJGpYihnxlUsa6yMtWhQIC3DA1FcCX6/6ScHZ6pWJ5lfi4HN7E9uxVOjP7U HHhzwOu00lbNsNbe4JuNVIynZ44jDAwG3gp3to0M7UOENa9AX/TKtlpb3ef5ilEc gxqXt89UbbJZ+oT3xyJNbC72rvTGDpApOXtQ+Hje3wO2m/uOQnM+VJpApjABei3T PgpN0ZnKYVL9eWg1Dt0ykti5r4Z9RwddIkKdUxJzpfWo2y/CD6g2FezXguc1AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU7EDbQis5iusP0md4LyLgzcvoDIswHwYDVR0j BBgwFoAU6inxkdxs50faSiotnxPlV/UK31YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzEvRUEyOUYxOTFEQzZDRTc0N0RBNEEyQTJEOUYxM0U1NTdGNTBBREY1Ni5jcmww ZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZpbnhrZHhzNTBmYVNpb3RueFBsVl9VSzMx WS5jZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ku YXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8xL0VBMjlGMTkxREM2Q0U3NDdEQTRBMkEy RDlGMTNFNTU3RjUwQURGNTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFAVaZj33KPFxpEhH8FDOXUE4a Mp+2Q13phetV5T2yrZStco5BG1a5sqLC5U69cp/VeytUCSWRIZ6TFzJ9hrkuOjOq xjarO9kJhb0i6ko0KkeEjCp6L4sWqrZJKImRz28hdMwLLrGg5uUiWfp5hxQcPQ65 hHrc+CXd705SRy/jfIDV8yCxybzO8fLsO0pZ40mMIoEiorB9DApodA3//V0SB2Ps IhDd7n6Lj83wv87pVEVKOcPQx9Sxo/JtLV8MmBSf9B4pzMDKy+MyaPjsxUIlclGb 2ITuXc1gKM7x2IlTRlk++Euy7IQ7VKIRcU5FjumavpGvk/T5F8Vj4UkjF9PS -----END CERTIFICATE-----Generated at Tue Dec 23 20:28:43 2025 by rpki-client