This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
File: 64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft (raw, json)
Hash identifier: 8B0CsGhhVGptkQmZVKhS6CD+BQTeRwQi0xn00Xa+YhM=
Subject key identifier: 7B:C7:9D:F7:3A:48:9B:5B:10:F3:8F:0B:EE:0F:65:7A:2C:18:D5:86
Authority key identifier: 64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43
Certificate issuer: /CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
Certificate serial: 135C23E04A5299E5CA8A1B78B3FBD41F342E25A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
Manifest number: 5E
Signing time: Sat 20 Dec 2025 06:55:18 +0000
Manifest this update: Sat 20 Dec 2025 06:50:18 +0000
Manifest next update: Sun 21 Dec 2025 08:32:18 +0000
Files and hashes: 1: 64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl (hash: H2lPL1PgDQc1dL3tNMNmWKGuTQjq71/7OohKD+Psi48=)
2: AS210464.asa (hash: wbbNcFL0vMtt7wAYM8Z6pNnLYXF35/Z0tdI8Wg6llJo=)
Validation: OK
Signature path: rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl
rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5c:23:e0:4a:52:99:e5:ca:8a:1b:78:b3:fb:d4:1f:34:2e:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
Validity
Not Before: Dec 20 06:50:18 2025 GMT
Not After : Dec 21 08:32:18 2025 GMT
Subject: CN=7BC79DF73A489B5B10F38F0BEE0F657A2C18D586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:79:5b:d9:12:3d:13:d5:92:cd:83:e8:04:
52:e0:1a:fd:05:a9:1a:37:9e:36:2c:a0:dd:5c:54:
c2:05:aa:ee:a4:cc:1b:81:f1:2b:f6:ae:a6:a4:7c:
6f:b8:c6:94:0b:ba:9f:ac:62:e9:9e:df:42:de:92:
90:01:6a:74:91:09:6b:52:b9:ab:81:cc:b2:ba:c9:
79:e0:57:61:74:34:31:62:eb:53:f1:ff:b7:60:84:
6f:12:9a:d7:93:59:e5:db:ca:41:b0:8b:97:07:35:
b0:de:4a:2a:f2:55:6d:f1:ce:80:3b:bf:9d:fe:a4:
73:1c:0e:09:34:d5:05:e2:19:f2:e6:7b:6a:e7:fc:
63:37:de:cf:27:23:7e:5f:33:fb:4e:c8:98:97:fa:
55:68:fa:cf:91:cd:b5:f1:7b:1e:0f:83:68:5c:e9:
80:82:f0:dc:88:03:34:27:85:d6:a2:5a:52:23:2e:
98:f4:58:39:a4:aa:7a:78:2a:12:e5:9f:3c:99:0a:
b0:ca:c9:33:98:61:fa:4a:1b:d7:19:4f:6c:fe:55:
8a:56:76:e8:ae:f1:0f:31:cc:2b:9f:67:26:a8:1e:
5c:2d:57:f1:80:6f:de:48:31:ff:2d:22:79:d3:79:
c7:ab:8d:a8:2e:f2:1d:5c:96:30:fe:ac:04:92:b8:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:9D:F7:3A:48:9B:5B:10:F3:8F:0B:EE:0F:65:7A:2C:18:D5:86
X509v3 Authority Key Identifier:
keyid:64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:c8:fd:c9:64:2b:f7:62:22:a4:4d:24:77:f3:8c:f9:00:
12:ec:58:2b:d3:33:ad:9c:be:6a:bb:25:67:00:df:da:43:4d:
28:bd:1f:b8:1d:44:2c:0d:83:df:aa:18:56:20:b3:55:e0:53:
fa:10:6d:e2:ef:60:a7:96:dc:fb:f3:12:e6:39:d3:b6:a1:70:
e2:5f:9e:99:51:9a:48:82:c0:22:94:44:c5:a0:4e:c2:83:15:
61:a4:ec:ce:f3:70:ea:d8:27:1e:70:4f:d8:2a:46:c6:0e:a5:
5f:c1:f3:6e:25:02:e6:8d:81:77:7a:9a:bd:71:0f:12:22:ff:
f9:30:ec:29:90:3c:dd:7a:0c:51:b0:a1:65:2e:39:25:d6:75:
e1:ec:1a:a6:a5:d9:94:7e:c8:de:f3:bd:40:69:ff:7a:1d:02:
5a:b3:f2:47:b3:b6:db:bb:57:ff:09:85:ce:31:2d:0e:f0:80:
cb:d5:ba:c6:6f:4c:84:d9:51:9b:a2:61:4f:11:5f:91:c6:b5:
0c:44:f3:4e:41:62:28:b6:bf:65:40:30:ff:b9:6d:de:bb:f4:
2b:42:09:d7:d0:45:f7:71:af:2f:2f:0f:ab:fa:5a:4a:4e:e8:
5c:19:33:e8:3b:7e:ab:30:dd:37:e7:be:8d:04:90:cc:d1:62:
fa:7b:17:75
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUE1wj4EpSmeXKiht4s/vUHzQuJacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRhYmRiNDExMzJmYmNiZTViMmMxYzMwMjhjNTY0N2Rk
YmNiZDA0MzAeFw0yNTEyMjAwNjUwMThaFw0yNTEyMjEwODMyMThaMDMxMTAvBgNV
BAMTKDdCQzc5REY3M0E0ODlCNUIxMEYzOEYwQkVFMEY2NTdBMkMxOEQ1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRHlb2RI9E9WSzYPoBFLgGv0F
qRo3njYsoN1cVMIFqu6kzBuB8Sv2rqakfG+4xpQLup+sYume30LekpABanSRCWtS
uauBzLK6yXngV2F0NDFi61Px/7dghG8SmteTWeXbykGwi5cHNbDeSiryVW3xzoA7
v53+pHMcDgk01QXiGfLme2rn/GM33s8nI35fM/tOyJiX+lVo+s+RzbXxex4Pg2hc
6YCC8NyIAzQnhdaiWlIjLpj0WDmkqnp4KhLlnzyZCrDKyTOYYfpKG9cZT2z+VYpW
duiu8Q8xzCufZyaoHlwtV/GAb95IMf8tInnTecerjagu8h1cljD+rASSuHbhAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUe8ed9zpIm1sQ848L7g9leiwY1YYwHwYDVR0j
BBgwFoAUZKvbQRMvvL5bLBwwKMVkfdvL0EMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzMvNjRBQkRCNDExMzJGQkNCRTVCMkMxQzMwMjhDNTY0N0REQkNCRDA0My5jcmww
ZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLdmJRUk12dkw1YkxCd3dLTVZrZmR2TDBF
TS5jZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ku
YXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8zLzY0QUJEQjQxMTMyRkJDQkU1QjJDMUMz
MDI4QzU2NDdEREJDQkQwNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYiMj9yWQr92IipE0kd/OM+QAS
7Fgr0zOtnL5quyVnAN/aQ00ovR+4HUQsDYPfqhhWILNV4FP6EG3i72Cnltz78xLm
OdO2oXDiX56ZUZpIgsAilETFoE7CgxVhpOzO83Dq2CcecE/YKkbGDqVfwfNuJQLm
jYF3epq9cQ8SIv/5MOwpkDzdegxRsKFlLjkl1nXh7BqmpdmUfsje871Aaf96HQJa
s/JHs7bbu1f/CYXOMS0O8IDL1brGb0yE2VGbomFPEV+RxrUMRPNOQWIotr9lQDD/
uW3eu/QrQgnX0EX3ca8vLw+r+lpKTuhcGTPoO36rMN03576NBJDM0WL6exd1
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:20:48 2025 by rpki-client