This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
File:                     7D425251D51803E61C820ADEF2945E50184448D0.mft (raw, json)
Hash identifier:          LQ9gyMqFuzM5Xt5Gh1GkNeM5MctduEal7fZzr4aSy68=
Subject key identifier:   20:E0:B3:A8:74:53:1E:30:06:B4:DC:89:DC:08:5A:18:F0:97:14:0B
Authority key identifier: 7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
Certificate issuer:       /CN=7D425251D51803E61C820ADEF2945E50184448D0
Certificate serial:       05318A98161CA55F7F31CE5D02775AD687B7D215
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
Manifest number:          56
Signing time:             Sat 20 Dec 2025 08:35:19 +0000
Manifest this update:     Sat 20 Dec 2025 08:30:19 +0000
Manifest next update:     Sun 21 Dec 2025 11:23:19 +0000
Files and hashes:         1: 7D425251D51803E61C820ADEF2945E50184448D0.crl (hash: VWe7Tmfg2ibL0Vzl87GErZWQgfNl4Z7Z8nXgzcpWTKY=)
                          2: 38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa (hash: 0aZfjrvYrPLnv3SP6/H4nxpB3qjjpVdF0uWmjdcoqOQ=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:31:8a:98:16:1c:a5:5f:7f:31:ce:5d:02:77:5a:d6:87:b7:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D425251D51803E61C820ADEF2945E50184448D0
        Validity
            Not Before: Dec 20 08:30:19 2025 GMT
            Not After : Dec 21 11:23:19 2025 GMT
        Subject: CN=20E0B3A874531E3006B4DC89DC085A18F097140B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:97:71:2f:b7:c4:d4:f5:1f:cd:f5:9c:09:
                    ce:3e:00:fe:dc:11:83:50:0a:0a:78:67:9c:af:69:
                    ae:ed:17:4e:ed:75:1b:aa:21:49:ee:3c:cb:6c:f8:
                    75:72:ef:98:b8:45:a7:1d:98:c8:07:86:04:29:c4:
                    f1:de:75:5e:47:d1:57:2c:8f:a4:3a:d3:c4:d4:2e:
                    82:d7:c1:61:46:c3:c0:40:13:46:01:ac:af:bc:6b:
                    0f:c3:4b:06:2b:d4:0a:6c:fd:a6:e2:41:54:de:d2:
                    6c:06:a5:7d:d4:04:bd:95:a0:a1:2d:0a:f5:8f:80:
                    95:40:d1:fe:6a:f0:e4:6d:c8:b9:f1:8c:48:c1:c3:
                    2b:24:af:80:b4:e6:c6:f0:66:03:bb:28:e9:fe:63:
                    2d:8b:0d:a3:9d:03:af:0f:d4:94:aa:c1:16:d7:f6:
                    ab:20:74:ad:63:db:06:a7:8a:4f:2c:5d:3a:77:2c:
                    93:81:cf:0d:a2:f3:1d:d2:c1:e3:55:b6:c1:0f:59:
                    36:bc:9d:1e:a7:71:58:6c:54:0c:e3:44:fd:cb:36:
                    54:a9:d3:a1:f2:32:b4:9b:54:a6:9e:c1:a4:28:42:
                    01:56:c7:5c:f3:42:0a:77:f0:c7:c5:0f:40:b5:cc:
                    18:a7:d1:0c:38:64:10:e7:a6:c6:52:b7:93:b2:25:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:B3:A8:74:53:1E:30:06:B4:DC:89:DC:08:5A:18:F0:97:14:0B
            X509v3 Authority Key Identifier:
                keyid:7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:54:de:29:d3:2c:a2:5a:1c:a2:99:5e:64:1c:c0:0c:3e:
         ba:4b:94:5b:d3:5c:1a:ce:4b:f4:66:93:8a:2f:54:a2:f6:cd:
         3b:35:14:02:93:b0:d5:c0:ad:4f:58:69:e2:19:1e:27:b7:45:
         79:6e:d7:e6:55:c5:e9:d0:0d:bc:b2:ae:25:14:20:e0:96:28:
         60:7b:81:5f:51:20:5f:cc:28:16:4e:91:8a:53:67:98:36:bc:
         ac:29:83:24:53:4d:fc:66:bd:df:9f:dc:a7:12:4d:8a:2d:0c:
         4b:9f:56:ec:e2:2e:49:9f:04:25:02:81:48:3b:bc:dd:fe:f9:
         28:8a:90:e8:4a:e5:7f:f4:f7:19:a0:70:de:65:b4:87:bf:dc:
         2f:b0:d9:9d:49:ec:11:63:0f:22:89:5a:2b:64:76:bb:32:e1:
         37:5d:88:20:50:32:0c:ba:b2:7c:58:bf:05:36:2f:d9:f8:96:
         b2:69:0d:4f:67:ef:82:f9:a7:32:9d:a2:8b:a6:ff:65:20:1f:
         c2:41:97:f2:74:d7:fa:66:9f:a5:07:c0:f4:55:64:32:e7:0c:
         10:db:a6:b2:c1:eb:c8:df:79:dd:68:b3:1d:f6:cd:f1:0a:d2:
         85:0b:25:b1:6c:91:5b:1d:f0:88:e3:ae:f6:33:88:63:f5:d6:
         df:cd:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:15:47 2025 by rpki-client