This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft File: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json) Hash identifier: 7ZzQ1ZaRvR7SYBXfnur/2eYxJx2uV8H7NW9jwkhySjY= Subject key identifier: 35:14:62:19:14:93:3D:80:5F:EC:D5:ED:6D:4D:21:26:CD:57:1B:27 Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 Certificate issuer: /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Certificate serial: 223AF29C4C04E9E533FC2ABB3BEC3522A8067B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft Manifest number: 52 Signing time: Fri 05 Dec 2025 19:17:32 +0000 Manifest this update: Fri 05 Dec 2025 19:12:32 +0000 Manifest next update: Sat 06 Dec 2025 19:30:32 +0000 Files and hashes: 1: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: 2OTmyUhbNoSaxAeoauD1/AfLjsb4hVhYtLKJ67Vwn04=) 2: AS214976.asa (hash: YHABTuzlbO4T82WDdGRIeo12XIwcp/xmEuN99D69NCg=) Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:f2:9c:4c:04:e9:e5:33:fc:2a:bb:3b:ec:35:22:a8:06:7b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56 Validity Not Before: Dec 5 19:12:32 2025 GMT Not After : Dec 6 19:30:32 2025 GMT Subject: CN=3514621914933D805FECD5ED6D4D2126CD571B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:bc:97:31:e8:e1:2e:70:c0:f9:f6:15:b6: 09:b0:ce:52:56:15:05:d6:08:cc:46:5d:ea:da:26: fc:50:88:45:67:bc:90:ac:cb:5e:bc:fb:c2:1c:df: 44:67:99:20:97:b7:de:68:a5:d6:ca:4a:a7:9f:f4: 87:e4:d8:98:03:0e:68:56:41:8c:d3:54:b7:ee:0a: df:79:48:73:80:2d:77:62:af:a4:06:68:b7:72:73: 88:39:51:59:42:c5:ed:f6:74:2b:ee:07:13:3a:33: 2f:9b:0a:de:5d:44:01:66:b9:0c:fa:3d:ed:16:b4: 76:97:10:3b:29:4a:9b:47:d0:62:2b:47:b4:7d:93: be:4d:55:83:e3:9e:4a:c2:59:fc:80:a0:55:e4:88: 96:7f:b4:78:6f:b9:5c:bf:8f:0e:1b:2c:1d:de:2d: 36:21:73:5e:89:7c:3d:63:46:8f:1b:88:86:61:8c: b1:09:f9:9b:34:f7:5e:ae:b0:48:bb:92:f2:bf:71: ae:1f:db:55:1d:de:ab:0b:6b:df:c9:0d:a8:3b:ba: 35:23:c1:a6:4a:4b:db:21:d5:f0:30:7b:e4:b7:f3: 05:8c:fe:c4:e8:4c:5f:d0:c8:db:10:08:d6:d6:20: 57:db:b0:df:dd:23:7f:45:a4:0c:7a:c5:9b:0d:fa: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:14:62:19:14:93:3D:80:5F:EC:D5:ED:6D:4D:21:26:CD:57:1B:27 X509v3 Authority Key Identifier: keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:fb:18:fb:48:11:e0:ed:7e:8a:2f:41:33:cc:2b:19:81: b8:a0:e1:2f:07:09:63:94:b5:23:85:51:3f:80:37:e2:ff:3f: 0a:f8:f8:63:37:d3:1f:94:d6:78:cb:77:77:af:d5:e9:27:5a: 07:c9:0c:f8:fb:06:4a:09:d0:ef:46:b1:15:29:d8:c7:61:5a: a3:92:68:be:d7:45:e0:51:89:b6:57:c8:c7:89:f2:ca:89:66: 2a:c8:4c:89:65:86:2a:76:17:8d:60:7c:eb:74:ac:f5:4e:2e: 87:7e:50:a0:f4:66:0d:59:28:95:27:6f:ab:d4:15:91:d7:9f: 87:5a:08:df:5c:b5:59:35:e5:b7:a9:7e:81:cc:df:20:f0:6e: 0c:25:ee:6f:51:27:0f:90:7b:27:c9:28:6d:8b:99:75:97:65: 09:4f:80:bf:a0:32:31:e4:4d:dc:cc:8c:51:b7:11:60:64:8f: d6:57:8d:e7:43:05:30:ac:54:d9:97:01:58:fc:fb:68:5f:03: c8:fc:34:8f:fb:bd:af:cf:de:23:fc:73:55:46:40:a6:ee:ec: 52:1c:47:7d:85:c5:b9:6c:87:e4:44:e8:9b:e9:f3:68:69:da: 97:54:b3:ec:bb:e8:4f:db:ae:9f:2a:9d:eb:0e:f6:41:9c:6a: 8a:88:7b:68 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIjrynEwE6eUz/Cq7O+w1IqgGezswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWEyOWYxOTFkYzZjZTc0N2RhNGEyYTJkOWYxM2U1NTdm NTBhZGY1NjAeFw0yNTEyMDUxOTEyMzJaFw0yNTEyMDYxOTMwMzJaMDMxMTAvBgNV BAMTKDM1MTQ2MjE5MTQ5MzNEODA1RkVDRDVFRDZENEQyMTI2Q0Q1NzFCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ7yXMejhLnDA+fYVtgmwzlJW FQXWCMxGXeraJvxQiEVnvJCsy168+8Ic30RnmSCXt95opdbKSqef9Ifk2JgDDmhW QYzTVLfuCt95SHOALXdir6QGaLdyc4g5UVlCxe32dCvuBxM6My+bCt5dRAFmuQz6 Pe0WtHaXEDspSptH0GIrR7R9k75NVYPjnkrCWfyAoFXkiJZ/tHhvuVy/jw4bLB3e LTYhc16JfD1jRo8biIZhjLEJ+Zs0916usEi7kvK/ca4f21Ud3qsLa9/JDag7ujUj waZKS9sh1fAwe+S38wWM/sToTF/QyNsQCNbWIFfbsN/dI39FpAx6xZsN+l8xAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUNRRiGRSTPYBf7NXtbU0hJs1XGycwHwYDVR0j BBgwFoAU6inxkdxs50faSiotnxPlV/UK31YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzEvRUEyOUYxOTFEQzZDRTc0N0RBNEEyQTJEOUYxM0U1NTdGNTBBREY1Ni5jcmww ZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZpbnhrZHhzNTBmYVNpb3RueFBsVl9VSzMx WS5jZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ku YXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8xL0VBMjlGMTkxREM2Q0U3NDdEQTRBMkEy RDlGMTNFNTU3RjUwQURGNTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmBPsY+0gR4O1+ii9BM8wrGYG4 oOEvBwljlLUjhVE/gDfi/z8K+PhjN9MflNZ4y3d3r9XpJ1oHyQz4+wZKCdDvRrEV KdjHYVqjkmi+10XgUYm2V8jHifLKiWYqyEyJZYYqdheNYHzrdKz1Ti6HflCg9GYN WSiVJ2+r1BWR15+HWgjfXLVZNeW3qX6BzN8g8G4MJe5vUScPkHsnyShti5l1l2UJ T4C/oDIx5E3czIxRtxFgZI/WV43nQwUwrFTZlwFY/PtoXwPI/DSP+72vz94j/HNV RkCm7uxSHEd9hcW5bIfkROib6fNoadqXVLPsu+hP266fKp3rDvZBnGqKiHto -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:42 2025 by rpki-client