This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
File:                     64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft (raw, json)
Hash identifier:          qP6KuzwfZX61HgIh5Xm2w7+A5pW24vLoUUrdc+vSVpA=
Subject key identifier:   1D:02:67:C3:E9:DD:47:E4:31:BE:7F:48:3C:06:41:85:76:95:B3:99
Authority key identifier: 64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43
Certificate issuer:       /CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
Certificate serial:       2C736E0DD7E1F61B598682CD3ACE9DFCF159E463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
Manifest number:          3B
Signing time:             Fri 05 Dec 2025 20:47:32 +0000
Manifest this update:     Fri 05 Dec 2025 20:42:32 +0000
Manifest next update:     Sat 06 Dec 2025 21:47:32 +0000
Files and hashes:         1: 64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl (hash: KBeeTee9SlPkN4Xvl3e43P7Um5TQh/O3TQl3Q5R5gAo=)
                          2: AS210464.asa (hash: K1KLGN254iygtDJvm5Yl5uvp/Ic+LmyJNg37ecs6QzY=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:6e:0d:d7:e1:f6:1b:59:86:82:cd:3a:ce:9d:fc:f1:59:e4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64abdb41132fbcbe5b2c1c3028c5647ddbcbd043
        Validity
            Not Before: Dec  5 20:42:32 2025 GMT
            Not After : Dec  6 21:47:32 2025 GMT
        Subject: CN=1D0267C3E9DD47E431BE7F483C0641857695B399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:ba:c5:8f:d8:2b:bd:08:5a:10:84:f1:90:
                    54:7f:a5:25:55:fe:0f:d8:79:92:d1:57:0a:2f:04:
                    34:a3:dd:d1:45:6a:1a:48:17:22:f7:01:97:9d:42:
                    ff:5c:b5:ec:b8:5a:54:fa:76:9a:bd:29:83:9b:86:
                    cb:7a:4b:b0:65:75:66:3b:20:e7:c5:1b:ab:f8:43:
                    dd:9f:c3:35:08:3c:ce:85:91:ee:95:02:3e:ee:f9:
                    fd:b1:2c:f0:be:f8:65:4d:fe:d2:17:cf:33:2f:ac:
                    80:14:d5:51:7a:88:a5:4d:ce:fb:66:d2:82:86:03:
                    21:52:69:81:4f:1a:d1:1c:1e:38:49:06:8e:72:bc:
                    1a:30:40:e4:e6:62:90:f3:49:48:60:c2:e3:56:34:
                    e7:05:61:d7:b8:80:14:c0:a7:98:97:f4:78:ee:13:
                    30:0e:cf:4d:aa:62:d1:d6:41:b8:00:39:41:12:aa:
                    d9:36:61:3d:ed:75:51:93:83:ef:80:39:95:8d:b2:
                    17:f3:a3:e1:ce:ab:a8:a1:f3:45:b4:d5:6a:19:61:
                    94:6f:17:0b:27:f0:1b:c6:67:9b:75:11:f7:59:fd:
                    5a:8e:1c:04:40:51:ca:d9:ce:3a:50:46:e2:3c:37:
                    c9:3d:1c:bd:4f:a7:0c:0d:90:8b:7b:e4:2f:23:1f:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:67:C3:E9:DD:47:E4:31:BE:7F:48:3C:06:41:85:76:95:B3:99
            X509v3 Authority Key Identifier:
                keyid:64:AB:DB:41:13:2F:BC:BE:5B:2C:1C:30:28:C5:64:7D:DB:CB:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKvbQRMvvL5bLBwwKMVkfdvL0EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/3/64ABDB41132FBCBE5B2C1C3028C5647DDBCBD043.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:84:d9:1e:9f:2b:33:15:9d:86:cc:00:ac:25:c2:f6:64:bd:
         2c:47:d0:98:74:78:d7:a2:d1:42:4b:df:33:4a:94:00:f4:dc:
         13:e2:a7:69:19:d7:98:87:ba:e6:8f:41:5b:85:f6:a8:a2:2d:
         0e:8b:14:c1:4a:68:44:52:db:50:33:1d:e4:a6:0b:c4:9b:da:
         2a:52:8c:05:f0:89:f1:34:46:bd:1c:9f:94:95:3d:a1:dd:01:
         71:37:6a:5e:d9:0c:b9:8a:bc:3a:f1:4e:09:29:bd:07:ed:40:
         73:92:c4:9b:e6:16:76:bb:01:4a:89:d3:70:98:dc:90:1d:46:
         97:4d:0a:53:b6:24:75:15:9f:0a:97:ae:ff:1f:d1:50:bd:42:
         bf:58:71:ca:c7:70:fd:28:2b:2a:aa:e8:b4:8c:2f:80:ac:55:
         a7:87:6f:10:04:4b:e6:f8:0f:b7:a0:9d:a2:4c:29:11:e1:b2:
         98:ed:12:ba:b5:7f:ce:e2:58:0d:3e:68:95:d5:5a:01:70:51:
         01:04:ac:2a:fa:e8:04:b2:ce:3a:79:8c:f5:5a:60:63:9f:8b:
         f9:0a:8b:f3:2e:21:6f:42:83:d1:17:02:e1:73:2a:5a:c6:aa:
         1f:7c:d4:bb:6d:6b:52:e2:bc:d4:c2:16:bd:43:aa:ed:a5:8f:
         2b:47:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:56 2025 by rpki-client