This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
File:                     7D425251D51803E61C820ADEF2945E50184448D0.mft (raw, json)
Hash identifier:          7lk0R1JVSqROLUNeXseJ3Iy83zyMvD+Epph+jxOq8eg=
Subject key identifier:   91:6E:73:C3:B2:9B:54:A9:49:84:E3:94:43:F6:5C:F6:8E:E3:60:FA
Authority key identifier: 7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
Certificate issuer:       /CN=7D425251D51803E61C820ADEF2945E50184448D0
Certificate serial:       4117E09F303E397FEE362492FD56191AEA5EFDB3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
Manifest number:          33
Signing time:             Fri 05 Dec 2025 17:32:32 +0000
Manifest this update:     Fri 05 Dec 2025 17:27:32 +0000
Manifest next update:     Sat 06 Dec 2025 18:15:32 +0000
Files and hashes:         1: 7D425251D51803E61C820ADEF2945E50184448D0.crl (hash: qC7Q3ONyflZaw7qzNnNFb3sNVCTV1MBvE8dmblTF9MM=)
                          2: 38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa (hash: 0aZfjrvYrPLnv3SP6/H4nxpB3qjjpVdF0uWmjdcoqOQ=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 18:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:17:e0:9f:30:3e:39:7f:ee:36:24:92:fd:56:19:1a:ea:5e:fd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D425251D51803E61C820ADEF2945E50184448D0
        Validity
            Not Before: Dec  5 17:27:32 2025 GMT
            Not After : Dec  6 18:15:32 2025 GMT
        Subject: CN=916E73C3B29B54A94984E39443F65CF68EE360FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:a8:37:e9:f8:90:7d:81:7a:bf:ad:97:c3:
                    95:92:4f:3a:ad:32:01:5d:3a:e6:c4:cd:3d:2e:41:
                    46:98:b3:07:4a:74:1b:30:96:20:6e:f8:0d:db:72:
                    15:fe:b3:de:7b:ae:16:f9:3d:28:e0:d8:80:36:76:
                    71:68:ed:60:33:7b:40:0c:35:ce:60:b6:d2:b7:4a:
                    0a:f3:5a:bf:f4:b9:5d:93:7c:47:36:df:b9:49:8a:
                    ae:bd:95:d9:c2:60:32:dd:49:f4:f3:6a:d0:a6:6b:
                    99:6f:7c:15:e0:31:7e:b0:ae:4d:bf:6a:f5:59:72:
                    d4:d4:91:a1:cf:5e:cc:4b:48:5c:c9:87:cd:5e:7d:
                    1d:da:89:a0:12:56:e3:29:35:95:e3:a7:7d:9c:d4:
                    67:de:97:c7:88:d0:92:01:9f:69:ee:b0:4e:32:7a:
                    a0:bf:7c:dd:d4:a4:84:0b:a5:e0:fd:0f:24:3b:a6:
                    8c:bb:e0:91:4b:0c:67:95:fc:f6:ed:4a:8c:53:19:
                    63:65:47:03:b5:cd:c0:76:d3:dc:4a:1f:28:04:b0:
                    c7:37:fd:c6:de:e7:6d:cb:59:5a:bf:39:34:cd:48:
                    d0:b6:18:e6:8e:ec:de:5a:6c:ed:ab:b4:3e:a8:7d:
                    dc:46:ef:7a:b5:19:f5:e8:80:7b:e7:1c:3d:e4:b3:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:73:C3:B2:9B:54:A9:49:84:E3:94:43:F6:5C:F6:8E:E3:60:FA
            X509v3 Authority Key Identifier:
                keyid:7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:ee:08:d4:7f:4e:de:94:ee:9b:15:cc:23:4b:62:69:15:
         95:97:e4:b6:69:89:8c:81:11:b6:c7:2f:ed:93:bf:77:d8:49:
         0b:1e:86:3f:b4:f0:20:f5:d4:52:77:f5:2c:51:a7:cf:f4:c8:
         d2:57:03:26:a3:f7:13:4f:aa:ee:7f:0a:30:d4:04:b5:10:34:
         76:21:81:96:20:d5:e8:b7:46:5d:1d:99:97:28:27:6b:14:63:
         35:1e:1a:94:11:1d:66:65:e8:28:2e:f2:6c:80:9b:ad:80:e3:
         70:12:2a:1e:75:e9:c8:60:64:3b:0b:ee:da:cb:e6:f4:dc:7e:
         02:2d:0f:21:58:6e:c3:d2:2e:bc:0a:d3:ff:2a:1c:08:6b:1d:
         ca:a2:18:47:ac:ca:52:0f:91:f0:82:c3:a6:6f:41:89:ee:9f:
         c7:33:5e:3a:87:69:2e:06:d1:8a:b7:19:aa:10:ee:b1:42:97:
         17:46:a0:48:2c:b5:42:38:f9:2f:ed:18:30:f9:af:30:38:9f:
         c9:a5:62:22:cd:08:d1:7e:3d:c9:18:a1:5f:38:80:d7:9e:f2:
         22:41:1a:3e:ea:e4:35:3a:06:af:9b:1a:e1:ba:96:03:ed:9a:
         8e:3f:e6:5e:4d:98:d0:2c:2f:57:f1:fd:24:0e:f3:04:a1:54:
         40:d1:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:42:07 2025 by rpki-client