This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: xz3MoDqKC7gmXIKTlZ7NKMxR1poFaShdC41ulDapH4A= Subject key identifier: 27:A6:F0:F2:29:E2:D0:68:B6:5F:91:B9:63:DD:F7:39:97:D3:0C:D2 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 5476B021E9A89E80C8063CD77B7578F507B75CD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 01E1 Signing time: Fri 19 Dec 2025 16:49:08 +0000 Manifest this update: Fri 19 Dec 2025 16:44:08 +0000 Manifest next update: Sat 20 Dec 2025 20:33:08 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 3: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: OPwW92GO7gVQnH4FN1xaY4Le9i9RXmh5YSfXdEjw79Y=) 4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 6: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: K2bvJBEaQFYY47bBZ4YDCNGtZnv+jlZTA/Yza+i0hIA=) 7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: PpO7pcpS6ihicJG7j3NJDKPDmcmRN+xKyqyqtcasfQc=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:76:b0:21:e9:a8:9e:80:c8:06:3c:d7:7b:75:78:f5:07:b7:5c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Dec 19 16:44:08 2025 GMT Not After : Dec 20 20:33:08 2025 GMT Subject: CN=27A6F0F229E2D068B65F91B963DDF73997D30CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:fd:8c:c5:b5:3a:ee:c4:d5:c8:21:37:78: a6:b8:4e:bf:3e:52:6f:aa:2b:af:6c:47:8f:ad:53: 24:24:d2:3b:ba:a2:76:a5:b9:1c:91:61:02:2a:52: e7:63:7c:18:b0:5f:d1:4e:5f:27:b5:91:e9:4c:26: e9:29:94:a7:8c:c4:7f:e2:d4:04:04:06:ab:16:4e: 02:1e:5d:a8:90:4a:22:88:1d:c4:dd:4e:40:df:0f: 29:95:a6:09:58:f5:60:6d:db:f8:f8:ad:c8:cf:88: d5:89:14:74:88:1b:62:1f:35:95:b3:59:92:02:b9: 3e:0a:3c:35:9f:b3:f2:59:9f:4c:f9:c0:82:bf:af: f5:84:7e:68:39:d5:d0:01:f0:cc:1b:83:5c:ee:68: 38:26:49:99:8f:63:16:b3:f9:c6:a1:5d:b0:9f:1c: 65:01:6f:e5:f1:f8:45:bd:70:74:dc:6f:b1:19:56: 8f:49:23:c3:31:9b:49:b0:17:41:08:e9:1b:39:81: 2b:9f:af:5d:b6:ec:1f:e2:5a:f0:89:90:e9:73:fb: bc:d0:c2:46:96:5c:74:0d:99:f3:22:a1:f3:1d:1f: 33:30:0b:d5:2a:02:bd:61:e7:aa:7d:10:2e:36:d0: 05:17:88:f9:5e:dc:ce:6c:99:5f:d2:c4:db:d2:f6: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A6:F0:F2:29:E2:D0:68:B6:5F:91:B9:63:DD:F7:39:97:D3:0C:D2 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:08:e7:d4:6c:a1:0b:37:86:4c:bb:ff:f4:d3:c9:36:e1:cd: 04:a3:3c:c3:6d:f9:96:15:ff:2b:d1:3f:dc:dd:a1:6e:39:4d: 4a:e1:76:05:60:25:6c:e7:6c:c2:26:b5:c2:a5:3a:2b:52:c2: 95:d5:ec:5f:5d:8e:1e:46:bf:74:a8:26:69:dc:d4:8e:01:40: 7d:c2:20:ca:15:b7:89:9e:4c:78:be:d7:76:a8:72:9b:74:10: fb:ef:84:4d:ff:24:a5:4c:ce:58:e3:c1:25:29:be:a6:28:43: 48:ac:37:4b:ab:be:68:95:df:da:02:4f:e7:32:09:3c:d1:27: 7e:35:80:57:13:3b:4f:ca:27:01:c8:a4:3e:d6:6c:f5:bb:56: 43:21:21:77:e0:a3:45:78:71:01:0b:e0:dd:12:15:e7:d7:63: d4:c6:4c:cd:4d:e8:83:7f:76:b8:2d:cb:3f:e2:13:04:7c:b5: b8:b2:d8:95:4d:08:c1:e0:ff:f6:5b:46:ee:da:7e:d2:b2:42: 15:1c:87:90:fd:62:49:a4:3b:88:90:db:94:8f:14:22:7a:ca: fa:53:75:65:52:01:30:fb:7c:14:4e:a9:12:0a:14:94:4f:73: f3:41:96:b1:34:6d:98:6d:04:5b:53:de:79:6f:4f:73:0c:55: 30:02:36:35 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUVHawIemonoDIBjzXe3V49Qe3XNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTEyMTkxNjQ0MDhaFw0yNTEyMjAyMDMzMDhaMDMxMTAvBgNV BAMTKDI3QTZGMEYyMjlFMkQwNjhCNjVGOTFCOTYzRERGNzM5OTdEMzBDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNP2MxbU67sTVyCE3eKa4Tr8+ Um+qK69sR4+tUyQk0ju6onaluRyRYQIqUudjfBiwX9FOXye1kelMJukplKeMxH/i 1AQEBqsWTgIeXaiQSiKIHcTdTkDfDymVpglY9WBt2/j4rcjPiNWJFHSIG2IfNZWz WZICuT4KPDWfs/JZn0z5wIK/r/WEfmg51dAB8Mwbg1zuaDgmSZmPYxaz+cahXbCf HGUBb+Xx+EW9cHTcb7EZVo9JI8Mxm0mwF0EI6Rs5gSufr1227B/iWvCJkOlz+7zQ wkaWXHQNmfMiofMdHzMwC9UqAr1h56p9EC420AUXiPle3M5smV/SxNvS9poNAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUJ6bw8ini0Gi2X5G5Y933OZfTDNIwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGgI59RsoQs3hky7 //TTyTbhzQSjPMNt+ZYV/yvRP9zdoW45TUrhdgVgJWznbMImtcKlOitSwpXV7F9d jh5Gv3SoJmnc1I4BQH3CIMoVt4meTHi+13aocpt0EPvvhE3/JKVMzljjwSUpvqYo Q0isN0urvmiV39oCT+cyCTzRJ341gFcTO0/KJwHIpD7WbPW7VkMhIXfgo0V4cQEL 4N0SFefXY9TGTM1N6IN/drgtyz/iEwR8tbiy2JVNCMHg//ZbRu7aftKyQhUch5D9 YkmkO4iQ25SPFCJ6yvpTdWVSATD7fBROqRIKFJRPc/NBlrE0bZhtBFtT3nlvT3MM VTACNjU= -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:30 2025 by rpki-client