This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          XoymRcuhww3Y3zAMctleOiXiO0WUntiX8z0yW3dTRMg=
Subject key identifier:   E7:EE:48:70:F0:69:3C:99:9A:00:FC:8A:C6:53:16:B3:25:32:79:36
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       4AA61435780B8B6376A9168F315A84197CB0578E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          01F2
Signing time:             Wed 31 Dec 2025 00:29:27 +0000
Manifest this update:     Wed 31 Dec 2025 00:24:27 +0000
Manifest next update:     Thu 01 Jan 2026 02:16:27 +0000
Files and hashes:         1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: Mp4OYA7Dv5wOO+UiSJOiE2kHSZdOM5RjrBVkQKo/Q/Y=)
                          2: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
                          3: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
                          4: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 02:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a6:14:35:78:0b:8b:63:76:a9:16:8f:31:5a:84:19:7c:b0:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Dec 31 00:24:27 2025 GMT
            Not After : Jan  1 02:16:27 2026 GMT
        Subject: CN=E7EE4870F0693C999A00FC8AC65316B325327936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:4c:63:24:0c:f4:2a:f1:7c:d9:d3:7f:fe:
                    9d:df:d6:9c:d8:06:08:16:74:7c:08:d7:12:36:db:
                    ea:b5:25:95:9f:0a:fd:8f:12:59:d4:db:1c:fc:f6:
                    f4:42:af:96:c9:83:61:f2:7e:60:28:d0:f2:f4:33:
                    87:60:85:8a:0b:a5:c2:b9:16:3e:a1:af:5a:15:ce:
                    c8:62:31:ca:76:ff:1b:13:7b:89:71:da:b9:5a:9e:
                    a5:dc:92:fc:53:d8:3d:6d:ae:15:46:e6:fc:af:b1:
                    cc:31:60:ca:d8:52:cb:2b:ce:ae:03:9a:36:d1:09:
                    d7:be:c6:d7:e2:57:56:35:6a:66:b1:29:c2:a3:79:
                    be:56:6f:2d:fa:4c:0b:e6:d7:17:2c:c0:34:52:72:
                    3b:86:2b:63:c7:01:46:26:3d:1c:44:81:8d:bb:44:
                    47:e5:9f:ca:11:97:11:ce:8c:ef:b3:63:9f:38:fd:
                    3e:d0:94:2b:e1:7f:13:68:a7:a2:5f:88:f4:58:19:
                    0e:c4:61:71:25:27:a4:51:80:8a:48:44:80:05:c2:
                    b5:dd:cc:ef:40:fd:a5:46:a2:45:56:77:ec:9c:22:
                    33:7e:a0:00:3c:3c:a0:f2:7e:27:1a:66:9b:5f:57:
                    68:f6:3f:38:10:bf:29:c0:f7:4a:6b:7d:ee:a7:7c:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:48:70:F0:69:3C:99:9A:00:FC:8A:C6:53:16:B3:25:32:79:36
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9a:13:ac:a5:59:4d:9a:41:35:5a:64:22:d7:44:14:b4:cc:
         43:86:43:8b:47:ae:9a:65:78:18:07:13:11:e5:c9:40:40:24:
         71:8c:ac:80:ec:a6:56:ba:f1:16:8b:1e:06:f1:22:00:b0:b3:
         7f:22:38:cb:99:d1:75:be:e1:6c:31:c0:31:a6:2b:f6:fa:bc:
         03:a7:17:c4:64:e1:67:1e:7a:2a:c7:1c:b7:ca:7e:e1:0d:fa:
         a1:e1:bb:27:13:e4:62:77:ad:73:c9:d7:25:7c:b7:dd:94:52:
         a5:39:e3:b4:3b:0c:f6:bf:40:b0:74:43:29:62:02:c8:1e:93:
         76:98:98:5b:96:af:70:96:0b:65:99:7f:1d:3c:e0:a0:86:25:
         cf:ca:a2:99:aa:de:ab:b4:bb:a6:d5:c2:56:17:56:32:ab:46:
         3f:16:3c:0f:d7:f0:57:2f:c5:d5:be:cc:05:31:87:bf:f4:df:
         dd:b2:3c:49:1b:e0:1e:cf:63:fe:18:6d:88:09:92:b6:08:47:
         23:6d:d3:2f:7b:cc:7c:45:cb:b8:78:07:19:9a:62:2f:25:d6:
         6c:07:09:15:87:2d:21:94:e7:97:f6:d8:6a:23:8c:f4:10:4f:
         17:5c:41:0f:16:55:c0:66:f7:97:6c:f3:ae:31:46:f3:04:8e:
         80:02:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:54:51 2025 by rpki-client