This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier: enpMWZabuUvzyW/9CWJEUdgZV3FiGdTj6ngAxjRF6K0=
Subject key identifier: 91:6A:13:73:E5:51:4D:2E:CB:25:71:5F:4B:E9:32:B5:B2:E2:C2:77
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 37A40707AF9CD6E9E274098ED2C9E3D8D3EFAD04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number: 01E5
Signing time: Sun 21 Dec 2025 04:59:27 +0000
Manifest this update: Sun 21 Dec 2025 04:54:27 +0000
Manifest next update: Mon 22 Dec 2025 06:43:27 +0000
Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: LFjULYcFldkhR34/iFLl+L4XAsSe4PKB8EWpvFDhXCU=)
2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
4: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 06:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a4:07:07:af:9c:d6:e9:e2:74:09:8e:d2:c9:e3:d8:d3:ef:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Dec 21 04:54:27 2025 GMT
Not After : Dec 22 06:43:27 2025 GMT
Subject: CN=916A1373E5514D2ECB25715F4BE932B5B2E2C277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:37:19:41:83:3f:a2:dc:e9:da:b8:a7:bd:
fd:f2:5d:7f:c6:18:e6:09:99:29:e0:86:3e:79:68:
91:90:8d:46:a5:fb:63:fc:50:4a:26:79:97:81:73:
68:1e:76:6f:67:49:00:18:49:07:5b:b8:f3:43:3f:
be:f9:74:47:c6:14:e2:d3:4e:93:e2:7c:de:dd:bb:
6c:78:26:d5:f1:05:e2:09:4b:04:12:7b:0c:25:52:
7e:86:60:1c:4d:30:bb:38:23:a0:0a:1f:4f:73:c9:
04:26:02:e4:34:18:be:69:bc:5e:b5:e2:49:52:67:
2c:da:16:d4:e0:bd:05:17:0f:11:63:f5:e0:e0:76:
62:cd:19:7f:6e:99:d7:04:b8:40:17:f5:85:d5:59:
59:fa:b4:b4:30:9c:cb:a1:e6:7b:94:27:bb:74:94:
13:d2:dd:66:62:e4:d1:ab:a7:ed:9a:af:a8:eb:07:
2d:ca:a4:a7:4d:ae:74:10:6e:ce:ab:cf:07:e0:7f:
9f:27:8d:d1:89:69:21:5a:70:7b:af:f4:e7:30:1e:
d7:46:17:ed:41:77:8d:e6:dd:ac:b9:45:fc:19:ef:
4a:fe:d8:97:33:c6:38:3b:d8:93:5c:00:09:87:aa:
4b:88:38:bf:08:51:08:db:a9:30:17:bc:52:a5:55:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:13:73:E5:51:4D:2E:CB:25:71:5F:4B:E9:32:B5:B2:E2:C2:77
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:ee:cc:32:50:54:e4:bf:14:e9:fe:59:3a:e0:2e:21:8a:
51:2c:fc:5d:6d:b9:b7:e8:12:68:de:26:2e:4e:a6:5d:27:14:
00:40:96:0d:01:e1:30:0c:b2:a9:bc:56:9c:cb:41:fe:ba:58:
ab:0c:e7:6b:06:30:ad:6e:b7:6f:9f:7f:7c:84:f1:f3:60:f1:
ce:92:e9:50:39:99:de:54:f7:da:a2:8b:04:f2:4c:8c:60:c8:
9b:f0:4a:63:74:4b:82:2e:58:ae:3c:a5:79:e1:50:50:be:a2:
20:36:cf:34:b2:a8:79:94:d9:4d:ae:c1:f6:ff:cb:5e:be:53:
79:17:24:fd:7a:41:38:64:a8:b2:c3:be:8b:ae:75:59:b5:cb:
22:56:7a:bb:a3:0f:28:9d:09:e1:fb:58:9f:2d:bf:e1:8b:1b:
b3:06:c2:b9:d9:2b:fd:19:68:b5:0a:4f:0d:3d:50:87:17:a4:
65:3d:1f:7f:fc:4d:9f:49:fb:60:e0:32:dd:42:28:88:92:a8:
4f:62:79:02:9e:32:8f:37:20:2d:d2:87:10:a5:3d:61:4c:0e:
70:ed:7e:f8:bc:de:12:bf:fe:e4:34:00:f1:3b:aa:a5:30:c5:
30:29:23:68:f5:55:0c:e7:67:55:66:21:54:b8:39:4f:db:84:
3b:6a:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:37:43 2025 by rpki-client