This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json) Hash identifier: Ls1X+yJumVh9dLBRvm29d3wANBemaN/UIiZXDBzweYQ= Subject key identifier: DD:28:DD:6A:7A:A7:DA:D2:91:85:D9:60:8D:5A:FB:F4:DC:76:9C:90 Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Certificate serial: 07C95DE1D50D925F085387935FB5057B9D7B3998 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 16:49:08 +0000 Manifest this update: Fri 19 Dec 2025 16:44:08 +0000 Manifest next update: Sat 20 Dec 2025 17:08:08 +0000 Files and hashes: 1: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=) 2: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: 1wpmbYFpsmPR7aVfHsO3wizn7P+055nTjM6/O6Y7I7M=) 3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 17:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c9:5d:e1:d5:0d:92:5f:08:53:87:93:5f:b5:05:7b:9d:7b:39:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Validity Not Before: Dec 19 16:44:08 2025 GMT Not After : Dec 20 17:08:08 2025 GMT Subject: CN=DD28DD6A7AA7DAD29185D9608D5AFBF4DC769C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:23:8b:24:c9:e8:eb:05:a7:4e:86:ac:32: 38:eb:ab:3e:1c:5f:83:e2:86:6f:1b:8f:c8:c9:2e: 7f:40:16:dc:77:21:13:76:a0:d8:4a:b7:95:17:4b: bf:53:0f:e8:9d:13:25:28:e6:f4:1b:77:51:6c:bc: eb:bb:b9:7e:65:59:a6:4c:5b:0c:cc:74:57:ad:0f: 28:44:f7:05:14:b6:f3:37:ee:13:bc:66:8b:99:e8: c8:c5:ba:f4:d1:fc:7a:30:eb:42:fb:37:93:4b:10: c6:53:3d:4b:ab:07:0c:33:35:be:3f:f8:b9:e0:ba: ad:f0:88:d6:c8:3f:35:5c:d4:8e:1b:2a:ac:e3:e5: 81:27:a1:25:82:49:63:de:6e:ac:26:f9:4c:20:65: 65:f2:bf:54:3b:94:d8:ba:78:ea:a2:fb:71:36:d0: f9:c0:f7:d0:41:30:23:cf:e9:a9:7e:4f:1b:5a:42: 90:ab:f4:fb:f2:e8:eb:a8:95:92:e2:62:dd:77:d8: f0:44:9a:5f:54:04:74:c1:b5:96:0f:d8:19:4b:a0: 50:13:83:24:c4:b0:36:9a:7b:4e:ff:ea:b1:02:5d: 2f:f8:a9:da:4f:03:98:a1:50:59:03:6c:66:7b:4a: ea:fa:7d:62:18:5c:f0:b9:16:dc:a7:98:a9:76:16: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:28:DD:6A:7A:A7:DA:D2:91:85:D9:60:8D:5A:FB:F4:DC:76:9C:90 X509v3 Authority Key Identifier: keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:43:78:e5:ef:f7:e0:9b:90:6f:1e:b0:43:eb:9c:04:3e: 39:55:62:a1:ab:d5:12:1e:ee:92:6c:fa:19:24:54:50:50:41: 03:80:ec:fa:00:58:23:a9:86:5b:e5:bc:af:14:8f:01:df:bc: 12:70:2b:a4:15:de:66:50:48:a5:f8:18:b2:81:74:02:94:82: 9b:af:bc:8d:ad:41:a7:d8:d0:60:d2:24:7e:fc:9b:58:84:ff: e7:ac:cd:bd:6a:88:77:93:be:78:8e:ae:1e:cb:81:4a:5a:19: 4c:af:9d:31:49:e6:05:49:2f:a0:24:57:d7:6d:df:3d:23:fe: 58:76:13:32:04:f6:59:95:1c:eb:87:e0:f7:b6:fc:d2:3d:81: e5:8f:59:93:4f:b8:45:74:c2:e5:9e:82:4f:eb:10:47:74:a5: 8c:dc:a5:75:be:5d:35:a0:ef:cb:0a:5a:43:54:c3:c1:f5:0b: 78:8a:66:26:62:2c:8f:c8:48:c8:3a:5c:06:6c:32:93:9c:79: a4:7a:3b:b2:e3:9f:7c:be:6c:a3:ae:df:18:0a:34:c5:0c:da: cc:a6:6d:3b:cc:d1:50:32:8e:47:3d:23:f7:68:57:98:28:91: 90:19:5b:50:b1:fa:fe:67:48:93:de:89:91:7e:19:c8:49:6f: 5d:94:c0:e2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUB8ld4dUNkl8IU4eTX7UFe517OZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4 ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjUxMjE5MTY0NDA4WhcNMjUxMjIwMTcwODA4 WjAzMTEwLwYDVQQDEyhERDI4REQ2QTdBQTdEQUQyOTE4NUQ5NjA4RDVBRkJGNERD NzY5QzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ojiyTJ6OsF p06GrDI466s+HF+D4oZvG4/IyS5/QBbcdyETdqDYSreVF0u/Uw/onRMlKOb0G3dR bLzru7l+ZVmmTFsMzHRXrQ8oRPcFFLbzN+4TvGaLmejIxbr00fx6MOtC+zeTSxDG Uz1LqwcMMzW+P/i54Lqt8IjWyD81XNSOGyqs4+WBJ6Elgklj3m6sJvlMIGVl8r9U O5TYunjqovtxNtD5wPfQQTAjz+mpfk8bWkKQq/T78ujrqJWS4mLdd9jwRJpfVAR0 wbWWD9gZS6BQE4MkxLA2mntO/+qxAl0v+KnaTwOYoVBZA2xme0rq+n1iGFzwuRbc p5ipdhYgjwIDAQABo4ICezCCAncwHQYDVR0OBBYEFN0o3Wp6p9rSkYXZYI1a+/Tc dpyQMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0 NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3 LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5 ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1 QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv OkN45e/34JuQbx6wQ+ucBD45VWKhq9USHu6SbPoZJFRQUEEDgOz6AFgjqYZb5byv FI8B37wScCukFd5mUEil+BiygXQClIKbr7yNrUGn2NBg0iR+/JtYhP/nrM29aoh3 k754jq4ey4FKWhlMr50xSeYFSS+gJFfXbd89I/5YdhMyBPZZlRzrh+D3tvzSPYHl j1mTT7hFdMLlnoJP6xBHdKWM3KV1vl01oO/LClpDVMPB9Qt4imYmYiyPyEjIOlwG bDKTnHmkejuy4598vmyjrt8YCjTFDNrMpm07zNFQMo5HPSP3aFeYKJGQGVtQsfr+ Z0iT3omRfhnISW9dlMDi -----END CERTIFICATE-----Generated at Sat Dec 20 04:30:46 2025 by rpki-client