This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier: YcFeCpsmumf30dzAsD+5F756PMdwl0dPjt5n0HucZ18=
Subject key identifier: 18:3F:B3:FD:B0:81:6C:87:35:1B:22:A7:6C:D7:59:6B:C1:FE:A3:39
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 4EB8EDF3DA714AABE0E57B36B5EC3FCB3EB65AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number: 022F
Signing time: Tue 10 Feb 2026 03:54:31 +0000
Manifest this update: Tue 10 Feb 2026 03:49:31 +0000
Manifest next update: Wed 11 Feb 2026 07:03:31 +0000
Files and hashes: 1: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=)
2: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=)
3: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=)
4: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=)
5: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: CIrkiSyRO/EQ79/VoF0Yal1z0sixg2Xlcgg9OLeAPcQ=)
6: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
7: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b8:ed:f3:da:71:4a:ab:e0:e5:7b:36:b5:ec:3f:cb:3e:b6:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Feb 10 03:49:31 2026 GMT
Not After : Feb 11 07:03:31 2026 GMT
Subject: CN=183FB3FDB0816C87351B22A76CD7596BC1FEA339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ef:e3:07:47:fe:38:f4:17:ae:ad:0c:3c:7b:
d7:a7:8b:8b:50:d1:fc:af:80:36:e4:66:e1:8e:d3:
79:2f:99:0a:16:22:1d:f6:a6:c6:27:31:6e:5c:84:
5e:e6:40:26:55:fc:1b:57:12:f3:34:9f:c6:93:98:
ee:b3:3b:56:ed:d9:f2:79:90:8e:c9:cc:3e:6f:91:
ed:1a:16:a2:47:b4:74:4f:e3:d6:28:af:96:dc:72:
eb:b7:d4:e9:78:5c:0e:6e:f7:12:1f:b7:f4:ec:8d:
57:af:04:a3:59:83:f8:29:53:da:d1:15:0d:de:32:
19:c3:cc:fc:0b:9d:1a:c3:02:55:a0:d9:bd:37:c3:
29:60:a5:09:c4:53:40:b2:9b:67:f9:8e:55:7c:13:
36:87:be:79:96:f6:02:73:54:36:64:22:5e:a0:bb:
90:df:1e:ac:6a:31:d3:78:d1:7d:c4:1e:fe:36:d0:
89:4d:f6:ae:f4:06:3d:69:e1:f2:cf:cb:31:56:45:
3c:51:4a:92:58:2c:66:ec:33:27:6b:9c:c5:32:4f:
b8:10:8e:bc:87:98:36:ba:f3:b2:ca:26:bc:8b:fa:
09:53:36:b8:8b:98:2a:3a:55:47:c2:85:e4:d9:65:
e5:45:6b:58:87:8b:90:09:56:08:de:5e:13:19:aa:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:B3:FD:B0:81:6C:87:35:1B:22:A7:6C:D7:59:6B:C1:FE:A3:39
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:7a:27:7e:a6:54:7a:0d:cf:10:02:d0:4f:a1:1b:80:f5:
97:7a:77:59:6d:95:91:be:e2:7b:3d:c4:5a:00:d2:10:a1:cf:
a7:9f:bc:63:5d:b3:0b:c5:13:cb:80:f9:43:4a:d5:ca:6d:ec:
ed:ed:86:18:b2:a3:3c:81:74:0b:c6:28:5b:a3:d9:7e:98:1e:
8b:2c:db:74:3f:72:1a:c1:66:71:8c:1f:01:92:64:01:71:82:
7d:7d:44:61:88:54:c5:7e:0e:0e:e6:47:97:a5:01:63:39:15:
7e:ec:2d:44:72:27:df:47:4e:8d:af:06:35:f3:70:39:33:23:
e4:e7:3b:03:3e:12:9c:47:46:52:07:4f:9a:5a:a9:77:39:cf:
14:13:27:50:ca:12:36:02:6c:a7:83:5d:f4:62:bd:f9:91:1d:
c3:b4:25:c6:a7:7b:a5:53:65:95:b9:9d:e8:e1:b0:c0:e2:c8:
ae:47:e1:ec:87:6a:6d:79:45:3f:3e:3f:d6:52:11:f0:b1:b1:
39:a0:1c:46:64:67:b1:80:ef:d8:81:32:97:4e:85:52:ff:05:
e7:1d:5a:7e:8d:f7:fc:7b:4e:84:f0:86:d0:97:20:1c:4c:a6:
19:5f:7c:ae:09:81:21:a3:12:d1:2d:9f:a4:ef:42:ae:a5:9a:
7f:53:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:27 2026 by rpki-client