This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          YcFeCpsmumf30dzAsD+5F756PMdwl0dPjt5n0HucZ18=
Subject key identifier:   18:3F:B3:FD:B0:81:6C:87:35:1B:22:A7:6C:D7:59:6B:C1:FE:A3:39
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       4EB8EDF3DA714AABE0E57B36B5EC3FCB3EB65AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          022F
Signing time:             Tue 10 Feb 2026 03:54:31 +0000
Manifest this update:     Tue 10 Feb 2026 03:49:31 +0000
Manifest next update:     Wed 11 Feb 2026 07:03:31 +0000
Files and hashes:         1: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=)
                          2: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=)
                          3: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=)
                          4: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=)
                          5: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: CIrkiSyRO/EQ79/VoF0Yal1z0sixg2Xlcgg9OLeAPcQ=)
                          6: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
                          7: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b8:ed:f3:da:71:4a:ab:e0:e5:7b:36:b5:ec:3f:cb:3e:b6:5a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Feb 10 03:49:31 2026 GMT
            Not After : Feb 11 07:03:31 2026 GMT
        Subject: CN=183FB3FDB0816C87351B22A76CD7596BC1FEA339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:e3:07:47:fe:38:f4:17:ae:ad:0c:3c:7b:
                    d7:a7:8b:8b:50:d1:fc:af:80:36:e4:66:e1:8e:d3:
                    79:2f:99:0a:16:22:1d:f6:a6:c6:27:31:6e:5c:84:
                    5e:e6:40:26:55:fc:1b:57:12:f3:34:9f:c6:93:98:
                    ee:b3:3b:56:ed:d9:f2:79:90:8e:c9:cc:3e:6f:91:
                    ed:1a:16:a2:47:b4:74:4f:e3:d6:28:af:96:dc:72:
                    eb:b7:d4:e9:78:5c:0e:6e:f7:12:1f:b7:f4:ec:8d:
                    57:af:04:a3:59:83:f8:29:53:da:d1:15:0d:de:32:
                    19:c3:cc:fc:0b:9d:1a:c3:02:55:a0:d9:bd:37:c3:
                    29:60:a5:09:c4:53:40:b2:9b:67:f9:8e:55:7c:13:
                    36:87:be:79:96:f6:02:73:54:36:64:22:5e:a0:bb:
                    90:df:1e:ac:6a:31:d3:78:d1:7d:c4:1e:fe:36:d0:
                    89:4d:f6:ae:f4:06:3d:69:e1:f2:cf:cb:31:56:45:
                    3c:51:4a:92:58:2c:66:ec:33:27:6b:9c:c5:32:4f:
                    b8:10:8e:bc:87:98:36:ba:f3:b2:ca:26:bc:8b:fa:
                    09:53:36:b8:8b:98:2a:3a:55:47:c2:85:e4:d9:65:
                    e5:45:6b:58:87:8b:90:09:56:08:de:5e:13:19:aa:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:B3:FD:B0:81:6C:87:35:1B:22:A7:6C:D7:59:6B:C1:FE:A3:39
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:28:7a:27:7e:a6:54:7a:0d:cf:10:02:d0:4f:a1:1b:80:f5:
         97:7a:77:59:6d:95:91:be:e2:7b:3d:c4:5a:00:d2:10:a1:cf:
         a7:9f:bc:63:5d:b3:0b:c5:13:cb:80:f9:43:4a:d5:ca:6d:ec:
         ed:ed:86:18:b2:a3:3c:81:74:0b:c6:28:5b:a3:d9:7e:98:1e:
         8b:2c:db:74:3f:72:1a:c1:66:71:8c:1f:01:92:64:01:71:82:
         7d:7d:44:61:88:54:c5:7e:0e:0e:e6:47:97:a5:01:63:39:15:
         7e:ec:2d:44:72:27:df:47:4e:8d:af:06:35:f3:70:39:33:23:
         e4:e7:3b:03:3e:12:9c:47:46:52:07:4f:9a:5a:a9:77:39:cf:
         14:13:27:50:ca:12:36:02:6c:a7:83:5d:f4:62:bd:f9:91:1d:
         c3:b4:25:c6:a7:7b:a5:53:65:95:b9:9d:e8:e1:b0:c0:e2:c8:
         ae:47:e1:ec:87:6a:6d:79:45:3f:3e:3f:d6:52:11:f0:b1:b1:
         39:a0:1c:46:64:67:b1:80:ef:d8:81:32:97:4e:85:52:ff:05:
         e7:1d:5a:7e:8d:f7:fc:7b:4e:84:f0:86:d0:97:20:1c:4c:a6:
         19:5f:7c:ae:09:81:21:a3:12:d1:2d:9f:a4:ef:42:ae:a5:9a:
         7f:53:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:27 2026 by rpki-client