This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          UFA0suQpMzOso1R9SZJRyEoWzmAFZ/hdB046niDfQEk=
Subject key identifier:   A8:C8:9B:27:47:CF:A3:73:85:2C:E6:1E:AA:64:9C:2A:35:E8:5D:04
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       6636F2F50EC3CA3695DD9E4D9ECEB2540D16ECC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          01DD
Signing time:             Wed 17 Dec 2025 14:19:27 +0000
Manifest this update:     Wed 17 Dec 2025 14:14:27 +0000
Manifest next update:     Thu 18 Dec 2025 15:43:27 +0000
Files and hashes:         1: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: tpWL4SDNdPsnkLfOja6iAoPkJRKxUb41kpKlqTVNs38=)
                          2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=)
                          3: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: OPwW92GO7gVQnH4FN1xaY4Le9i9RXmh5YSfXdEjw79Y=)
                          4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=)
                          5: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=)
                          6: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=)
                          7: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: K2bvJBEaQFYY47bBZ4YDCNGtZnv+jlZTA/Yza+i0hIA=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:f2:f5:0e:c3:ca:36:95:dd:9e:4d:9e:ce:b2:54:0d:16:ec:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Dec 17 14:14:27 2025 GMT
            Not After : Dec 18 15:43:27 2025 GMT
        Subject: CN=A8C89B2747CFA373852CE61EAA649C2A35E85D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:ad:0d:79:0c:ab:c1:2e:e9:eb:95:f9:ce:
                    ba:a0:73:36:0a:8f:22:53:cc:a1:56:1f:11:fa:77:
                    25:39:ce:6e:98:8b:dc:b4:ae:15:78:6c:53:8e:57:
                    c1:cd:6b:6d:12:d4:76:bd:b1:62:6c:3f:f4:2d:af:
                    42:ae:f2:a2:78:0c:09:cd:3d:e6:a2:46:fe:ad:b0:
                    eb:03:da:7b:2c:a0:b7:53:b0:8f:19:e1:d8:78:b3:
                    be:a2:c3:39:d8:be:8c:05:a9:bf:18:85:ed:40:20:
                    fd:77:26:e8:c6:9d:a3:de:7b:e0:88:53:c4:80:38:
                    3c:d7:21:b8:ac:fa:33:da:06:fd:4a:77:b4:7b:49:
                    30:b7:4f:d7:1d:5b:5d:34:24:fe:62:86:59:11:79:
                    bb:23:e9:f6:26:eb:33:71:a9:3a:b2:7f:ff:12:13:
                    35:3d:ef:d1:63:ed:9a:16:3b:87:bc:eb:84:67:a6:
                    31:f2:68:0a:d3:71:5e:05:7b:32:d4:88:a8:2b:bf:
                    a8:83:02:77:1f:69:96:38:5e:e5:00:f0:dc:67:73:
                    ae:02:24:57:e2:37:9f:4e:7c:f8:48:48:08:47:29:
                    75:65:bc:24:9c:cc:f4:04:88:c5:c7:09:24:b2:e2:
                    b2:e7:dc:10:75:1f:1b:0f:ab:06:4e:2d:8b:34:43:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:9B:27:47:CF:A3:73:85:2C:E6:1E:AA:64:9C:2A:35:E8:5D:04
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:82:8e:a2:14:d0:43:8a:3b:4d:e5:d2:30:08:62:aa:29:
         f2:65:4a:01:bc:b5:a8:21:75:ba:b3:ca:a4:ff:f8:ce:03:85:
         52:58:ed:6b:dc:a1:9c:a8:87:c1:6e:ae:01:18:b7:28:3f:e7:
         95:a2:83:f4:00:90:0b:7e:b4:d0:13:59:63:94:28:4c:2f:fa:
         97:55:37:45:18:c1:4d:b5:36:ff:79:63:54:76:56:5d:43:92:
         40:59:e4:2f:26:e0:df:96:5e:cf:c9:8a:c6:8d:2b:a4:a2:71:
         f9:03:a5:63:9d:b8:e7:c6:9b:56:7f:70:ec:df:33:64:66:80:
         f0:ca:22:66:fb:ed:3b:3d:44:a1:7e:3b:df:eb:0e:8b:7d:55:
         92:78:6d:b0:fb:6a:9e:55:3b:ac:c7:59:76:37:3b:98:3b:9c:
         f0:24:6e:b7:bf:66:c5:a4:55:f7:da:e9:f2:41:26:78:55:1d:
         8c:81:d9:e5:a7:63:57:02:ad:8e:38:30:31:61:9b:ee:17:5b:
         56:ed:0a:5a:4b:07:f3:c2:8c:8d:b1:bf:27:b9:35:f3:23:24:
         aa:38:9b:22:fa:7f:b6:63:94:ca:2e:cb:db:97:19:26:ee:fa:
         4f:55:6b:9c:1f:c3:d4:80:26:5e:b7:e9:04:84:aa:92:15:91:
         e1:f6:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:08:32 2025 by rpki-client