This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier: UFA0suQpMzOso1R9SZJRyEoWzmAFZ/hdB046niDfQEk=
Subject key identifier: A8:C8:9B:27:47:CF:A3:73:85:2C:E6:1E:AA:64:9C:2A:35:E8:5D:04
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 6636F2F50EC3CA3695DD9E4D9ECEB2540D16ECC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number: 01DD
Signing time: Wed 17 Dec 2025 14:19:27 +0000
Manifest this update: Wed 17 Dec 2025 14:14:27 +0000
Manifest next update: Thu 18 Dec 2025 15:43:27 +0000
Files and hashes: 1: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: tpWL4SDNdPsnkLfOja6iAoPkJRKxUb41kpKlqTVNs38=)
2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=)
3: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: OPwW92GO7gVQnH4FN1xaY4Le9i9RXmh5YSfXdEjw79Y=)
4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=)
5: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=)
6: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=)
7: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: K2bvJBEaQFYY47bBZ4YDCNGtZnv+jlZTA/Yza+i0hIA=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:36:f2:f5:0e:c3:ca:36:95:dd:9e:4d:9e:ce:b2:54:0d:16:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Dec 17 14:14:27 2025 GMT
Not After : Dec 18 15:43:27 2025 GMT
Subject: CN=A8C89B2747CFA373852CE61EAA649C2A35E85D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:ad:0d:79:0c:ab:c1:2e:e9:eb:95:f9:ce:
ba:a0:73:36:0a:8f:22:53:cc:a1:56:1f:11:fa:77:
25:39:ce:6e:98:8b:dc:b4:ae:15:78:6c:53:8e:57:
c1:cd:6b:6d:12:d4:76:bd:b1:62:6c:3f:f4:2d:af:
42:ae:f2:a2:78:0c:09:cd:3d:e6:a2:46:fe:ad:b0:
eb:03:da:7b:2c:a0:b7:53:b0:8f:19:e1:d8:78:b3:
be:a2:c3:39:d8:be:8c:05:a9:bf:18:85:ed:40:20:
fd:77:26:e8:c6:9d:a3:de:7b:e0:88:53:c4:80:38:
3c:d7:21:b8:ac:fa:33:da:06:fd:4a:77:b4:7b:49:
30:b7:4f:d7:1d:5b:5d:34:24:fe:62:86:59:11:79:
bb:23:e9:f6:26:eb:33:71:a9:3a:b2:7f:ff:12:13:
35:3d:ef:d1:63:ed:9a:16:3b:87:bc:eb:84:67:a6:
31:f2:68:0a:d3:71:5e:05:7b:32:d4:88:a8:2b:bf:
a8:83:02:77:1f:69:96:38:5e:e5:00:f0:dc:67:73:
ae:02:24:57:e2:37:9f:4e:7c:f8:48:48:08:47:29:
75:65:bc:24:9c:cc:f4:04:88:c5:c7:09:24:b2:e2:
b2:e7:dc:10:75:1f:1b:0f:ab:06:4e:2d:8b:34:43:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:9B:27:47:CF:A3:73:85:2C:E6:1E:AA:64:9C:2A:35:E8:5D:04
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:82:8e:a2:14:d0:43:8a:3b:4d:e5:d2:30:08:62:aa:29:
f2:65:4a:01:bc:b5:a8:21:75:ba:b3:ca:a4:ff:f8:ce:03:85:
52:58:ed:6b:dc:a1:9c:a8:87:c1:6e:ae:01:18:b7:28:3f:e7:
95:a2:83:f4:00:90:0b:7e:b4:d0:13:59:63:94:28:4c:2f:fa:
97:55:37:45:18:c1:4d:b5:36:ff:79:63:54:76:56:5d:43:92:
40:59:e4:2f:26:e0:df:96:5e:cf:c9:8a:c6:8d:2b:a4:a2:71:
f9:03:a5:63:9d:b8:e7:c6:9b:56:7f:70:ec:df:33:64:66:80:
f0:ca:22:66:fb:ed:3b:3d:44:a1:7e:3b:df:eb:0e:8b:7d:55:
92:78:6d:b0:fb:6a:9e:55:3b:ac:c7:59:76:37:3b:98:3b:9c:
f0:24:6e:b7:bf:66:c5:a4:55:f7:da:e9:f2:41:26:78:55:1d:
8c:81:d9:e5:a7:63:57:02:ad:8e:38:30:31:61:9b:ee:17:5b:
56:ed:0a:5a:4b:07:f3:c2:8c:8d:b1:bf:27:b9:35:f3:23:24:
aa:38:9b:22:fa:7f:b6:63:94:ca:2e:cb:db:97:19:26:ee:fa:
4f:55:6b:9c:1f:c3:d4:80:26:5e:b7:e9:04:84:aa:92:15:91:
e1:f6:b1:d0
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUZjby9Q7DyjaV3Z5Nns6yVA0W7MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx
N2JkZTlhODAeFw0yNTEyMTcxNDE0MjdaFw0yNTEyMTgxNTQzMjdaMDMxMTAvBgNV
BAMTKEE4Qzg5QjI3NDdDRkEzNzM4NTJDRTYxRUFBNjQ5QzJBMzVFODVEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F60NeQyrwS7p65X5zrqgczYK
jyJTzKFWHxH6dyU5zm6Yi9y0rhV4bFOOV8HNa20S1Ha9sWJsP/Qtr0Ku8qJ4DAnN
PeaiRv6tsOsD2nssoLdTsI8Z4dh4s76iwznYvowFqb8Yhe1AIP13JujGnaPee+CI
U8SAODzXIbis+jPaBv1Kd7R7STC3T9cdW100JP5ihlkRebsj6fYm6zNxqTqyf/8S
EzU979Fj7ZoWO4e864RnpjHyaArTcV4FezLUiKgrv6iDAncfaZY4XuUA8Nxnc64C
JFfiN59OfPhISAhHKXVlvCSczPQEiMXHCSSy4rLn3BB1HxsPqwZOLYs0Q2VrAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUqMibJ0fPo3OFLOYeqmScKjXoXQQwHwYDVR0j
BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs
aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC
ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y
cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5
NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK/5go6iFNBDijtN
5dIwCGKqKfJlSgG8taghdbqzyqT/+M4DhVJY7WvcoZyoh8FurgEYtyg/55Wig/QA
kAt+tNATWWOUKEwv+pdVN0UYwU21Nv95Y1R2Vl1DkkBZ5C8m4N+WXs/JisaNK6Si
cfkDpWOduOfGm1Z/cOzfM2RmgPDKImb77Ts9RKF+O9/rDot9VZJ4bbD7ap5VO6zH
WXY3O5g7nPAkbre/ZsWkVffa6fJBJnhVHYyB2eWnY1cCrY44MDFhm+4XW1btClpL
B/PCjI2xvye5NfMjJKo4myL6f7ZjlMouy9uXGSbu+k9Va5wfw9SAJl636QSEqpIV
keH2sdA=
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:08:32 2025 by rpki-client