This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: RT8rfyd3cjOtl4h+LIpp3iaF1RUZKSJZEUyJygu8x+U= Subject key identifier: BB:9F:FC:B1:B8:55:7D:88:B8:A5:CC:4F:0F:FF:3E:D2:F3:65:B9:90 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 255D5365CFA64F2E2CA93B7E639F874536865210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0203 Signing time: Mon 12 Jan 2026 11:34:27 +0000 Manifest this update: Mon 12 Jan 2026 11:29:27 +0000 Manifest next update: Tue 13 Jan 2026 11:43:27 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=) 2: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: vsO4x+74XsJysVX66gentoezoq5ke+I3ijEFvqL1vTg=) 3: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=) 4: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 11:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5d:53:65:cf:a6:4f:2e:2c:a9:3b:7e:63:9f:87:45:36:86:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Jan 12 11:29:27 2026 GMT Not After : Jan 13 11:43:27 2026 GMT Subject: CN=BB9FFCB1B8557D88B8A5CC4F0FFF3ED2F365B990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:bc:85:c1:b4:1b:d0:57:a0:e6:5f:ba:bd: 84:93:9f:6b:ef:9a:94:60:9c:c3:d5:5f:fa:ec:a2: 0b:7c:18:36:f4:27:ac:94:fc:de:3b:e7:2b:d6:6b: 79:68:34:07:70:69:b9:ad:81:27:02:a9:14:7e:4c: 22:a1:a7:7d:ec:2b:c0:ab:3e:9b:6f:75:c1:a8:d4: a3:19:0f:9e:ff:c1:67:10:38:1d:7d:77:09:86:03: 46:68:7a:f0:27:f8:bf:87:b7:61:82:69:2c:e5:66: 37:dd:0c:a6:c4:d3:0c:40:d8:59:94:ca:d0:20:b3: f3:77:12:de:33:8a:c5:1c:5f:27:29:7c:05:89:cc: dd:f8:df:ae:50:0e:df:d9:a2:50:19:00:01:4d:81: 4e:19:6a:d7:6e:36:8d:5f:0e:09:ed:80:93:4c:47: 79:fb:5e:9c:57:bd:28:82:6b:c0:0b:21:65:2f:aa: e8:45:2a:e7:72:84:58:00:60:ee:aa:7a:42:37:e3: 9e:82:c7:a2:a6:94:e6:be:d7:f8:7a:c4:e3:96:e5: da:d3:86:c0:19:55:3e:f1:fe:9b:db:ab:af:e0:4e: d2:8b:69:27:9d:93:9a:94:20:49:e8:fb:f9:e1:2d: 73:53:9f:41:9a:f5:f7:de:76:9c:2b:76:25:34:a1: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9F:FC:B1:B8:55:7D:88:B8:A5:CC:4F:0F:FF:3E:D2:F3:65:B9:90 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d5:77:34:9c:64:c0:02:99:9a:0d:49:94:83:82:c2:83:b3: 4f:e5:0d:0b:20:e4:79:56:a3:57:2b:21:b8:e5:09:fc:e5:49: 31:1d:29:11:40:11:a7:2e:be:2b:00:f3:89:e3:68:95:af:98: 75:21:57:da:83:30:1d:a0:cd:94:d8:8a:e1:a3:5c:a5:e5:27: 18:34:4d:51:c3:75:e2:d7:29:fb:c8:47:8c:b3:eb:7d:b0:40: 15:e9:ec:e3:92:0c:09:63:6a:df:c5:6d:b4:38:0b:cc:49:48: 83:ce:93:df:e8:d3:49:8f:36:a8:22:74:d5:be:38:52:1d:47: 9d:cd:44:82:a9:83:a7:dd:64:f5:17:4d:d7:47:19:8d:05:d9: cc:91:02:fb:bc:f8:d7:07:30:61:1a:4a:ba:49:fe:f9:34:98: 9b:c3:1d:d6:ef:e6:15:75:ac:aa:b5:a7:19:1b:b7:b1:36:0e: 60:84:2e:d3:b4:22:2e:53:46:7f:a7:23:99:56:70:d4:6d:ae: 59:83:05:a1:e9:00:27:8c:a8:97:ed:0a:d6:b5:1b:e0:86:8a: 3b:bc:bf:c5:d8:ed:24:fd:fc:cc:4d:cf:84:d3:5a:17:d5:92: 77:9f:5c:d8:44:87:64:c9:17:ac:52:bf:e6:bb:3f:d8:1b:39: 95:54:d9:1a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJV1TZc+mTy4sqTt+Y5+HRTaGUhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwMTEyMTEyOTI3WhcNMjYwMTEzMTE0MzI3 WjAzMTEwLwYDVQQDEyhCQjlGRkNCMUI4NTU3RDg4QjhBNUNDNEYwRkZGM0VEMkYz NjVCOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh28hcG0G9BX oOZfur2Ek59r75qUYJzD1V/67KILfBg29CeslPzeO+cr1mt5aDQHcGm5rYEnAqkU fkwioad97CvAqz6bb3XBqNSjGQ+e/8FnEDgdfXcJhgNGaHrwJ/i/h7dhgmks5WY3 3QymxNMMQNhZlMrQILPzdxLeM4rFHF8nKXwFiczd+N+uUA7f2aJQGQABTYFOGWrX bjaNXw4J7YCTTEd5+16cV70ogmvACyFlL6roRSrncoRYAGDuqnpCN+OegseippTm vtf4esTjluXa04bAGVU+8f6b26uv4E7Si2knnZOalCBJ6Pv54S1zU59BmvX33nac K3YlNKE0zQIDAQABo4ICezCCAncwHQYDVR0OBBYEFLuf/LG4VX2IuKXMTw//PtLz ZbmQMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB 1Xc0nGTAApmaDUmUg4LCg7NP5Q0LIOR5VqNXKyG45Qn85UkxHSkRQBGnLr4rAPOJ 42iVr5h1IVfagzAdoM2U2Irho1yl5ScYNE1Rw3Xi1yn7yEeMs+t9sEAV6ezjkgwJ Y2rfxW20OAvMSUiDzpPf6NNJjzaoInTVvjhSHUedzUSCqYOn3WT1F03XRxmNBdnM kQL7vPjXBzBhGkq6Sf75NJibwx3W7+YVdayqtacZG7exNg5ghC7TtCIuU0Z/pyOZ VnDUba5ZgwWh6QAnjKiX7QrWtRvghoo7vL/F2O0k/fzMTc+E01oX1ZJ3n1zYRIdk yResUr/muz/YGzmVVNka -----END CERTIFICATE-----Generated at Tue Jan 13 03:05:44 2026 by rpki-client