This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: t4uFlFy7l+sKDr5W1V8HGwCDKoSvCQORLR1v3GO2BRU= Subject key identifier: 31:21:17:0E:94:49:D6:7C:87:B7:7D:40:C9:71:F9:F0:20:1E:1D:C5 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 5AB266EDD20029B185376A851FA1DF5EDC1838DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 01CD Signing time: Fri 05 Dec 2025 13:39:54 +0000 Manifest this update: Fri 05 Dec 2025 13:34:54 +0000 Manifest next update: Sat 06 Dec 2025 16:44:54 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: OPwW92GO7gVQnH4FN1xaY4Le9i9RXmh5YSfXdEjw79Y=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: +/He8dv50lndMU+8YvnZ1W9GfCI10mJEbLQVVXDur0U=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 5: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: K2bvJBEaQFYY47bBZ4YDCNGtZnv+jlZTA/Yza+i0hIA=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 7: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:66:ed:d2:00:29:b1:85:37:6a:85:1f:a1:df:5e:dc:18:38:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Dec 5 13:34:54 2025 GMT Not After : Dec 6 16:44:54 2025 GMT Subject: CN=3121170E9449D67C87B77D40C971F9F0201E1DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:4b:4a:00:56:04:39:06:6d:b6:f0:0d:bc: 02:3e:ff:38:d0:72:68:b2:3a:1a:e2:34:f0:d8:67: 33:84:72:ff:d3:78:8c:56:bd:12:5e:65:23:2b:1b: 84:46:1f:60:bf:a9:61:17:66:51:01:22:f2:91:c1: 57:0f:3f:94:60:58:05:35:36:a8:e9:30:54:71:06: 08:95:d8:4f:1c:97:72:ff:98:11:55:96:d3:04:eb: 8a:84:4d:5e:43:ed:03:a2:53:89:99:34:c6:41:e5: 3e:7b:72:3c:6e:ed:a1:79:f7:ba:22:9b:4f:9e:5d: 44:a3:e5:2b:c2:2e:51:96:d8:f6:ec:ed:d2:6b:54: d8:09:d2:cc:0f:75:54:c0:e5:38:83:0e:8e:5d:74: d1:24:1e:a1:6d:31:26:00:5a:34:9e:e4:8e:b9:9d: f0:57:87:b0:03:da:80:ad:b2:fd:14:0e:5d:3a:7a: cf:c5:d3:68:ea:aa:61:50:88:bc:4e:61:24:f8:b6: d8:fb:93:bc:b8:e0:e1:90:58:c6:c4:09:9f:92:e2: 83:28:d3:a0:5c:81:f1:59:d3:b2:17:81:ce:15:80: d7:48:b2:1a:b5:47:49:72:b8:22:a6:9b:de:37:53: b0:2b:02:cc:2d:69:41:7a:e0:3a:cc:1e:e9:9f:ae: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:17:0E:94:49:D6:7C:87:B7:7D:40:C9:71:F9:F0:20:1E:1D:C5 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:94:47:de:01:90:14:de:5f:20:fa:4d:ac:5e:5a:7c:e5: b6:55:ff:b5:74:3c:27:2c:5e:49:16:e1:7a:c0:8f:f9:14:5f: bf:7d:5f:1f:71:5b:be:70:ae:fa:f8:4d:88:39:12:b3:47:2b: ec:a8:2f:59:cf:e8:8e:0e:96:34:ed:b4:70:30:00:05:f1:15: 44:66:61:0e:04:c6:68:ef:9e:d8:75:8f:c0:75:fd:c1:7a:3d: 76:23:e9:f3:d6:9e:76:dd:28:50:86:bd:5b:d0:be:63:0b:57: 7d:d7:d6:e5:b2:54:c5:a4:c8:c6:55:30:53:51:91:c4:77:88: 04:5d:96:83:01:0a:0b:34:b9:4b:d7:00:5f:d5:8c:d1:69:54: 95:2a:b8:be:1a:4c:93:a6:45:84:9f:e7:95:29:5e:a5:87:b8: 3f:7c:8b:06:ae:91:cb:2e:6e:84:af:34:c4:70:ec:7b:73:56: 24:bd:3b:23:f2:2b:c3:5e:7a:9c:39:8d:4b:7d:a3:16:76:bb: 46:e5:92:71:ed:79:de:78:c7:d7:14:d2:0c:cd:bc:dc:b7:3f: ae:fc:9e:ee:c8:a4:a1:f0:f8:08:75:24:7a:83:d2:1f:89:b3: eb:df:6f:9d:a5:74:c1:66:9a:95:1b:e3:90:bd:76:93:91:c2: c2:ff:8d:43 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUWrJm7dIAKbGFN2qFH6HfXtwYON4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTEyMDUxMzM0NTRaFw0yNTEyMDYxNjQ0NTRaMDMxMTAvBgNV BAMTKDMxMjExNzBFOTQ0OUQ2N0M4N0I3N0Q0MEM5NzFGOUYwMjAxRTFEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EUtKAFYEOQZttvANvAI+/zjQ cmiyOhriNPDYZzOEcv/TeIxWvRJeZSMrG4RGH2C/qWEXZlEBIvKRwVcPP5RgWAU1 NqjpMFRxBgiV2E8cl3L/mBFVltME64qETV5D7QOiU4mZNMZB5T57cjxu7aF597oi m0+eXUSj5SvCLlGW2Pbs7dJrVNgJ0swPdVTA5TiDDo5ddNEkHqFtMSYAWjSe5I65 nfBXh7AD2oCtsv0UDl06es/F02jqqmFQiLxOYST4ttj7k7y44OGQWMbECZ+S4oMo 06BcgfFZ07IXgc4VgNdIshq1R0lyuCKmm943U7ArAswtaUF64DrMHumfruyPAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUMSEXDpRJ1nyHt31AyXH58CAeHcUwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIzylEfeAZAU3l8g +k2sXlp85bZV/7V0PCcsXkkW4XrAj/kUX799Xx9xW75wrvr4TYg5ErNHK+yoL1nP 6I4OljTttHAwAAXxFURmYQ4Exmjvnth1j8B1/cF6PXYj6fPWnnbdKFCGvVvQvmML V33X1uWyVMWkyMZVMFNRkcR3iARdloMBCgs0uUvXAF/VjNFpVJUquL4aTJOmRYSf 55UpXqWHuD98iwaukcsuboSvNMRw7HtzViS9OyPyK8Neepw5jUt9oxZ2u0blknHt ed54x9cU0gzNvNy3P678nu7IpKHw+Ah1JHqD0h+Js+vfb52ldMFmmpUb45C9dpOR wsL/jUM= -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:34 2025 by rpki-client