This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: Hf1JRKr9ypGLN4cFS8CrNT9tTlS/m/Y8CmxZGccgNXk= Subject key identifier: 49:4B:C8:10:D1:A3:DF:31:E0:BF:50:60:CF:AA:CA:3C:D6:0E:3A:5E Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 34C223CA78EA9FC8223BB23F0F7E31932826FCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 021A Signing time: Sun 25 Jan 2026 17:54:29 +0000 Manifest this update: Sun 25 Jan 2026 17:49:29 +0000 Manifest next update: Mon 26 Jan 2026 19:46:29 +0000 Files and hashes: 1: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) 2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: a/aK7AocoFblHtAMw2ZDrcyG449S6b2xIZOcbeJo1YY=) 3: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 6: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c2:23:ca:78:ea:9f:c8:22:3b:b2:3f:0f:7e:31:93:28:26:fc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Jan 25 17:49:29 2026 GMT Not After : Jan 26 19:46:29 2026 GMT Subject: CN=494BC810D1A3DF31E0BF5060CFAACA3CD60E3A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:85:9b:b8:24:fa:01:f4:ba:cd:42:dd:15: 96:a6:11:44:fa:f9:e2:79:b4:30:66:a3:a7:6e:84: 35:70:70:5a:fd:f7:54:32:51:47:5a:f3:25:54:42: bc:47:4d:59:cf:21:e4:26:34:ab:c2:25:96:82:13: b3:7a:a2:25:db:b1:c3:45:b2:54:8f:ce:ae:7e:a3: 5e:f8:34:82:87:12:ec:d2:96:c3:f8:6b:86:6f:8a: c1:0f:62:56:6f:66:c9:a7:ed:60:0f:1a:36:c5:82: d4:ca:2e:7f:fa:1e:c8:fa:11:3a:d0:c2:99:73:b9: f1:1c:4f:b9:55:4c:19:39:39:93:bc:19:27:02:36: e5:80:e5:db:57:8c:68:20:32:7b:21:aa:7a:8c:fa: f7:e4:fb:c1:98:95:93:ef:55:fd:75:3b:3b:f8:f5: 82:86:ad:21:44:e8:7b:39:7e:ee:50:8e:2c:5a:eb: ba:09:a8:4d:a8:2b:a6:bc:b3:b9:b6:77:60:67:1a: b7:2f:90:d7:9d:5c:dc:ed:52:6f:9b:a8:13:bb:eb: 84:41:58:10:84:f0:5f:b5:46:83:ee:cd:ba:08:50: c5:72:52:ec:9f:83:b8:16:97:d6:db:21:8b:16:a9: 14:d1:65:fd:72:bf:9e:97:b4:48:b0:9b:42:d9:0f: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:C8:10:D1:A3:DF:31:E0:BF:50:60:CF:AA:CA:3C:D6:0E:3A:5E X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8b:c3:eb:c9:c2:7b:d9:f2:a2:e4:34:df:90:67:a8:33:54: 2a:9e:c2:1e:48:d2:50:3b:93:dd:ce:ad:00:73:97:d2:f2:87: b6:a2:65:67:1c:fb:d3:a9:3e:23:e6:d9:08:fc:6b:4b:99:fc: 4e:2b:ac:30:60:1a:74:89:b8:7d:f4:e1:1d:49:50:f8:61:a2: c1:2a:01:59:e0:0f:05:66:e6:bc:6f:59:04:2f:57:e9:2b:0c: 54:f6:69:26:29:61:14:32:e5:0b:2d:a4:0b:54:6e:cc:7b:a6: be:20:03:c6:7d:bb:df:b2:83:03:ab:a2:09:86:68:b8:4b:96: 7c:d3:2b:54:d8:49:7b:fb:38:86:e3:d8:97:4e:65:c4:88:d4: c5:18:d0:a9:cf:f3:bf:6b:3d:16:99:55:c2:a1:71:68:a0:8b: f6:15:d6:20:c5:4e:60:03:28:7b:07:7e:ee:5d:ac:57:ec:9e: 0e:63:39:f0:4f:d7:51:3b:53:5c:82:92:44:cd:0d:cd:0a:bb: f4:81:c8:1c:f5:d7:d6:a2:df:f2:2b:d9:54:c7:6d:f1:a6:d5: 9f:ca:da:2b:ed:73:df:13:78:c9:fb:c1:67:0b:28:67:c4:82: fb:19:3f:a1:8e:0d:02:94:ef:be:11:9c:9b:c7:67:df:4e:fd: 6b:91:77:f3 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUNMIjynjqn8giO7I/D34xkygm/NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjAxMjUxNzQ5MjlaFw0yNjAxMjYxOTQ2MjlaMDMxMTAvBgNV BAMTKDQ5NEJDODEwRDFBM0RGMzFFMEJGNTA2MENGQUFDQTNDRDYwRTNBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHYWbuCT6AfS6zULdFZamEUT6 +eJ5tDBmo6duhDVwcFr991QyUUda8yVUQrxHTVnPIeQmNKvCJZaCE7N6oiXbscNF slSPzq5+o174NIKHEuzSlsP4a4ZvisEPYlZvZsmn7WAPGjbFgtTKLn/6Hsj6ETrQ wplzufEcT7lVTBk5OZO8GScCNuWA5dtXjGggMnshqnqM+vfk+8GYlZPvVf11Ozv4 9YKGrSFE6Hs5fu5Qjixa67oJqE2oK6a8s7m2d2BnGrcvkNedXNztUm+bqBO764RB WBCE8F+1RoPuzboIUMVyUuyfg7gWl9bbIYsWqRTRZf1yv56XtEiwm0LZD3yLAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUSUvIENGj3zHgv1Bgz6rKPNYOOl4wHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGKLw+vJwnvZ8qLk NN+QZ6gzVCqewh5I0lA7k93OrQBzl9Lyh7aiZWcc+9OpPiPm2Qj8a0uZ/E4rrDBg GnSJuH304R1JUPhhosEqAVngDwVm5rxvWQQvV+krDFT2aSYpYRQy5QstpAtUbsx7 pr4gA8Z9u9+ygwOrogmGaLhLlnzTK1TYSXv7OIbj2JdOZcSI1MUY0KnP879rPRaZ VcKhcWigi/YV1iDFTmADKHsHfu5drFfsng5jOfBP11E7U1yCkkTNDc0Ku/SByBz1 19ai3/Ir2VTHbfGm1Z/K2ivtc98TeMn7wWcLKGfEgvsZP6GODQKU774RnJvHZ99O /WuRd/M= -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:59 2026 by rpki-client