This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          Eetai7CAwXJzDNkyHRQiY4rtozZPiChTabF54LyszUs=
Subject key identifier:   24:28:0A:A1:6A:6B:36:20:80:AE:64:B8:09:A5:9D:54:78:52:2C:9A
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       78FB1196DA20F361506A44C7602E151EB7D5282B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          01D0
Signing time:             Sat 06 Dec 2025 07:54:54 +0000
Manifest this update:     Sat 06 Dec 2025 07:49:54 +0000
Manifest next update:     Sun 07 Dec 2025 10:27:54 +0000
Files and hashes:         1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: ZApo64DMjpEbwfyBk4SMIEsfUsNrMgrJ77bJ5iA+8W8=)
                          2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
                          3: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
                          4: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fb:11:96:da:20:f3:61:50:6a:44:c7:60:2e:15:1e:b7:d5:28:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Dec  6 07:49:54 2025 GMT
            Not After : Dec  7 10:27:54 2025 GMT
        Subject: CN=24280AA16A6B362080AE64B809A59D5478522C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:00:94:fe:4c:43:07:53:ab:01:7f:35:5f:
                    28:8e:b0:fb:d9:18:f5:75:44:cc:0f:16:13:25:ca:
                    0e:4c:a6:2f:6b:d3:bd:1e:bb:b3:a4:37:3a:e5:7b:
                    f5:60:ba:55:b4:5e:4c:4f:1a:02:1f:aa:fa:41:0d:
                    5a:18:36:23:01:ae:e4:4d:5e:9c:cd:b3:fb:41:9c:
                    d1:15:38:fa:05:16:92:4a:f8:dc:b1:21:41:03:e0:
                    b7:8d:5c:e3:5c:b8:9a:ad:5f:fa:1d:6b:e4:74:a6:
                    14:9b:db:9a:3b:87:0a:2d:18:2c:92:89:d1:00:db:
                    28:e4:6b:15:97:7f:2e:21:78:65:32:97:39:28:4b:
                    cf:92:5e:25:05:eb:1f:19:07:0e:5c:ee:73:6a:e8:
                    35:69:5c:c3:db:bb:23:a2:0e:0e:34:a6:98:5f:90:
                    93:24:ac:01:18:1e:89:0b:48:08:55:c7:df:37:06:
                    45:ff:47:a5:09:e0:f1:4c:ee:05:72:39:1b:18:5f:
                    27:9b:75:b6:fa:40:d9:ae:bc:30:e4:14:b9:69:bc:
                    65:b5:6d:f9:b4:45:0b:e0:4b:22:3b:7e:3b:6b:3f:
                    b8:1a:c0:ad:48:74:46:66:6b:f2:e3:88:9c:fd:f1:
                    9e:41:2a:9f:ec:5b:8d:a3:5b:43:49:c2:de:93:33:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:0A:A1:6A:6B:36:20:80:AE:64:B8:09:A5:9D:54:78:52:2C:9A
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:2e:dd:71:5c:cc:6f:3d:78:3b:44:e6:d2:54:3b:18:d6:
         db:5c:23:5b:f6:88:5b:5b:04:84:72:58:5f:44:eb:c7:f7:6c:
         ec:6a:3c:d7:1c:7c:25:c9:d6:38:73:0e:ed:f3:d7:94:cf:30:
         1b:6f:54:ed:d0:72:82:ba:9a:8e:4d:9c:0f:45:81:c2:a2:67:
         19:38:d8:e4:e7:46:dc:ae:d7:6e:b2:e7:e9:4a:d8:f9:24:ea:
         3a:9e:ce:3e:4d:ce:82:46:cb:aa:1a:a9:4a:b0:d7:0b:ec:10:
         81:f1:e6:be:c1:44:ed:75:6c:3d:cf:ad:69:54:9c:90:51:7c:
         e5:00:92:6e:4e:bf:a1:c1:df:3d:64:5a:0c:f0:a5:2e:8b:47:
         3c:39:22:62:43:7b:95:4f:11:3b:ca:95:48:f0:76:48:16:d8:
         57:05:26:6b:77:13:d1:5a:8b:b6:8c:5d:a3:cc:a9:93:e1:4a:
         8d:7f:9e:f8:ac:10:51:fc:bb:89:7a:15:25:8f:30:a5:4a:c2:
         11:a0:4d:0b:b4:db:c5:4d:30:e5:84:64:ac:05:8e:88:d7:4b:
         8e:28:90:f9:18:b7:6b:a8:d8:3f:49:50:05:6d:b9:b5:4b:80:
         12:8b:72:9b:2f:ee:87:e4:56:bd:13:d3:1d:5b:34:30:7d:c5:
         3e:14:d1:9b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUePsRltog82FQakTHYC4VHrfVKCswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk
Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUxMjA2MDc0OTU0WhcNMjUxMjA3MTAyNzU0
WjAzMTEwLwYDVQQDEygyNDI4MEFBMTZBNkIzNjIwODBBRTY0QjgwOUE1OUQ1NDc4
NTIyQzlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAYAlP5MQwdT
qwF/NV8ojrD72Rj1dUTMDxYTJcoOTKYva9O9HruzpDc65Xv1YLpVtF5MTxoCH6r6
QQ1aGDYjAa7kTV6czbP7QZzRFTj6BRaSSvjcsSFBA+C3jVzjXLiarV/6HWvkdKYU
m9uaO4cKLRgskonRANso5GsVl38uIXhlMpc5KEvPkl4lBesfGQcOXO5zaug1aVzD
27sjog4ONKaYX5CTJKwBGB6JC0gIVcffNwZF/0elCeDxTO4FcjkbGF8nm3W2+kDZ
rrww5BS5abxltW35tEUL4EsiO347az+4GsCtSHRGZmvy44ic/fGeQSqf7FuNo1tD
ScLekzOk2QIDAQABo4ICezCCAncwHQYDVR0OBBYEFCQoCqFqazYggK5kuAmlnVR4
UiyaMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw
NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji
LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct
MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5
OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG
VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy
OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb
TS7dcVzMbz14O0Tm0lQ7GNbbXCNb9ohbWwSEclhfROvH92zsajzXHHwlydY4cw7t
89eUzzAbb1Tt0HKCupqOTZwPRYHComcZONjk50bcrtdusufpStj5JOo6ns4+Tc6C
RsuqGqlKsNcL7BCB8ea+wUTtdWw9z61pVJyQUXzlAJJuTr+hwd89ZFoM8KUui0c8
OSJiQ3uVTxE7ypVI8HZIFthXBSZrdxPRWou2jF2jzKmT4UqNf574rBBR/LuJehUl
jzClSsIRoE0LtNvFTTDlhGSsBY6I10uOKJD5GLdrqNg/SVAFbbm1S4ASi3KbL+6H
5Fa9E9MdWzQwfcU+FNGb
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:59 2025 by rpki-client