This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier: 7l7zAA7WXtl4GGm52//SMXfyjfG2qPRgiGstaE9Ge6g=
Subject key identifier: 16:7C:88:AD:A5:0C:47:BF:2B:62:A3:03:C2:08:15:6D:A3:06:1F:60
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 14A673DC4C2F9192BAE932F552EA1D91D3A19AD4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number: 021D
Signing time: Sun 25 Jan 2026 21:14:29 +0000
Manifest this update: Sun 25 Jan 2026 21:09:29 +0000
Manifest next update: Mon 26 Jan 2026 23:19:29 +0000
Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
2: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
3: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=)
4: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
5: AS61961.asa (hash: iLqGftgAa/l9AJD5k9PeTss4y/B3ku85dpL4i9/hTt4=)
6: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: 2cY5ty7GS2Wv0Bt4d3CHjkfddaqxkpPgfQ2F1pVb7qE=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 23:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a6:73:dc:4c:2f:91:92:ba:e9:32:f5:52:ea:1d:91:d3:a1:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Jan 25 21:09:29 2026 GMT
Not After : Jan 26 23:19:29 2026 GMT
Subject: CN=167C88ADA50C47BF2B62A303C208156DA3061F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:31:5d:71:16:30:9a:48:8a:f4:5b:e9:f4:
6a:1d:a7:6a:90:fd:d4:33:03:46:8a:b4:01:94:41:
50:0e:53:73:63:ac:35:82:cb:bd:4c:f6:15:1b:b3:
cc:68:8f:56:55:de:66:06:32:03:e2:f4:34:d7:a7:
2e:9f:0f:96:90:6c:4d:2d:18:88:1e:bc:9d:8d:b8:
de:80:3f:b3:47:3e:38:1c:72:7e:a9:5d:a0:23:11:
13:a0:1f:8d:ef:4e:10:0e:31:f3:3f:56:df:d2:97:
dc:9f:4f:91:49:ec:55:1b:32:a3:74:fc:2f:3a:ee:
23:c8:8f:a3:c5:66:f8:36:a8:b4:86:00:71:c6:b5:
91:7b:14:bd:5d:f1:1d:ae:77:f9:93:12:1d:94:97:
df:a6:8e:60:be:e7:90:a1:5e:96:90:79:58:a7:b1:
7d:a1:54:e1:12:35:49:c7:17:89:1c:26:92:fc:e9:
f2:ca:73:e7:a7:e2:ec:ca:e9:ab:97:96:ea:42:4d:
50:c5:70:63:24:64:9a:6c:31:2e:88:41:32:5c:c9:
13:3a:9d:85:ee:08:a9:a8:05:73:e0:64:3f:5f:e3:
28:bd:9b:be:25:f9:11:7b:c3:d7:82:26:d1:aa:2a:
d4:ba:ee:6c:66:ae:17:85:36:47:8d:85:7d:f7:e0:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:88:AD:A5:0C:47:BF:2B:62:A3:03:C2:08:15:6D:A3:06:1F:60
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:76:b0:2b:a5:39:db:17:9a:65:4c:10:95:6c:a6:d8:8e:42:
80:ca:df:87:0e:a6:2e:65:c4:5a:25:5f:ac:74:54:ec:e9:1b:
d7:f4:76:aa:d8:9a:20:fd:3c:76:a2:f0:43:3f:c9:87:e2:1b:
c9:7f:c0:38:cb:4e:a7:94:26:85:d3:64:0b:e1:49:10:41:ca:
33:76:eb:e9:dd:11:80:8a:03:07:97:c6:80:19:31:9d:ed:3d:
6a:5d:cb:f2:51:e0:49:34:c0:11:77:78:24:12:7b:d1:5a:1c:
12:15:6b:87:6e:a4:f5:7a:8a:7d:57:09:1b:de:2b:40:af:f9:
34:5c:7b:80:a8:30:a8:e5:2d:98:27:e0:6e:0c:b7:99:67:30:
83:52:3a:18:13:0d:07:5a:e1:dd:15:fa:b9:88:e0:00:2c:00:
66:fa:b4:f2:25:7f:2e:fe:37:5f:cb:86:78:f2:9a:66:c8:e7:
96:56:82:78:09:a2:c7:2b:b8:b8:c9:83:ff:74:bc:0a:0f:55:
23:32:83:60:d8:d3:30:cf:6a:75:32:51:32:3f:e5:0f:48:b9:
5b:a1:b2:17:03:a3:92:6c:d5:fa:c1:68:1a:11:ce:86:52:f8:
c6:1d:c5:02:4c:6e:9e:5e:12:11:d4:78:a9:ac:7f:5b:e3:a8:
2e:c7:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:31 2026 by rpki-client