This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier: Eetai7CAwXJzDNkyHRQiY4rtozZPiChTabF54LyszUs=
Subject key identifier: 24:28:0A:A1:6A:6B:36:20:80:AE:64:B8:09:A5:9D:54:78:52:2C:9A
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 78FB1196DA20F361506A44C7602E151EB7D5282B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number: 01D0
Signing time: Sat 06 Dec 2025 07:54:54 +0000
Manifest this update: Sat 06 Dec 2025 07:49:54 +0000
Manifest next update: Sun 07 Dec 2025 10:27:54 +0000
Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: ZApo64DMjpEbwfyBk4SMIEsfUsNrMgrJ77bJ5iA+8W8=)
2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
3: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
4: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 10:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:fb:11:96:da:20:f3:61:50:6a:44:c7:60:2e:15:1e:b7:d5:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Dec 6 07:49:54 2025 GMT
Not After : Dec 7 10:27:54 2025 GMT
Subject: CN=24280AA16A6B362080AE64B809A59D5478522C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:00:94:fe:4c:43:07:53:ab:01:7f:35:5f:
28:8e:b0:fb:d9:18:f5:75:44:cc:0f:16:13:25:ca:
0e:4c:a6:2f:6b:d3:bd:1e:bb:b3:a4:37:3a:e5:7b:
f5:60:ba:55:b4:5e:4c:4f:1a:02:1f:aa:fa:41:0d:
5a:18:36:23:01:ae:e4:4d:5e:9c:cd:b3:fb:41:9c:
d1:15:38:fa:05:16:92:4a:f8:dc:b1:21:41:03:e0:
b7:8d:5c:e3:5c:b8:9a:ad:5f:fa:1d:6b:e4:74:a6:
14:9b:db:9a:3b:87:0a:2d:18:2c:92:89:d1:00:db:
28:e4:6b:15:97:7f:2e:21:78:65:32:97:39:28:4b:
cf:92:5e:25:05:eb:1f:19:07:0e:5c:ee:73:6a:e8:
35:69:5c:c3:db:bb:23:a2:0e:0e:34:a6:98:5f:90:
93:24:ac:01:18:1e:89:0b:48:08:55:c7:df:37:06:
45:ff:47:a5:09:e0:f1:4c:ee:05:72:39:1b:18:5f:
27:9b:75:b6:fa:40:d9:ae:bc:30:e4:14:b9:69:bc:
65:b5:6d:f9:b4:45:0b:e0:4b:22:3b:7e:3b:6b:3f:
b8:1a:c0:ad:48:74:46:66:6b:f2:e3:88:9c:fd:f1:
9e:41:2a:9f:ec:5b:8d:a3:5b:43:49:c2:de:93:33:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:0A:A1:6A:6B:36:20:80:AE:64:B8:09:A5:9D:54:78:52:2C:9A
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:2e:dd:71:5c:cc:6f:3d:78:3b:44:e6:d2:54:3b:18:d6:
db:5c:23:5b:f6:88:5b:5b:04:84:72:58:5f:44:eb:c7:f7:6c:
ec:6a:3c:d7:1c:7c:25:c9:d6:38:73:0e:ed:f3:d7:94:cf:30:
1b:6f:54:ed:d0:72:82:ba:9a:8e:4d:9c:0f:45:81:c2:a2:67:
19:38:d8:e4:e7:46:dc:ae:d7:6e:b2:e7:e9:4a:d8:f9:24:ea:
3a:9e:ce:3e:4d:ce:82:46:cb:aa:1a:a9:4a:b0:d7:0b:ec:10:
81:f1:e6:be:c1:44:ed:75:6c:3d:cf:ad:69:54:9c:90:51:7c:
e5:00:92:6e:4e:bf:a1:c1:df:3d:64:5a:0c:f0:a5:2e:8b:47:
3c:39:22:62:43:7b:95:4f:11:3b:ca:95:48:f0:76:48:16:d8:
57:05:26:6b:77:13:d1:5a:8b:b6:8c:5d:a3:cc:a9:93:e1:4a:
8d:7f:9e:f8:ac:10:51:fc:bb:89:7a:15:25:8f:30:a5:4a:c2:
11:a0:4d:0b:b4:db:c5:4d:30:e5:84:64:ac:05:8e:88:d7:4b:
8e:28:90:f9:18:b7:6b:a8:d8:3f:49:50:05:6d:b9:b5:4b:80:
12:8b:72:9b:2f:ee:87:e4:56:bd:13:d3:1d:5b:34:30:7d:c5:
3e:14:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:59 2025 by rpki-client