This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          Rkha4hG7VG/VU8cSLi3qodMKxqBobQNC5Cq+dmFCIOU=
Subject key identifier:   C3:41:B9:E1:F6:77:AF:F3:B1:DD:D1:F3:AB:20:18:3D:FE:EF:A8:C1
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       10305FCBE80A1952888E4241B4A361B834AFA107
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          3B
Signing time:             Sun 25 Jan 2026 00:34:29 +0000
Manifest this update:     Sun 25 Jan 2026 00:29:29 +0000
Manifest next update:     Mon 26 Jan 2026 01:36:29 +0000
Files and hashes:         1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: oQAQib7rDjpvc6ZBnIKcCC5iOHeuQoTszYyqhD5sApY=)
                          2: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
                          3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:30:5f:cb:e8:0a:19:52:88:8e:42:41:b4:a3:61:b8:34:af:a1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jan 25 00:29:29 2026 GMT
            Not After : Jan 26 01:36:29 2026 GMT
        Subject: CN=C341B9E1F677AFF3B1DDD1F3AB20183DFEEFA8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:71:c8:b1:c5:1a:ef:08:7c:58:ac:28:94:
                    dd:18:c1:d3:c8:06:2b:8f:58:fc:f5:c8:de:34:e3:
                    5b:97:f7:73:46:62:12:c4:a3:30:d5:67:1a:44:9a:
                    b0:b8:43:21:72:e4:27:d4:6c:3e:6c:9a:63:71:9a:
                    d1:13:46:0d:e5:f0:da:e4:de:d6:1d:83:26:f6:e9:
                    62:7e:dd:c1:06:f8:cf:59:21:fd:64:7c:57:96:46:
                    bb:d4:3a:45:4f:2c:0d:ea:a3:5d:3f:b7:09:94:47:
                    6f:09:5d:2e:c1:fd:dd:64:94:a8:95:3d:e3:f2:a6:
                    8c:bd:d6:03:0b:e9:d1:8b:e6:f6:7d:f1:94:6a:7c:
                    7c:13:81:a6:45:76:3e:ad:03:e0:b5:b1:23:f2:38:
                    ec:1d:ec:b0:3a:16:0e:6c:ca:73:aa:6e:d1:f0:30:
                    21:2e:86:d5:3b:80:29:22:bb:93:bd:e5:5b:c1:35:
                    07:1a:e3:2e:e1:e8:d0:ce:e7:49:64:44:43:ce:59:
                    be:44:71:e3:d9:da:48:ae:c8:83:d2:f4:c1:e8:7e:
                    fa:62:3e:4c:5f:fe:dc:0e:22:ac:97:00:da:a3:52:
                    16:f7:ba:87:46:c0:4e:04:2f:24:47:04:6d:33:56:
                    47:be:56:e2:08:71:7f:69:0b:ee:5b:62:d9:c0:f3:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:41:B9:E1:F6:77:AF:F3:B1:DD:D1:F3:AB:20:18:3D:FE:EF:A8:C1
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:03:d6:88:fc:14:dc:7b:bc:ca:1a:57:0a:11:c1:31:ad:ca:
         99:ea:61:99:05:d8:ce:2f:db:26:7d:f6:b5:d0:79:92:67:f0:
         90:ee:35:2a:a2:0c:15:68:b9:93:fd:3e:68:49:67:c9:03:2a:
         9f:de:54:14:be:3c:91:c2:5d:16:ae:26:4b:28:96:8f:84:d2:
         3a:5e:ae:34:f8:92:39:ac:32:8f:02:36:9d:7a:09:47:35:fa:
         31:99:5f:d6:c4:e1:0c:42:d0:4c:66:c7:86:ae:20:a1:89:ba:
         ee:7c:b2:4c:e0:0f:74:50:e4:71:ae:0e:48:54:b5:74:30:5b:
         0d:77:2b:ee:f1:2a:3e:cb:78:c6:b3:b8:c7:00:89:e4:ea:99:
         3a:2c:25:f7:76:fe:1f:26:d0:c9:0a:5a:2e:a3:05:b0:93:52:
         13:f4:8c:34:02:c3:9b:57:73:d4:bb:fb:e1:bb:49:07:18:4d:
         a0:10:7d:2d:e6:43:10:c1:dd:f2:12:a6:a6:66:1f:5b:72:41:
         ae:a5:62:60:25:54:59:0a:f7:8a:1f:27:86:56:9a:23:b2:3f:
         b7:a7:c6:76:85:7e:4c:31:f5:4f:3b:4b:6c:c7:eb:44:83:bf:
         4e:d9:08:34:d0:bd:a1:3f:af:61:be:59:bc:53:c3:e9:69:dd:
         14:46:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:34 2026 by rpki-client