This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json) Hash identifier: MXHi0IPOwYVvAEx81i20xvoowboXA6LpJQxSbaIRFUA= Subject key identifier: F6:74:E0:03:B1:1F:C4:C1:12:55:FA:34:17:8F:13:10:66:FB:C0:0F Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Certificate serial: 019B0E5BB74BE73D331172F6B657F817D697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft Manifest number: 1519 Signing time: Thu 11 Dec 2025 17:00:50 +0000 Manifest this update: Thu 11 Dec 2025 17:00:50 +0000 Manifest next update: Fri 12 Dec 2025 17:00:50 +0000 Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: wUPN3x3hIXFyaSk5yOHktVuzHadS6V/8Wu7VrT6b1OM=) 2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b7:4b:e7:3d:33:11:72:f6:b6:57:f8:17:d6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Validity Not Before: Dec 11 17:00:50 2025 GMT Not After : Dec 12 17:00:50 2025 GMT Subject: CN=f674e003b11fc4c11255fa34178f131066fbc00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:9d:b9:1a:f5:50:ea:0c:07:16:df:98:97: 45:5b:9e:55:2f:da:60:9d:f9:00:be:23:02:a9:0e: d3:f0:49:77:1f:25:27:e6:dc:b3:d5:59:b5:93:f9: ec:56:2e:6f:1a:a2:9d:42:50:81:23:3c:cc:0f:18: 37:b2:38:54:ee:40:b7:bc:d5:eb:0b:6c:eb:5e:96: 85:30:0d:2b:6a:e5:ad:0c:ca:6d:8b:9a:79:82:97: 6c:74:a0:a9:86:96:f5:3b:ec:72:8d:8b:8d:8b:3b: e5:c6:88:f5:06:d3:ba:22:aa:97:84:4d:81:55:53: f2:5e:10:ab:84:34:90:ef:4b:2d:a7:d7:2e:b6:1c: 57:85:bd:74:7e:ca:e1:34:63:8c:b6:12:85:93:5f: 01:5c:c6:81:21:ce:a8:ab:94:4d:59:46:bc:7a:c0: 6d:aa:68:f6:26:04:a3:e3:8e:58:b5:52:ca:02:fc: fe:b7:86:1f:c1:53:b6:8e:37:18:f4:e5:de:fa:c6: d6:cd:62:d4:c5:ab:7a:82:cd:5f:3c:3e:01:34:7c: 0a:f6:f7:fd:7e:1b:d7:33:36:18:ea:bf:b9:8c:2a: 5c:06:b7:b3:a5:79:a4:8d:83:3a:73:04:fc:34:01: d5:56:8f:74:e9:2c:18:24:91:d3:52:9e:af:dc:d7: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:74:E0:03:B1:1F:C4:C1:12:55:FA:34:17:8F:13:10:66:FB:C0:0F X509v3 Authority Key Identifier: keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:db:0c:9d:f8:dc:fa:db:ac:9d:0b:54:f5:31:98:36:68:08: fa:7f:98:91:eb:61:35:d6:a0:55:da:01:cb:51:ec:66:8f:81: 43:86:92:7d:a4:22:09:42:e8:32:53:49:da:18:77:b6:8c:0d: e5:cd:b6:94:1a:3d:be:90:d9:f7:3d:34:08:cf:81:94:92:f1: 58:68:da:dc:6b:b8:66:af:45:99:e6:2f:ae:53:3d:f1:2f:e1: df:c3:2b:3b:b0:2c:85:ea:5f:aa:5b:9d:88:ea:3e:3a:47:cc: d5:12:7f:ff:59:6d:13:0c:60:f2:d1:2b:8c:b8:fe:8d:54:b0: 44:8b:53:f8:a4:63:fd:1e:aa:d9:3e:45:4d:59:47:0a:28:97: 9e:36:b5:b4:cf:87:09:3a:95:90:3c:2d:31:aa:25:db:8a:dc: 19:64:32:e7:da:5c:43:f4:cf:d0:35:bb:ae:b3:3d:49:50:92: 8a:22:c6:79:96:5a:81:cf:56:8a:6a:fb:0a:bc:df:ba:65:d0: 76:1e:15:47:48:37:6f:c3:a1:7e:20:9b:6d:cc:ed:d4:ce:f9: 0f:a2:9b:93:62:c7:b5:2a:eb:b5:ae:b9:7a:59:e2:7b:ca:73: f1:43:50:da:7d:78:33:fe:d9:41:13:3b:0f:94:41:2b:8a:dc: 8a:45:7e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7dL5z0zEXL2tlf4F9aXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj ZGM5MGMwHhcNMjUxMjExMTcwMDUwWhcNMjUxMjEyMTcwMDUwWjAzMTEwLwYDVQQD EyhmNjc0ZTAwM2IxMWZjNGMxMTI1NWZhMzQxNzhmMTMxMDY2ZmJjMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF2duRr1UOoMBxbfmJdFW55VL9pg nfkAviMCqQ7T8El3HyUn5tyz1Vm1k/nsVi5vGqKdQlCBIzzMDxg3sjhU7kC3vNXr C2zrXpaFMA0rauWtDMpti5p5gpdsdKCphpb1O+xyjYuNizvlxoj1BtO6IqqXhE2B VVPyXhCrhDSQ70stp9cuthxXhb10fsrhNGOMthKFk18BXMaBIc6oq5RNWUa8esBt qmj2JgSj445YtVLKAvz+t4YfwVO2jjcY9OXe+sbWzWLUxat6gs1fPD4BNHwK9vf9 fhvXMzYY6r+5jCpcBrezpXmkjYM6cwT8NAHVVo906SwYJJHTUp6v3NcvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ04AOxH8TBElX6NBePExBm+8APMB8GA1UdIwQY MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0 LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNsMnfjc +tusnQtU9TGYNmgI+n+YkethNdagVdoBy1HsZo+BQ4aSfaQiCULoMlNJ2hh3towN 5c22lBo9vpDZ9z00CM+BlJLxWGja3Gu4Zq9FmeYvrlM98S/h38MrO7Ashepfqlud iOo+OkfM1RJ//1ltEwxg8tErjLj+jVSwRItT+KRj/R6q2T5FTVlHCiiXnja1tM+H CTqVkDwtMaol24rcGWQy59pcQ/TP0DW7rrM9SVCSiiLGeZZagc9Wimr7CrzfumXQ dh4VR0g3b8OhfiCbbczt1M75D6Kbk2LHtSrrta65elnie8pz8UNQ2n14M/7ZQRM7 D5RBK4rcikV+dQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:26 2025 by rpki-client