This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json) Hash identifier: 7dm/8VORztGGuNEv5Yxo2BGMf2bYTi6NV6iFIvxOm/I= Subject key identifier: F3:6C:BE:08:AE:4B:66:6B:39:E8:C6:0C:7F:13:87:66:56:EB:95:EA Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Certificate serial: 019B3EA3588FD2FD9555584712E60343E2A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft Manifest number: 1532 Signing time: Sun 21 Dec 2025 02:00:51 +0000 Manifest this update: Sun 21 Dec 2025 02:00:51 +0000 Manifest next update: Mon 22 Dec 2025 02:00:51 +0000 Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: RKp90jUXjDF6XxpG/G39AESA5pAiB4h4DcrABG33FGI=) 2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:58:8f:d2:fd:95:55:58:47:12:e6:03:43:e2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Validity Not Before: Dec 21 02:00:51 2025 GMT Not After : Dec 22 02:00:51 2025 GMT Subject: CN=f36cbe08ae4b666b39e8c60c7f13876656eb95ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:02:87:a4:9b:83:56:66:99:9c:98:42:99: 5f:2e:7a:ca:ad:07:7b:97:6e:5b:1e:c7:46:3b:82: 7a:f9:46:6d:34:98:c8:6e:6a:68:73:6d:2b:97:bb: c0:bd:0a:a6:10:8f:c0:b6:b9:91:21:50:a9:de:d9: 6f:12:d1:47:18:f9:9e:e0:3a:60:d8:70:1d:7d:c6: 39:10:b2:a5:33:a5:b7:c3:57:f9:3f:79:f6:ab:e2: 0b:23:02:40:c9:b2:bf:0f:88:2c:47:04:c9:d3:46: da:55:0d:64:6c:97:51:d1:75:94:b1:dd:64:45:9a: 07:2f:a1:1f:d9:a1:80:fc:31:57:1c:f1:a3:cd:88: ba:23:61:03:d6:0c:ab:5e:d3:88:d1:f5:bd:19:ad: 0b:33:5b:2f:f0:c5:d6:93:6c:22:4c:04:a7:e8:85: 51:71:b4:eb:4d:b1:b7:f2:0e:da:6f:df:4a:8a:f9: d3:ca:74:e9:b2:ab:04:71:ea:fb:79:25:fd:53:46: e8:47:27:fb:ea:93:fd:2a:81:1e:d1:37:68:fc:55: d7:8b:e8:7e:c6:55:c2:c0:8e:bd:49:fd:29:2d:1a: 1f:56:bf:36:fd:7c:af:fb:3d:ee:3e:b9:32:ad:07: 36:e3:3f:67:6e:dc:2b:b5:fb:89:72:cb:28:dd:d9: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:BE:08:AE:4B:66:6B:39:E8:C6:0C:7F:13:87:66:56:EB:95:EA X509v3 Authority Key Identifier: keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f7:48:fe:18:aa:ee:a8:93:ec:9c:b6:c1:40:48:fd:b4:fb: e3:d1:02:c4:1c:05:f3:cf:26:96:98:d3:fa:74:99:02:e7:ee: d7:06:1f:6f:e2:fc:3b:ad:8a:d3:7c:2f:b8:36:99:fc:56:06: 47:59:ab:1f:62:8b:d3:df:24:84:7f:a6:0b:25:79:37:d9:99: 8a:47:35:f9:89:50:19:02:e2:53:dd:c9:0e:00:a1:fd:ea:c5: 61:fc:48:54:37:bf:3e:b0:d6:4c:1d:16:ee:33:b5:c5:2d:b0: 5a:05:0d:6e:7c:5d:0a:8f:54:80:fa:4c:94:ef:07:5e:7f:3f: db:fc:35:ea:3c:17:b0:4b:43:90:7b:b6:e6:d1:d5:34:a2:db: b1:99:3a:d4:fd:3a:bc:44:0f:aa:ed:ea:a3:69:c8:0c:6e:04: 96:97:6a:9f:a3:78:e7:a5:cd:f8:94:46:61:9d:e8:e7:f0:a2: 84:14:a5:b2:77:f9:ec:9a:e6:70:22:fb:2c:ab:0c:e3:8a:24: 29:66:10:f3:69:59:ee:bb:db:34:ec:b8:98:e1:a2:2d:fa:96: 78:a9:70:5e:5d:40:63:69:26:ef:2d:79:97:c1:1c:51:a9:c2: b4:93:e1:84:85:65:4e:92:d8:4f:df:f7:c9:94:a3:e9:3e:13: 1b:16:1a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1iP0v2VVVhHEuYDQ+KjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj ZGM5MGMwHhcNMjUxMjIxMDIwMDUxWhcNMjUxMjIyMDIwMDUxWjAzMTEwLwYDVQQD EyhmMzZjYmUwOGFlNGI2NjZiMzllOGM2MGM3ZjEzODc2NjU2ZWI5NWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOYCh6Sbg1ZmmZyYQplfLnrKrQd7 l25bHsdGO4J6+UZtNJjIbmpoc20rl7vAvQqmEI/AtrmRIVCp3tlvEtFHGPme4Dpg 2HAdfcY5ELKlM6W3w1f5P3n2q+ILIwJAybK/D4gsRwTJ00baVQ1kbJdR0XWUsd1k RZoHL6Ef2aGA/DFXHPGjzYi6I2ED1gyrXtOI0fW9Ga0LM1sv8MXWk2wiTASn6IVR cbTrTbG38g7ab99KivnTynTpsqsEcer7eSX9U0boRyf76pP9KoEe0Tdo/FXXi+h+ xlXCwI69Sf0pLRofVr82/Xyv+z3uPrkyrQc24z9nbtwrtfuJcsso3dlsbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNsvgiuS2ZrOejGDH8Th2ZW65XqMB8GA1UdIwQY MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0 LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/dI/hiq 7qiT7Jy2wUBI/bT749ECxBwF888mlpjT+nSZAufu1wYfb+L8O62K03wvuDaZ/FYG R1mrH2KL098khH+mCyV5N9mZikc1+YlQGQLiU93JDgCh/erFYfxIVDe/PrDWTB0W 7jO1xS2wWgUNbnxdCo9UgPpMlO8HXn8/2/w16jwXsEtDkHu25tHVNKLbsZk61P06 vEQPqu3qo2nIDG4Elpdqn6N456XN+JRGYZ3o5/CihBSlsnf57JrmcCL7LKsM44ok KWYQ82lZ7rvbNOy4mOGiLfqWeKlwXl1AY2km7y15l8EcUanCtJPhhIVlTpLYT9/3 yZSj6T4TGxYarw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:21:51 2025 by rpki-client