This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json) Hash identifier: HcjfWTD2xhLCiQGOUIkxoXz/Pfhga8pkh2jZgKWaJ0I= Subject key identifier: 99:EA:CF:BF:E3:E6:7A:AC:C6:95:FE:0C:18:66:DA:59:B1:B2:7E:78 Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Certificate serial: 019B3AC6931EA9B59A505222D65142950DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft Manifest number: 1530 Signing time: Sat 20 Dec 2025 08:00:50 +0000 Manifest this update: Sat 20 Dec 2025 08:00:50 +0000 Manifest next update: Sun 21 Dec 2025 08:00:50 +0000 Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: CAIap4p41PXnlSSYPSmYbevcYUY9HxhJDiFHAWq6asc=) 2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:93:1e:a9:b5:9a:50:52:22:d6:51:42:95:0d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Validity Not Before: Dec 20 08:00:50 2025 GMT Not After : Dec 21 08:00:50 2025 GMT Subject: CN=99eacfbfe3e67aacc695fe0c1866da59b1b27e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:ff:9d:25:ef:31:b9:1b:e4:97:b5:b7:76: 6a:97:51:53:03:72:17:7e:8c:90:3d:60:3e:f1:f6: e3:59:14:01:de:a2:47:f6:71:1a:19:48:39:cf:23: 07:8a:88:0f:90:de:97:86:94:b7:49:20:b4:44:91: fd:77:c2:30:b4:d9:65:1a:94:dc:ac:34:5f:4e:b2: 02:69:6e:5a:62:2a:c7:52:a1:93:9f:af:28:22:25: 80:9f:aa:7c:c2:e2:0d:15:78:78:3e:25:3d:a5:0a: 82:2f:c8:99:26:61:97:fb:f3:a9:eb:f2:61:5f:2a: 42:10:f3:8a:13:92:80:77:39:9f:c6:58:f3:44:a9: 49:90:a9:86:9a:fc:bd:51:99:c5:a9:33:5c:ef:4c: fc:8f:97:cf:79:69:78:5e:36:cb:b9:2b:27:5b:a3: eb:bc:7a:8f:d0:c5:0e:93:2d:29:2c:57:2e:f0:d0: 13:60:9f:f1:53:41:61:3e:4f:b6:c0:f2:ca:c0:a6: f3:e7:b4:be:ca:94:6e:30:f9:b6:60:04:aa:cc:b0: 64:0f:42:e2:da:75:52:3e:05:32:8c:85:4d:7f:03: f0:71:0f:83:70:db:82:1b:04:a7:c0:e2:77:34:19: 83:3d:e5:2f:e5:ad:6c:78:d2:b6:04:a1:92:89:9d: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:CF:BF:E3:E6:7A:AC:C6:95:FE:0C:18:66:DA:59:B1:B2:7E:78 X509v3 Authority Key Identifier: keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b1:f7:81:88:30:3c:f5:dd:fd:82:3a:fb:47:17:38:44:fe: 4d:ca:4b:0a:11:b4:a4:81:2c:1c:be:4d:ab:4c:7a:d7:61:2e: de:56:39:57:9a:af:4e:c5:76:07:24:78:bd:ea:de:29:d0:b2: 3f:1e:39:3a:da:cf:c2:a8:b9:f9:c5:2d:64:7d:1f:35:d6:98: e6:f7:19:a5:17:42:bc:f3:24:f3:43:13:57:48:d7:69:a3:95: f1:05:08:14:78:d8:2b:89:89:1e:a3:1d:39:c1:6b:a6:18:49: 25:58:c9:98:b5:5b:ad:f9:29:05:f0:15:12:96:92:dd:73:8b: db:ca:4b:ef:2a:af:8f:a7:cd:d4:1a:52:4a:9e:18:e5:a0:39: 9a:75:a4:07:ef:13:ff:61:e1:02:9d:7c:43:45:f9:fc:4f:60: 69:27:e6:8a:9c:c3:2d:ca:71:7e:7a:15:4f:e0:70:0c:03:e7: 6c:c1:5b:3f:66:34:cb:3f:31:67:a3:5e:87:32:80:fe:fd:16: f9:01:f0:be:bb:23:fb:26:ab:fc:31:4b:91:36:71:9a:d8:6f: 55:54:cf:db:cf:f8:6c:73:bb:3a:1c:8a:16:a8:a3:65:5d:af: 38:b3:5b:fa:e9:9b:e1:ba:96:ba:d0:e0:81:21:e9:07:3e:8a: 75:26:c5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xpMeqbWaUFIi1lFClQ2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj ZGM5MGMwHhcNMjUxMjIwMDgwMDUwWhcNMjUxMjIxMDgwMDUwWjAzMTEwLwYDVQQD Eyg5OWVhY2ZiZmUzZTY3YWFjYzY5NWZlMGMxODY2ZGE1OWIxYjI3ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbL/nSXvMbkb5Je1t3Zql1FTA3IX foyQPWA+8fbjWRQB3qJH9nEaGUg5zyMHiogPkN6XhpS3SSC0RJH9d8IwtNllGpTc rDRfTrICaW5aYirHUqGTn68oIiWAn6p8wuINFXh4PiU9pQqCL8iZJmGX+/Op6/Jh XypCEPOKE5KAdzmfxljzRKlJkKmGmvy9UZnFqTNc70z8j5fPeWl4XjbLuSsnW6Pr vHqP0MUOky0pLFcu8NATYJ/xU0FhPk+2wPLKwKbz57S+ypRuMPm2YASqzLBkD0Li 2nVSPgUyjIVNfwPwcQ+DcNuCGwSnwOJ3NBmDPeUv5a1seNK2BKGSiZ1CMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnqz7/j5nqsxpX+DBhm2lmxsn54MB8GA1UdIwQY MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0 LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrH3gYgw PPXd/YI6+0cXOET+TcpLChG0pIEsHL5Nq0x612Eu3lY5V5qvTsV2ByR4vereKdCy Px45OtrPwqi5+cUtZH0fNdaY5vcZpRdCvPMk80MTV0jXaaOV8QUIFHjYK4mJHqMd OcFrphhJJVjJmLVbrfkpBfAVEpaS3XOL28pL7yqvj6fN1BpSSp4Y5aA5mnWkB+8T /2HhAp18Q0X5/E9gaSfmipzDLcpxfnoVT+BwDAPnbMFbP2Y0yz8xZ6NehzKA/v0W +QHwvrsj+yar/DFLkTZxmthvVVTP28/4bHO7OhyKFqijZV2vOLNb+umb4bqWutDg gSHpBz6KdSbFtw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:40 2025 by rpki-client