This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json) Hash identifier: sFvapPavF7C/Qcc9QQrm6i6P339diTDLyLLig/KGKm4= Subject key identifier: 5D:98:81:D8:14:B7:37:30:ED:C4:44:D6:6D:9E:94:E1:57:04:33:FF Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Certificate serial: 019BF6F567B46346CD891A33A0FBA320C0B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft Manifest number: 1592 Signing time: Sun 25 Jan 2026 21:00:36 +0000 Manifest this update: Sun 25 Jan 2026 21:00:36 +0000 Manifest next update: Mon 26 Jan 2026 21:00:36 +0000 Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: f/SLBB95LJXdKnwyASTKg4CaK4RggUcujBJxEQZGkRI=) 2: IA8useNuoOrWWWwBPykqHsLqh6Y.roa (hash: lquWyou9b2Q0ggtq7A86pgdp3JufuHZ02PUKPrrHbo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:67:b4:63:46:cd:89:1a:33:a0:fb:a3:20:c0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Validity Not Before: Jan 25 21:00:36 2026 GMT Not After : Jan 26 21:00:36 2026 GMT Subject: CN=5d9881d814b73730edc444d66d9e94e1570433ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:82:e7:8f:29:85:f8:99:1f:01:d1:bb:8b: 05:56:55:78:ba:eb:d9:20:19:03:e3:f4:0e:60:b0: aa:24:c6:84:9b:7f:34:7c:86:e0:b4:b2:24:c1:c5: 5c:83:15:3a:70:68:4d:6e:46:e8:4c:a2:7a:5f:63: 8e:db:93:4c:0c:b9:c4:b9:86:7b:d4:ed:ae:90:87: 00:f9:49:d7:b0:34:5c:cb:06:d5:87:69:b6:21:6f: c9:e3:a5:ed:40:58:dc:72:7f:12:41:31:03:40:45: b6:6a:7e:f0:7d:5f:99:a8:13:01:b1:9c:cd:63:eb: b1:19:73:b1:92:b8:9e:72:46:70:dc:d5:97:72:09: 51:98:c2:d9:6a:bd:f3:53:95:fe:57:f3:ba:f6:53: 19:b6:fa:91:b8:bb:de:81:60:66:87:c4:95:0c:5c: b4:52:37:38:cc:03:bf:3f:ca:bd:a4:83:79:ca:ff: f0:b3:c6:48:0c:76:00:83:a1:bd:86:13:90:ea:3d: 37:f5:f8:13:47:66:04:c1:87:bb:2d:b6:ca:d8:92: 9c:20:f1:61:6f:70:41:46:67:42:fa:4a:88:e9:fc: 1d:1a:a3:97:36:0c:6d:e9:bd:42:a4:24:97:fa:46: 4c:c9:4a:47:fc:38:23:3f:dd:03:e3:68:92:e7:12: dd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:98:81:D8:14:B7:37:30:ED:C4:44:D6:6D:9E:94:E1:57:04:33:FF X509v3 Authority Key Identifier: keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d9:92:e4:bc:74:be:a3:34:09:72:5a:7e:d8:82:6d:78:90: ee:e8:6d:62:5a:8e:9d:72:0c:5f:8e:c2:90:62:21:68:2e:b8: e5:bc:24:a4:83:ad:84:76:a0:54:f3:11:ff:a1:fa:ad:e0:5d: 89:79:a7:6f:00:87:cc:3b:e6:cc:04:09:7d:d0:8a:09:c3:60: 68:5a:56:72:44:e7:e1:af:de:58:46:6c:34:55:24:8c:09:a2: ee:1f:08:b3:df:bc:5c:74:18:86:1a:c6:ab:b0:52:ae:be:e5: c1:08:7e:4d:b1:d7:b3:b8:47:11:f7:35:8b:92:97:b9:61:71: e2:cd:f5:33:99:3b:86:90:f9:f4:c8:79:60:dd:07:00:26:84: 1f:ea:d4:01:56:4a:14:73:96:ac:a4:c2:bc:f4:4d:28:ca:8b: 13:2e:57:00:f6:6a:76:ac:1a:1b:65:e0:3c:9b:d9:9e:fd:19: 3b:5a:7d:a4:51:57:7b:7d:2d:da:c6:6f:af:8b:2c:4d:cc:8e: b4:f2:a1:6c:ab:92:a2:a5:8b:64:be:31:76:c6:97:b9:79:1c: d1:d1:68:3f:79:f8:c0:b6:5d:4e:46:d5:a6:76:e2:b8:0a:3e: 31:55:0e:0c:d0:fc:78:bd:63:3c:e7:e0:19:44:9e:d0:13:9f: 99:8b:8f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29We0Y0bNiRozoPujIMC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj ZGM5MGMwHhcNMjYwMTI1MjEwMDM2WhcNMjYwMTI2MjEwMDM2WjAzMTEwLwYDVQQD Eyg1ZDk4ODFkODE0YjczNzMwZWRjNDQ0ZDY2ZDllOTRlMTU3MDQzM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGC548phfiZHwHRu4sFVlV4uuvZ IBkD4/QOYLCqJMaEm380fIbgtLIkwcVcgxU6cGhNbkboTKJ6X2OO25NMDLnEuYZ7 1O2ukIcA+UnXsDRcywbVh2m2IW/J46XtQFjccn8SQTEDQEW2an7wfV+ZqBMBsZzN Y+uxGXOxkrieckZw3NWXcglRmMLZar3zU5X+V/O69lMZtvqRuLvegWBmh8SVDFy0 Ujc4zAO/P8q9pIN5yv/ws8ZIDHYAg6G9hhOQ6j039fgTR2YEwYe7LbbK2JKcIPFh b3BBRmdC+kqI6fwdGqOXNgxt6b1CpCSX+kZMyUpH/DgjP90D42iS5xLdjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2YgdgUtzcw7cRE1m2elOFXBDP/MB8GA1UdIwQY MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0 LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtmS5Lx0 vqM0CXJaftiCbXiQ7uhtYlqOnXIMX47CkGIhaC645bwkpIOthHagVPMR/6H6reBd iXmnbwCHzDvmzAQJfdCKCcNgaFpWckTn4a/eWEZsNFUkjAmi7h8Is9+8XHQYhhrG q7BSrr7lwQh+TbHXs7hHEfc1i5KXuWFx4s31M5k7hpD59Mh5YN0HACaEH+rUAVZK FHOWrKTCvPRNKMqLEy5XAPZqdqwaG2XgPJvZnv0ZO1p9pFFXe30t2sZvr4ssTcyO tPKhbKuSoqWLZL4xdsaXuXkc0dFoP3n4wLZdTkbVpnbiuAo+MVUODND8eL1jPOfg GUSe0BOfmYuPsw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:53 2026 by rpki-client