This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json) Hash identifier: BTWG0EZ2alaGcYIQEzzqs34ze4/+28NSRP3FP6iwfTY= Subject key identifier: CA:16:2A:E0:9A:EE:AC:C1:10:57:49:D1:E4:3A:77:EC:F3:C0:61:08 Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Certificate serial: 019AF3525A37C6234B6BF31F4DC44442A6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft Manifest number: 150B Signing time: Sat 06 Dec 2025 11:00:51 +0000 Manifest this update: Sat 06 Dec 2025 11:00:51 +0000 Manifest next update: Sun 07 Dec 2025 11:00:51 +0000 Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: DxwscGNNT8gblaC/7jtP+Aqc0gv4zJiAvB+kLAygShM=) 2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:5a:37:c6:23:4b:6b:f3:1f:4d:c4:44:42:a6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c Validity Not Before: Dec 6 11:00:51 2025 GMT Not After : Dec 7 11:00:51 2025 GMT Subject: CN=ca162ae09aeeacc1105749d1e43a77ecf3c06108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:06:9f:dd:39:d8:eb:c2:4f:37:f6:ef:ae: 6c:84:26:24:da:37:3e:b7:c4:f6:90:f3:b7:a1:17: 7a:ea:65:37:52:cb:66:ca:84:62:07:fa:4b:b7:37: 65:a7:ed:73:8c:0f:3e:1c:93:54:69:52:60:f0:48: 41:e8:3a:5e:b9:d0:fb:99:5c:c9:c6:28:68:90:7b: 04:9e:3f:30:3e:d7:e6:ce:2c:a6:5d:2b:9c:56:bd: e3:11:47:94:ce:57:e8:99:cf:54:2e:52:2b:9e:02: e6:fd:71:26:66:52:21:26:9f:55:c4:87:9c:49:79: 82:c6:db:2a:7b:8b:c7:7a:0b:ab:b8:d9:11:63:74: e9:bc:4b:54:c6:ae:5d:f2:3b:47:9c:d4:35:6e:93: 67:8b:66:b9:04:92:4f:70:64:62:57:6a:4c:a1:79: 25:4a:75:b7:33:ab:84:7d:84:89:bb:10:d8:33:89: bd:20:23:ed:a8:3b:65:cd:76:11:26:72:7c:70:1f: 97:4d:7d:aa:b9:f7:77:b9:f9:1c:43:9e:13:0e:36: 2c:17:72:63:d2:15:87:ee:63:70:b7:3c:52:2f:60: ee:27:49:ca:23:bb:f6:84:ef:e1:f8:9d:7b:4d:0f: a4:d5:91:73:3f:67:1a:64:33:6c:51:1a:d6:54:2f: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:2A:E0:9A:EE:AC:C1:10:57:49:D1:E4:3A:77:EC:F3:C0:61:08 X509v3 Authority Key Identifier: keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5f:85:a3:37:08:e8:6d:63:e7:03:0b:9d:a0:52:1a:35:50: 91:7a:11:47:4a:c9:37:c8:95:c1:b3:ff:1a:a5:78:b4:0c:ad: d3:2a:b6:d1:ca:f4:da:93:be:37:d6:be:9a:51:9b:d7:be:8e: cc:17:b3:f8:72:14:4c:42:0a:12:ed:86:65:35:22:e0:0b:f7: 14:f3:11:39:fc:a3:b6:fe:2f:74:8b:b6:d7:d5:23:4f:b9:ea: 80:15:4f:83:48:06:b5:e7:c7:2b:d5:a3:b9:a5:d6:bd:31:62: b6:0d:1c:be:15:f9:93:b6:c9:18:27:9c:c8:24:50:d7:a5:ef: de:83:ba:88:26:bf:66:4f:cb:04:ab:e3:29:30:c4:b3:87:66: 64:89:1d:0b:9b:46:9f:ef:03:02:57:84:c4:3d:2d:7f:48:0e: 54:67:91:70:8a:2b:57:0c:79:6a:22:7a:14:2f:47:03:9f:c4: fe:9d:53:ca:11:fe:c3:b9:9d:8d:66:34:e9:44:37:12:4c:7e: ae:93:c4:42:fb:8d:d3:da:42:6f:49:2d:3a:78:c6:21:6a:25: e8:d0:0e:07:0c:e1:ac:1e:08:30:fb:c1:f8:63:aa:10:b9:63: ee:a4:24:a1:aa:89:f4:d6:7d:09:9c:1e:b6:a4:cf:5e:4c:ba: c7:6a:e9:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlo3xiNLa/MfTcREQqblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj ZGM5MGMwHhcNMjUxMjA2MTEwMDUxWhcNMjUxMjA3MTEwMDUxWjAzMTEwLwYDVQQD EyhjYTE2MmFlMDlhZWVhY2MxMTA1NzQ5ZDFlNDNhNzdlY2YzYzA2MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCsGn9052OvCTzf2765shCYk2jc+ t8T2kPO3oRd66mU3UstmyoRiB/pLtzdlp+1zjA8+HJNUaVJg8EhB6DpeudD7mVzJ xihokHsEnj8wPtfmziymXSucVr3jEUeUzlfomc9ULlIrngLm/XEmZlIhJp9VxIec SXmCxtsqe4vHeguruNkRY3TpvEtUxq5d8jtHnNQ1bpNni2a5BJJPcGRiV2pMoXkl SnW3M6uEfYSJuxDYM4m9ICPtqDtlzXYRJnJ8cB+XTX2qufd3ufkcQ54TDjYsF3Jj 0hWH7mNwtzxSL2DuJ0nKI7v2hO/h+J17TQ+k1ZFzP2caZDNsURrWVC/+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoWKuCa7qzBEFdJ0eQ6d+zzwGEIMB8GA1UdIwQY MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0 LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl+FozcI 6G1j5wMLnaBSGjVQkXoRR0rJN8iVwbP/GqV4tAyt0yq20cr02pO+N9a+mlGb176O zBez+HIUTEIKEu2GZTUi4Av3FPMROfyjtv4vdIu219UjT7nqgBVPg0gGtefHK9Wj uaXWvTFitg0cvhX5k7bJGCecyCRQ16Xv3oO6iCa/Zk/LBKvjKTDEs4dmZIkdC5tG n+8DAleExD0tf0gOVGeRcIorVwx5aiJ6FC9HA5/E/p1TyhH+w7mdjWY06UQ3Ekx+ rpPEQvuN09pCb0ktOnjGIWol6NAOBwzhrB4IMPvB+GOqELlj7qQkoaqJ9NZ9CZwe tqTPXky6x2rpKg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:33 2025 by rpki-client