This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          fC7QbcoZgua2NAiTcBQiDpJnSeQJiEsaes7GJdYvMqY=
Subject key identifier:   57:33:CE:8B:99:0B:9D:DC:59:1C:03:A8:81:F1:78:9B:24:89:38:EE
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       258197DCCD7B5CB01E34C2BAA116915D9DE320FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          D8
Signing time:             Sat 06 Dec 2025 02:06:51 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:51 +0000
Manifest next update:     Sun 07 Dec 2025 02:20:51 +0000
Files and hashes:         1: AS47778.asa (hash: 78m/YMd0iziq5ekw99nuLI71Wd4c+iQzn5EiUkYPa+8=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: Y1oB3udof7sWpRq1UR8NuNaJ/BFOjO3YN4P3rHJeuJU=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:81:97:dc:cd:7b:5c:b0:1e:34:c2:ba:a1:16:91:5d:9d:e3:20:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Dec  6 02:01:51 2025 GMT
            Not After : Dec  7 02:20:51 2025 GMT
        Subject: CN=5733CE8B990B9DDC591C03A881F1789B248938EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:87:e9:c8:28:5b:f0:ec:76:20:b1:5c:96:
                    c7:9c:38:eb:1c:b6:0b:90:e4:32:98:57:8b:28:87:
                    d5:90:6e:c2:6a:86:ce:7c:b9:47:65:e0:cc:f7:bd:
                    37:08:0f:67:a4:82:d1:45:52:c1:22:a4:f7:b8:e4:
                    9a:ca:3c:78:8c:d3:9e:23:9f:50:67:05:e2:85:41:
                    7e:dd:92:38:9a:69:47:a9:73:58:4c:f9:aa:60:23:
                    14:26:f0:54:17:22:ec:65:f9:ce:df:b6:9d:e4:b4:
                    34:12:93:52:98:9f:99:f4:2a:80:ad:20:9b:9e:45:
                    1e:82:00:6d:69:f3:c3:5a:32:f9:31:c7:16:69:bb:
                    29:16:5d:3f:76:37:a4:10:a0:68:67:7b:f8:08:ab:
                    7f:2f:de:cd:f4:81:e1:1a:8e:b8:11:24:db:4f:75:
                    3f:e1:0b:a1:a5:d3:e6:07:5a:d0:a5:91:0c:86:a7:
                    cd:e6:81:76:eb:be:ea:6a:e3:3e:12:ef:4d:09:7f:
                    0f:f9:38:d8:7f:d0:51:42:61:0d:d0:ae:fe:1b:a3:
                    dc:70:c4:6c:52:02:2e:e5:c7:94:ea:8f:5c:4e:16:
                    07:f8:b7:f6:21:97:1d:9c:c9:27:78:7d:12:27:dd:
                    20:c5:8e:94:f1:cd:cc:f9:1e:cd:56:a5:e2:b7:76:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:CE:8B:99:0B:9D:DC:59:1C:03:A8:81:F1:78:9B:24:89:38:EE
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:18:c1:21:b5:8a:8c:dc:a0:60:23:35:92:16:30:19:e4:
         09:27:9a:68:a8:8d:7a:5e:16:36:46:6e:0e:13:39:c5:23:2d:
         c6:32:85:a6:0d:47:67:7b:71:25:08:ab:59:c4:73:e3:bd:49:
         b5:5b:12:4d:2d:26:1d:ef:3b:9e:cb:c8:af:77:31:18:4c:53:
         64:84:5e:6b:90:71:6d:2a:14:f2:22:2e:f4:ac:a4:b1:ce:a1:
         e3:ee:f4:36:d8:61:25:e0:00:db:69:1f:55:75:96:a4:81:a3:
         2d:3e:17:72:bc:ba:c8:26:ca:60:74:dd:a6:bc:86:b6:5e:aa:
         93:aa:59:a8:f9:75:bc:84:3f:9b:9c:bc:85:77:8e:51:b8:22:
         2b:76:93:66:1b:65:3f:eb:68:06:37:82:13:31:bd:15:aa:8a:
         80:8c:ac:a5:bd:37:59:f9:f9:9d:42:48:bd:d5:ca:35:39:64:
         dc:49:11:bf:ec:20:af:da:13:1e:6a:03:32:88:a2:90:65:b9:
         e2:91:10:be:80:05:62:0f:cd:84:f6:99:d4:22:71:07:a3:ad:
         2a:77:dc:60:b5:fa:96:45:df:32:6f:0a:09:5a:45:33:ae:5c:
         8e:4d:f5:70:6f:e5:87:08:1d:de:c3:81:e3:aa:67:c9:d6:4d:
         b8:b6:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:17 2025 by rpki-client