This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          U9A9ZvwrWOcisEyrOuGKL9HJdXZsqmlEUjvFzgXMVtE=
Subject key identifier:   AB:FE:18:A2:7F:65:7E:61:1F:C1:0D:D5:22:87:54:7B:CB:61:FD:5E
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       0DDE83780B1A40B9E0F1EBFE7AE57D682E679A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          F7
Signing time:             Sat 20 Dec 2025 14:50:16 +0000
Manifest this update:     Sat 20 Dec 2025 14:45:16 +0000
Manifest next update:     Sun 21 Dec 2025 18:15:16 +0000
Files and hashes:         1: AS47778.asa (hash: 78m/YMd0iziq5ekw99nuLI71Wd4c+iQzn5EiUkYPa+8=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: wvJawOfrp3p+3/BWq9g+6gv50LHtly15x5uGJrAML2I=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:83:78:0b:1a:40:b9:e0:f1:eb:fe:7a:e5:7d:68:2e:67:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Dec 20 14:45:16 2025 GMT
            Not After : Dec 21 18:15:16 2025 GMT
        Subject: CN=ABFE18A27F657E611FC10DD52287547BCB61FD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:76:34:2b:10:4e:6b:e6:6d:75:cd:dc:e7:
                    0d:eb:17:a8:fb:67:a7:2f:6d:8d:20:07:e5:a4:65:
                    6a:0a:02:95:32:16:63:c3:da:9c:b3:52:da:e9:00:
                    c7:fc:92:d1:6a:6f:78:d9:99:b0:41:14:d6:6d:59:
                    c4:4d:be:23:fd:4b:72:1c:1a:64:a7:d2:3f:3a:16:
                    98:81:46:9f:64:db:a9:d1:dc:2a:66:61:c3:e9:14:
                    e2:41:34:f4:f1:16:31:d7:24:8b:02:fb:9a:68:90:
                    94:28:45:55:ca:92:6d:ec:19:23:68:f0:00:de:1b:
                    2d:de:83:d5:ba:b2:78:81:d8:75:52:bd:52:61:70:
                    21:11:30:b5:74:b3:9a:c0:a5:a2:af:ac:df:15:9e:
                    8f:89:c7:7d:68:94:7f:35:dc:ec:e8:82:c1:d3:60:
                    5c:0a:42:5c:75:d8:e3:80:4b:3f:11:f4:79:d0:b2:
                    cb:63:80:45:b1:ce:02:9b:72:b0:4e:49:da:c6:cf:
                    24:2d:39:9d:cb:12:82:e1:40:5e:78:0b:17:7d:81:
                    23:45:12:5b:b7:6b:69:1b:1d:d5:da:f7:ec:64:63:
                    d1:33:bc:5b:87:9a:50:7c:65:b7:2b:e5:85:b9:92:
                    c4:5e:bf:31:28:0c:17:91:bf:23:2d:93:0b:2f:63:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FE:18:A2:7F:65:7E:61:1F:C1:0D:D5:22:87:54:7B:CB:61:FD:5E
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:8a:fa:e2:3d:66:e6:54:65:dc:6f:6e:b7:a1:e1:9b:6e:
         2d:c6:a8:bb:02:00:2a:ef:03:9b:eb:2a:3c:7c:73:9c:d6:d9:
         5d:79:01:d5:29:f5:d3:4e:35:31:d0:40:e7:a2:57:e4:09:cb:
         de:47:6e:0f:d3:bf:5d:41:ff:d7:e4:bc:9e:2c:27:75:b7:5e:
         9e:48:42:fd:e5:15:63:c5:a8:8d:8e:3d:68:8e:a2:bd:4d:93:
         b2:98:83:d5:c1:c5:8f:c4:37:9c:f5:7f:ad:9c:c3:ce:19:27:
         14:24:c0:7d:f7:08:d9:38:8e:56:ce:bd:f4:9b:72:93:5d:4c:
         f0:73:86:ff:3c:cc:d1:6a:aa:59:32:44:2c:82:42:76:f5:83:
         fc:a5:03:bc:64:4d:e3:3d:04:7e:00:fb:2b:ac:a5:e3:0c:8d:
         24:ab:26:44:bc:40:d1:1b:26:e3:82:c6:7f:fa:8b:e8:88:ee:
         59:83:87:1a:a1:3f:2d:f5:fb:db:13:21:74:e4:d6:55:d3:fb:
         e4:38:a3:fa:ea:0f:ce:a4:fd:e5:65:c3:7a:f5:5b:d2:b3:f9:
         0a:5f:15:2e:42:69:08:b6:ae:f0:94:27:41:9c:79:f4:25:47:
         75:8e:d5:86:db:c9:2f:64:24:a2:a0:25:8e:d7:37:af:2c:a2:
         9e:e5:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:05:25 2025 by rpki-client