This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          9NbzSJD5XmIhTPjerxcbM0YoH6NUkiwxyeGQb4yddlQ=
Subject key identifier:   FE:3E:D7:31:25:DF:87:32:44:28:7A:82:B2:BA:6A:B4:B7:71:A3:AD
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       614952B667F0C7A8A5AC9C3967BFF9761FE133A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          016B
Signing time:             Mon 02 Feb 2026 04:45:18 +0000
Manifest this update:     Mon 02 Feb 2026 04:40:18 +0000
Manifest next update:     Tue 03 Feb 2026 07:09:18 +0000
Files and hashes:         1: AS47778.asa (hash: pm76RAYUSgVvzOciFGM+mDlVbD0gNLIYn8GqGFb+9t8=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: wvX4uU5t3ge/IthaWmbsAdiJhyFGcW974/wicz95JH8=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:52:b6:67:f0:c7:a8:a5:ac:9c:39:67:bf:f9:76:1f:e1:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Feb  2 04:40:18 2026 GMT
            Not After : Feb  3 07:09:18 2026 GMT
        Subject: CN=FE3ED73125DF873244287A82B2BA6AB4B771A3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:db:fd:67:e4:88:90:07:bc:bd:be:13:43:
                    be:26:25:26:48:88:20:c1:05:ca:94:83:48:c5:ff:
                    4f:b0:64:a6:51:56:af:62:97:72:02:50:a1:a3:97:
                    72:0e:46:88:3e:55:59:5f:31:6a:d4:d7:c8:93:79:
                    52:a5:cf:e3:91:75:39:c3:79:87:35:73:0c:9b:f9:
                    fa:1a:ea:6a:9e:f5:b2:3c:eb:e4:38:b2:9c:2d:c6:
                    5c:0f:40:83:b7:58:9e:6b:34:c6:1b:41:a4:a1:8f:
                    c1:70:6e:56:84:ba:63:ec:16:e6:09:ab:54:c4:b7:
                    e1:46:91:6c:44:73:18:9e:04:24:ab:7d:09:b4:57:
                    e8:61:f9:3b:60:5e:2e:c6:9d:48:a7:8e:0b:50:dd:
                    e5:7c:b2:b2:29:28:9e:a8:c7:06:12:a7:e8:58:7f:
                    6c:20:4d:07:6d:6f:7f:9a:c3:1a:76:2c:8d:37:7f:
                    d8:ae:6d:8e:3f:68:1f:fd:2e:ed:d3:cc:09:38:7b:
                    c1:cf:c5:88:b8:c2:4e:14:b4:84:76:1f:3b:cc:9c:
                    60:7f:c6:2f:9c:fb:e4:a1:e8:d7:86:7c:78:5e:16:
                    94:93:03:4a:a3:9d:29:01:01:74:83:45:32:ca:63:
                    ba:51:da:22:ce:07:3d:e2:ee:6a:ec:c6:db:93:7c:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:D7:31:25:DF:87:32:44:28:7A:82:B2:BA:6A:B4:B7:71:A3:AD
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:76:03:98:e8:8d:90:54:ba:b7:c0:21:c9:c3:38:79:36:12:
         7e:c7:2b:87:d3:0a:47:58:b4:29:02:06:90:48:22:23:c5:78:
         b4:9d:28:dd:cf:ed:62:e5:14:17:7c:ca:5d:72:0c:6c:ac:9f:
         7b:28:b2:ef:fe:71:d9:a0:32:f1:f9:1e:6d:72:83:4f:2a:1f:
         ba:66:6b:16:95:4b:58:f3:19:f3:95:58:ee:08:29:b3:9f:22:
         73:02:4a:b2:5a:0f:aa:8a:52:6a:d5:4e:92:91:47:c7:48:fd:
         d7:00:9e:8f:c3:5d:93:a6:7b:53:dd:52:36:77:b9:9e:10:d0:
         b3:4e:bc:64:b5:4b:44:8e:dd:ca:6c:ef:91:47:17:93:98:6c:
         43:30:6f:b9:97:3e:d3:24:03:61:42:c9:c3:a0:57:c1:9b:ff:
         d0:df:64:39:27:00:69:13:f2:39:da:8a:32:1b:8a:67:68:a2:
         85:26:32:9c:4a:a1:95:77:90:79:a5:42:d3:93:a6:4e:91:b8:
         1d:bd:8e:3b:bd:ca:5c:b7:e4:bc:bc:e7:85:27:bb:9a:b7:0d:
         45:00:5e:77:e3:2e:6c:94:47:33:89:cd:e9:36:e4:20:98:62:
         8f:d7:f2:61:ea:da:d2:18:21:8b:46:3b:ef:84:5c:76:ab:c2:
         33:c2:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:22 2026 by rpki-client