This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          hxA+kuA4prOxf9jDHOPWh/r+2bV5MS+VvDZTOn5U++8=
Subject key identifier:   0C:9A:3C:ED:18:37:16:28:B4:05:7D:9C:18:D7:02:EF:37:5C:3C:E9
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       509B8DBFE4C2F5AB0DB421378294D4AC2F798D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          D9
Signing time:             Sat 06 Dec 2025 18:23:56 +0000
Manifest this update:     Sat 06 Dec 2025 18:18:56 +0000
Manifest next update:     Sun 07 Dec 2025 22:02:56 +0000
Files and hashes:         1: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: 4KY+5BQYzxuQpdHrj/Du0JHiAcC+WuvXmhfLIC0tIDU=)
                          2: AS47778.asa (hash: 78m/YMd0iziq5ekw99nuLI71Wd4c+iQzn5EiUkYPa+8=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9b:8d:bf:e4:c2:f5:ab:0d:b4:21:37:82:94:d4:ac:2f:79:8d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Dec  6 18:18:56 2025 GMT
            Not After : Dec  7 22:02:56 2025 GMT
        Subject: CN=0C9A3CED18371628B4057D9C18D702EF375C3CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:b1:10:0d:22:7a:8c:76:ee:f4:02:f2:89:
                    c6:d7:f3:29:92:84:24:07:b5:d4:4b:de:b4:54:f2:
                    2c:2a:4f:33:db:8d:cf:b1:46:fb:de:b9:16:6f:88:
                    bc:c5:2b:6e:fb:6a:b1:85:51:65:69:b6:6a:68:b1:
                    fa:54:89:3e:58:62:25:cd:15:01:b5:62:5c:e0:cc:
                    88:b4:36:8f:8a:1d:73:c1:65:47:3d:50:84:0e:74:
                    58:09:74:a1:da:76:0e:a2:52:56:25:7b:20:50:67:
                    e9:fb:f0:59:94:37:ab:53:0a:f3:54:d1:24:c2:7c:
                    65:52:56:96:5a:84:d7:38:aa:5b:ca:92:96:20:fc:
                    b5:07:ac:f9:e5:13:62:70:15:9e:07:31:40:f4:a2:
                    9a:82:09:94:55:bf:c5:e9:fc:51:7e:28:2a:51:c4:
                    33:7a:b7:bb:f3:31:87:6f:2e:34:93:25:31:f1:44:
                    da:18:79:a5:51:14:bd:62:65:0f:7c:d0:7c:06:58:
                    63:29:1e:04:3e:f8:51:9c:a1:24:60:f4:08:55:1f:
                    ee:1b:74:58:e3:b7:28:4e:b2:74:56:b2:93:87:9c:
                    70:97:b9:85:18:e2:9c:62:3f:33:f5:81:79:62:47:
                    27:aa:6f:9d:bd:a4:b4:71:55:fa:39:36:a5:bf:30:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:3C:ED:18:37:16:28:B4:05:7D:9C:18:D7:02:EF:37:5C:3C:E9
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:c4:b4:a2:38:a6:dd:56:50:af:65:5f:77:18:92:6c:a7:
         dc:d2:66:ff:c5:cf:ee:b0:e1:e3:92:40:30:f9:24:98:2f:a4:
         c2:f6:34:c4:b6:7a:0b:c3:89:d7:5e:20:1c:fd:ad:3c:1d:2e:
         a6:c5:99:51:5c:ac:67:22:5f:94:7c:13:58:81:93:f6:7f:ff:
         de:45:4f:40:26:02:4e:d0:ba:10:eb:a2:a5:08:7f:45:bf:7a:
         cf:9c:e2:41:98:46:26:51:91:06:70:0a:7a:42:c6:6f:d3:32:
         44:b7:64:32:73:c9:4e:a3:f7:f4:61:03:ae:15:61:25:ba:59:
         bd:d6:dd:6f:93:64:7e:b0:5a:a9:6d:d0:04:3d:d2:fb:62:fb:
         43:cd:24:f0:6f:ba:1c:b2:b8:a8:c8:85:dd:81:65:41:cd:c4:
         3f:8b:cb:23:99:47:d1:31:48:77:5e:92:c2:db:68:5e:61:49:
         4b:28:ac:89:c5:63:27:7d:4a:ff:c6:31:fa:54:39:9a:b6:eb:
         69:1b:be:aa:43:f0:43:9b:36:22:b9:ae:95:0b:c4:ff:56:60:
         fe:69:52:5f:53:ea:6a:a3:07:fc:a3:f5:5d:a2:c4:c4:38:8f:
         01:c2:61:a4:05:a8:f8:6f:6a:9f:21:ba:a7:a8:82:69:58:d2:
         51:09:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:48:12 2025 by rpki-client