This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
File:                     A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft (raw, json)
Hash identifier:          ahUAk04tznp4RuHKWPssNEDVtgKPBHMer930odsscOk=
Subject key identifier:   71:80:FC:C4:F5:BB:CE:10:BE:C8:B0:C1:D9:83:0C:6E:65:7A:CD:36
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5D5194C1D8556CB32C8DA29ACEB2A9CED3B80E88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
Manifest number:          0DB7
Signing time:             Sat 20 Dec 2025 06:20:50 +0000
Manifest this update:     Sat 20 Dec 2025 06:15:50 +0000
Manifest next update:     Sun 21 Dec 2025 09:39:50 +0000
Files and hashes:         1: 323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa (hash: 2fKo9ZhMST2UXOx3fO1y5eOsYWx7rUGptBVQ5sxmghE=)
                          2: 323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (hash: E1f+w/L+Y4QmOObS5v+R5zJMWBLGXb0lfRTev6VJIeg=)
                          3: 323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa (hash: eOinL0SpHMFqP4k1RlMolVJy4l6JdOnWssHiv0K/HU4=)
                          4: 32332e3136392e3232352e302f32342d3234203d3e203533333536.roa (hash: Roy818kcd/jSiSJqEoUMpDQeZU8nZ8YuCHlmpv0ikiY=)
                          5: 323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (hash: UXLgBCwCd/kC/dywQkp0EahVPBNuz2MkQO1QKIuz0Kg=)
                          6: 3230362e38332e382e302f32342d3234203d3e20313339363836.roa (hash: I76vwtMnCxOJnzyJSme/Zad72J4JArFLET312hYrAKk=)
                          7: 323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa (hash: iAjEKoVYmfx8nKC9EH02qWAefnhq8Qft2p5F6Pl0fGc=)
                          8: 32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa (hash: lm4Sv/t6QfnCT0/X59Z+TWZSCEtDRPjiOJqSzkNpQpc=)
                          9: 323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa (hash: Xv55ZJ3QpEC+9xg6hfk5devBx+xfiQSBRuPCC6iZmWA=)
                          10: 323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa (hash: 2j+abNNoMN3Wy5uMIT9iUFaTc4Uuax+QZhUXxFGvbm8=)
                          11: 323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa (hash: fy8PJ1d5h/D7ApX/xtPO6FKiEx/rI/ivLVC8mMxPZHk=)
                          12: 323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa (hash: smCesmkWldhqZhmFJNas0LfhDFyHV7bdgYvxDHQPiqs=)
                          13: 323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (hash: 6+llNnPi02v1IB6ShWsv8LCi+rSoCHpwZnCCDQ9sMmU=)
                          14: 323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa (hash: bmTfUm/bdPR4HtNEJegttB8t0hlQFgvKt4AfOqTzOHE=)
                          15: 323630323a666531333a3a2f33362d3438203d3e203533333536.roa (hash: He7YYwdnIjw2DNwUWjdKmmWMeamAEcqt/m2S2AHQ7gc=)
                          16: 323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa (hash: 0wxGI26pVbqHTfugW/XdMoY+zVU5VxIetuQ+/L9Bmoo=)
                          17: 323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa (hash: ZsC+5/DcFzC4A5mbI7rCEhdz+PubygU/arjL0OozCa0=)
                          18: 323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (hash: GoDAUkuiE5yFmCJas3tsPgOoWIS1MftOJV0jA5ov80M=)
                          19: 323630323a666531333a6661303a3a2f34342d3434203d3e203533333536.roa (hash: G7jypZt52u8XHfd/z4HdL+0VA9Y61c+3EDGqizJEEdE=)
                          20: 323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (hash: xNhzWZ6D9bWw0QMUK4JNpAv7PXrbZbuYGTRV9SUzm/E=)
                          21: 323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (hash: /H0cToo4P9Ztt/8fLLAgruWLgiFTIUHI/pQt8FJ8YJg=)
                          22: A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl (hash: XjyPbipyjftbtwymCfo5w4tlmXFsf584g5YeRHmwNc8=)
                          23: 323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa (hash: xCJyzawYL9uWD409X+T0bygKbK+Bi6ZuTekSvAtgd2w=)
                          24: 323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa (hash: S6a3z9q8fYzikD+dwo8f0LJ8Hf/K9t56otyeHkMhBe8=)
                          25: 323630323a666531333a6663343a3a2f34382d3438203d3e203533333536.roa (hash: 3wM2YopyYD3gTUtaIimXnS0zZ+90+PyA4aRgujvOZtI=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:51:94:c1:d8:55:6c:b3:2c:8d:a2:9a:ce:b2:a9:ce:d3:b8:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 20 06:15:50 2025 GMT
            Not After : Dec 21 09:39:50 2025 GMT
        Subject: CN=7180FCC4F5BBCE10BEC8B0C1D9830C6E657ACD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:68:5c:47:24:2d:46:bc:3b:44:71:cb:ce:
                    98:f1:0c:0e:88:10:e6:47:6a:b1:34:5b:be:26:36:
                    5f:28:97:bd:3d:4a:84:99:10:6d:01:00:82:ea:a6:
                    a6:6c:76:37:4c:3c:01:42:76:a0:72:0d:a3:6f:5a:
                    a7:f0:c3:2d:49:c2:b6:09:c0:21:44:dd:e3:29:f2:
                    53:9c:fb:60:6f:86:83:eb:97:3a:9a:ee:a8:8f:52:
                    1d:8f:01:d9:5a:87:3b:bc:68:82:0d:f9:0b:73:aa:
                    83:c1:22:b7:99:3c:09:95:29:dd:94:99:09:69:eb:
                    b1:87:4a:fa:d4:d1:eb:54:2f:2e:84:07:1f:42:af:
                    3e:ff:f3:f1:0d:40:28:75:81:08:9b:4b:84:8e:89:
                    e8:a2:ce:13:44:af:d6:21:63:26:31:c6:3d:58:e2:
                    4c:20:25:ab:d3:8d:e7:34:f3:fa:f1:f3:d4:e2:26:
                    23:e1:2d:08:9a:fd:8c:e4:86:da:1c:00:5b:4a:8d:
                    0a:b2:25:21:90:b1:e6:51:e8:15:71:82:a8:ee:22:
                    cd:1f:ce:82:06:ce:ec:ae:44:2a:7c:e6:25:cd:86:
                    4c:69:f7:22:e7:7b:6b:00:cb:44:66:88:02:cd:80:
                    f0:fa:98:ea:0b:58:54:14:ee:4f:12:f8:3f:20:b5:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:80:FC:C4:F5:BB:CE:10:BE:C8:B0:C1:D9:83:0C:6E:65:7A:CD:36
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:48:e9:58:f2:db:1c:dd:0b:f5:b6:21:c7:57:81:45:14:93:
         6a:ac:c0:e2:54:e4:91:f3:0c:5d:af:fb:06:54:2a:15:0e:e6:
         81:b8:97:f0:01:50:d8:fc:40:97:e7:3b:9e:08:3a:8a:66:66:
         1d:1f:35:94:10:a0:b3:d8:ad:3d:a2:98:10:09:17:79:2f:c5:
         94:ec:53:55:63:74:68:6d:f9:c2:b4:24:a2:04:17:0d:b1:05:
         cd:8a:d7:db:c4:33:24:f7:a7:d1:3c:06:77:14:a3:8a:12:fd:
         45:93:1f:dd:b4:12:36:02:d8:53:4f:9c:e1:e3:aa:14:97:ee:
         ee:1e:6a:ac:f7:22:0d:04:1c:54:d2:60:d1:70:88:3c:5e:99:
         2f:d7:66:ae:ae:42:a7:29:2f:99:f4:69:66:a2:fd:9a:87:b7:
         a3:96:1a:a6:9d:0c:3f:69:18:c2:2c:89:8b:fa:58:f5:3a:40:
         42:23:76:49:34:97:fc:83:d4:39:73:60:bb:78:b8:30:e2:95:
         92:52:5e:1b:9d:94:3b:16:d0:d0:e6:20:55:a5:0f:be:31:47:
         eb:0d:5e:ea:b6:6b:33:b0:d9:5d:ca:fe:2a:c9:9a:9d:0e:be:
         6e:91:65:3f:b2:91:56:93:02:55:1e:bb:0d:99:a5:58:9c:8a:
         c2:04:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:00:49 2025 by rpki-client