This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json) Hash identifier: J7tFZU/bK9fJmLWgGZzFIR/8hDYygk5SBIAM0U6oUj4= Subject key identifier: 98:A5:2B:39:74:6D:31:AB:E0:2A:EC:32:72:8E:B6:76:E7:13:39:17 Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Certificate serial: 316BFF957D3A460F934256DAB05347FAE3469BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft Manifest number: 101E Signing time: Mon 19 Jan 2026 22:43:07 +0000 Manifest this update: Mon 19 Jan 2026 22:38:07 +0000 Manifest next update: Wed 21 Jan 2026 02:35:07 +0000 Files and hashes: 1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=) 2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: sIi8+jZj025RLdz+SsK0O12Q4hmDP9QAUuNTAwCl0IY=) Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 02:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6b:ff:95:7d:3a:46:0f:93:42:56:da:b0:53:47:fa:e3:46:9b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Validity Not Before: Jan 19 22:38:07 2026 GMT Not After : Jan 21 02:35:07 2026 GMT Subject: CN=98A52B39746D31ABE02AEC32728EB676E7133917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:ee:0c:8c:01:57:c4:5a:cc:56:92:26:bc: 3d:e4:e4:1c:9d:24:10:fe:44:af:58:46:42:72:7f: 0f:1c:0f:2d:78:38:b6:da:e9:89:9e:34:21:76:a3: 28:cc:b0:16:16:ff:cd:ab:30:4d:6a:a5:a2:6c:ed: 89:73:68:aa:14:9f:f9:bc:cd:6a:fb:68:79:a4:3e: 56:df:eb:21:74:80:d6:a9:e5:fb:fb:2f:8f:ef:a5: 90:9b:94:4b:12:22:86:fd:5d:d9:95:76:32:09:5b: 66:a1:53:4d:87:f5:41:9d:70:06:55:61:6f:f3:cb: 2a:03:05:85:ef:88:62:e6:4d:5d:2a:d9:00:d1:fb: 2d:72:bf:ef:6d:9f:58:9e:8a:37:3e:51:c7:20:01: a1:cc:e9:98:bc:6c:62:9e:81:2b:97:0d:45:33:54: b3:1c:87:a6:55:67:14:81:da:89:04:6f:05:d7:81: b4:3b:9b:8b:27:db:0e:46:a9:09:27:52:e2:e7:4c: 60:4b:d5:94:75:86:d4:23:f7:9d:3e:fe:73:05:b4: d5:95:71:47:86:cc:05:22:f2:3e:22:82:e0:9f:fe: 0e:25:64:74:5b:01:92:6e:20:dc:05:0d:fc:5c:5e: 98:da:1d:88:18:f4:0b:7c:21:77:03:55:4f:fa:48: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A5:2B:39:74:6D:31:AB:E0:2A:EC:32:72:8E:B6:76:E7:13:39:17 X509v3 Authority Key Identifier: keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:da:33:dc:ce:97:4e:32:38:f5:a4:43:94:2e:1f:16:77:2d: 96:ec:f6:ed:9a:31:71:d8:02:f1:f3:2e:92:7b:7d:82:2f:d0: b8:c6:b3:0f:b8:11:a0:19:ff:e5:bf:4b:53:52:f0:a2:86:2e: 4f:ff:f7:d7:76:31:35:d6:ff:95:09:9b:e9:65:12:f6:75:22: 8e:1c:43:a4:18:b5:12:88:59:59:85:e2:f9:ed:f6:25:a8:db: 50:b4:f0:b3:ac:77:93:a7:f3:2b:69:6e:a9:30:e4:cf:28:bb: 0b:b5:ab:d5:96:35:95:dd:64:1e:9d:bc:59:b5:59:42:da:30: be:84:92:ff:d5:3b:bf:7e:c3:01:ed:4a:7e:f0:e1:59:00:c9: c3:84:36:c6:1e:4a:e4:8f:fe:02:a8:6b:89:7a:64:73:b6:dc: 73:16:70:ab:a2:df:03:af:b2:1a:87:a5:3f:59:cd:bf:0a:f3: e5:40:d1:af:87:93:93:c0:a3:f7:5b:8d:28:17:f6:19:43:53: ae:e3:3f:26:78:f8:c1:24:54:30:1e:f8:1b:b8:8a:70:bb:be: f0:1c:fb:a0:2b:8a:59:a3:20:68:df:38:32:7b:ea:34:ba:ee: 52:a9:6b:d4:40:a3:41:9a:15:fb:69:d0:69:f0:46:b1:c0:b6: 0f:2d:91:f4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMWv/lX06Rg+TQlbasFNH+uNGm/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3 MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI2MDExOTIyMzgwN1oX DTI2MDEyMTAyMzUwN1owMzExMC8GA1UEAxMoOThBNTJCMzk3NDZEMzFBQkUwMkFF QzMyNzI4RUI2NzZFNzEzMzkxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMew7gyMAVfEWsxWkia8PeTkHJ0kEP5Er1hGQnJ/DxwPLXg4ttrpiZ40IXaj KMywFhb/zaswTWqlomztiXNoqhSf+bzNavtoeaQ+Vt/rIXSA1qnl+/svj++lkJuU SxIihv1d2ZV2MglbZqFTTYf1QZ1wBlVhb/PLKgMFhe+IYuZNXSrZANH7LXK/722f WJ6KNz5RxyABoczpmLxsYp6BK5cNRTNUsxyHplVnFIHaiQRvBdeBtDubiyfbDkap CSdS4udMYEvVlHWG1CP3nT7+cwW01ZVxR4bMBSLyPiKC4J/+DiVkdFsBkm4g3AUN /FxemNodiBj0C3whdwNVT/pIgh8CAwEAAaOCAhkwggIVMB0GA1UdDgQWBBSYpSs5 dG0xq+Aq7DJyjrZ25xM5FzAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1 NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAA7aM9zOl04yOPWkQ5QuHxZ3LZbs9u2aMXHYAvHzLpJ7fYIv0LjG sw+4EaAZ/+W/S1NS8KKGLk//99d2MTXW/5UJm+llEvZ1Io4cQ6QYtRKIWVmF4vnt 9iWo21C08LOsd5On8ytpbqkw5M8ouwu1q9WWNZXdZB6dvFm1WULaML6Ekv/VO79+ wwHtSn7w4VkAycOENsYeSuSP/gKoa4l6ZHO23HMWcKui3wOvshqHpT9Zzb8K8+VA 0a+Hk5PAo/dbjSgX9hlDU67jPyZ4+MEkVDAe+Bu4inC7vvAc+6ArilmjIGjfODJ7 6jS67lKpa9RAo0GaFftp0GnwRrHAtg8tkfQ= -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:21 2026 by rpki-client