This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
File:                     A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft (raw, json)
Hash identifier:          IC8jdoLhzJXbnDf8YiJjniLcVPNe0picM6v+bVjfiN8=
Subject key identifier:   D1:AF:96:FA:1F:F1:D5:09:CB:84:BF:DA:30:36:94:BE:53:BE:96:10
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       132436E5582EAB90DE9590C4F1A77F8A60B96F1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
Manifest number:          0DAB
Signing time:             Sat 13 Dec 2025 18:02:51 +0000
Manifest this update:     Sat 13 Dec 2025 17:57:51 +0000
Manifest next update:     Sun 14 Dec 2025 19:39:51 +0000
Files and hashes:         1: 323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa (hash: smCesmkWldhqZhmFJNas0LfhDFyHV7bdgYvxDHQPiqs=)
                          2: 323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (hash: 6+llNnPi02v1IB6ShWsv8LCi+rSoCHpwZnCCDQ9sMmU=)
                          3: 323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa (hash: ZsC+5/DcFzC4A5mbI7rCEhdz+PubygU/arjL0OozCa0=)
                          4: A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl (hash: 5noomItTuFTckvWL+rh1vPr2CNKmINwLPL9J0VquN1k=)
                          5: 323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (hash: /H0cToo4P9Ztt/8fLLAgruWLgiFTIUHI/pQt8FJ8YJg=)
                          6: 32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa (hash: lm4Sv/t6QfnCT0/X59Z+TWZSCEtDRPjiOJqSzkNpQpc=)
                          7: 32332e3136392e3232352e302f32342d3234203d3e203533333536.roa (hash: Roy818kcd/jSiSJqEoUMpDQeZU8nZ8YuCHlmpv0ikiY=)
                          8: 323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa (hash: 2fKo9ZhMST2UXOx3fO1y5eOsYWx7rUGptBVQ5sxmghE=)
                          9: 323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (hash: xNhzWZ6D9bWw0QMUK4JNpAv7PXrbZbuYGTRV9SUzm/E=)
                          10: 323630323a666531333a3a2f33362d3438203d3e203533333536.roa (hash: He7YYwdnIjw2DNwUWjdKmmWMeamAEcqt/m2S2AHQ7gc=)
                          11: 323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (hash: UXLgBCwCd/kC/dywQkp0EahVPBNuz2MkQO1QKIuz0Kg=)
                          12: 323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa (hash: eOinL0SpHMFqP4k1RlMolVJy4l6JdOnWssHiv0K/HU4=)
                          13: 323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa (hash: fy8PJ1d5h/D7ApX/xtPO6FKiEx/rI/ivLVC8mMxPZHk=)
                          14: 323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa (hash: 0wxGI26pVbqHTfugW/XdMoY+zVU5VxIetuQ+/L9Bmoo=)
                          15: 323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa (hash: bmTfUm/bdPR4HtNEJegttB8t0hlQFgvKt4AfOqTzOHE=)
                          16: 323630323a666531333a6663343a3a2f34382d3438203d3e203533333536.roa (hash: 3wM2YopyYD3gTUtaIimXnS0zZ+90+PyA4aRgujvOZtI=)
                          17: 323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa (hash: iAjEKoVYmfx8nKC9EH02qWAefnhq8Qft2p5F6Pl0fGc=)
                          18: 323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa (hash: Xv55ZJ3QpEC+9xg6hfk5devBx+xfiQSBRuPCC6iZmWA=)
                          19: 323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (hash: E1f+w/L+Y4QmOObS5v+R5zJMWBLGXb0lfRTev6VJIeg=)
                          20: 323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa (hash: S6a3z9q8fYzikD+dwo8f0LJ8Hf/K9t56otyeHkMhBe8=)
                          21: 323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (hash: GoDAUkuiE5yFmCJas3tsPgOoWIS1MftOJV0jA5ov80M=)
                          22: 323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa (hash: 2j+abNNoMN3Wy5uMIT9iUFaTc4Uuax+QZhUXxFGvbm8=)
                          23: 3230362e38332e382e302f32342d3234203d3e20313339363836.roa (hash: I76vwtMnCxOJnzyJSme/Zad72J4JArFLET312hYrAKk=)
                          24: 323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa (hash: xCJyzawYL9uWD409X+T0bygKbK+Bi6ZuTekSvAtgd2w=)
                          25: 323630323a666531333a6661303a3a2f34342d3434203d3e203533333536.roa (hash: G7jypZt52u8XHfd/z4HdL+0VA9Y61c+3EDGqizJEEdE=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 19:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:24:36:e5:58:2e:ab:90:de:95:90:c4:f1:a7:7f:8a:60:b9:6f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 13 17:57:51 2025 GMT
            Not After : Dec 14 19:39:51 2025 GMT
        Subject: CN=D1AF96FA1FF1D509CB84BFDA303694BE53BE9610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:2c:0d:84:9e:d6:02:84:b1:a8:b8:13:88:
                    e6:29:b3:2d:64:8f:46:92:c2:36:50:a5:b1:30:a3:
                    f4:f5:3c:6a:f8:32:af:c4:69:40:3a:bc:0b:4d:50:
                    b2:97:ba:44:38:2b:f6:5d:af:2d:74:49:bf:bf:a6:
                    7b:a5:2b:8c:03:e1:d6:69:fa:5d:ce:74:b0:d7:a6:
                    16:85:54:12:fa:f5:91:34:d4:19:ef:26:57:43:66:
                    01:b1:de:a0:09:68:ae:12:8e:9e:bc:8c:05:b0:92:
                    36:d5:1b:bc:23:66:e6:6a:64:30:2e:8c:ba:c7:15:
                    51:7f:18:68:b1:f6:14:d0:ab:a5:62:bc:b5:67:f4:
                    84:1a:70:31:3c:2e:2d:c5:e8:59:4e:ac:3a:d5:04:
                    36:ad:c6:04:0c:80:88:0c:36:93:69:35:fc:e0:28:
                    a3:26:a4:4e:55:91:cd:d4:f7:58:74:54:44:3a:2f:
                    08:b7:d1:cf:f1:47:af:0d:bd:d8:73:93:e1:eb:e1:
                    41:ce:73:8d:ff:6f:f2:09:fb:c6:3f:73:10:3d:cf:
                    a2:85:13:f1:d3:0e:0e:99:6e:37:cf:77:3a:57:12:
                    a4:02:20:e2:30:d6:a1:cb:c6:6f:61:df:24:99:12:
                    2e:b1:65:a1:a6:6d:96:54:cf:d0:8d:02:ce:f8:51:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:96:FA:1F:F1:D5:09:CB:84:BF:DA:30:36:94:BE:53:BE:96:10
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:f0:16:9e:59:23:9a:18:3e:16:2f:0c:d2:8a:cd:b3:69:
         34:da:b4:84:99:51:2f:49:6d:d9:fd:35:cb:c5:4b:c2:73:07:
         22:61:b1:64:12:4f:01:b5:b6:f5:f9:39:4d:d8:35:c3:06:cb:
         6c:64:c4:d7:bb:98:62:ea:1a:1c:1c:e1:94:5b:28:e7:dd:0e:
         cd:67:21:b9:25:a6:13:0e:1b:93:d8:f4:a7:5b:c0:8d:d7:9c:
         54:2d:5f:ae:50:5e:7b:91:42:77:c8:58:a2:6f:ef:58:2c:12:
         19:43:d3:39:f1:24:b9:30:58:9e:8c:27:c2:1d:4d:1a:f4:de:
         e6:b0:58:f3:9d:88:b5:5e:06:51:9f:df:f7:44:d3:7c:36:87:
         19:d6:e9:eb:f0:e9:7d:cc:2a:8a:36:93:76:2e:10:12:5d:19:
         dd:79:b8:91:d5:1a:b3:bd:88:15:2b:13:b2:8d:21:3b:d1:a7:
         26:a6:b2:63:5a:d1:d7:d3:7c:4a:e9:b9:5b:60:81:50:f5:e2:
         df:ef:9d:f2:58:0e:48:40:cf:26:12:92:c6:3d:7c:fd:e9:63:
         f1:a4:19:6a:c0:7e:99:b4:56:ea:04:84:f7:11:bc:e3:45:91:
         87:7b:01:d8:82:41:47:84:d1:b9:7e:46:a8:50:85:7f:73:59:
         06:7d:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:20:54 2025 by rpki-client