This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json) Hash identifier: nwHu5aN7YhhB51Uc7ONHuZLoWjK8gVQsaVLGxisK8Yo= Subject key identifier: 9A:E5:CE:ED:E5:7A:08:74:9E:75:A8:C6:75:5D:9B:0E:E4:47:41:F8 Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Certificate serial: 2EDAC88560FA3816FF0690BD7FB85A2A1BC31911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft Manifest number: 0FD0 Signing time: Sat 06 Dec 2025 06:53:33 +0000 Manifest this update: Sat 06 Dec 2025 06:48:33 +0000 Manifest next update: Sun 07 Dec 2025 10:24:33 +0000 Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: S8Vs94cRtzHbKuwC4c6KtIcugfGvmlAPOLQRaZyz74s=) 2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=) Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:da:c8:85:60:fa:38:16:ff:06:90:bd:7f:b8:5a:2a:1b:c3:19:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Validity Not Before: Dec 6 06:48:33 2025 GMT Not After : Dec 7 10:24:33 2025 GMT Subject: CN=9AE5CEEDE57A08749E75A8C6755D9B0EE44741F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:b8:aa:f0:ac:69:8b:a5:09:8e:7f:da:db: 4d:a1:b5:f1:56:06:39:73:5a:65:a6:21:7f:1c:89: fc:15:fe:9f:02:bb:e3:e6:67:cc:f4:ae:b5:46:03: ea:c3:7d:44:60:58:51:4b:43:57:dd:92:32:70:28: e7:dc:cc:82:4b:be:4a:07:a6:57:84:6d:8b:b6:0d: 1f:61:d3:d6:ef:47:94:97:ac:f6:05:78:30:81:65: 3c:eb:67:f7:d8:dd:1b:3c:a4:3c:53:b6:65:90:e0: e6:62:19:b0:4b:ae:d1:8e:0f:ed:6f:f8:a7:f0:3a: ec:d5:9d:3d:85:93:6c:9c:11:b5:75:b2:3b:79:41: d1:ef:9a:1a:a4:0c:e6:af:90:72:e2:17:53:d3:fd: 76:bd:29:0a:89:c1:4f:41:8b:8b:72:c7:1e:15:ab: 66:56:3a:65:18:06:96:c4:a1:d2:7c:c9:13:15:d0: 72:f3:90:c7:40:c0:07:e5:56:52:45:24:52:f6:3a: ed:9a:ba:bc:a2:f2:d5:7a:39:cc:fc:21:d6:7f:82: 67:09:61:70:12:5a:13:2b:14:d4:61:d0:95:3c:73: 5b:8c:cb:5a:21:7b:ea:54:f1:23:bb:85:2b:ef:51: c6:f3:0b:ef:13:f8:f6:e9:1e:d6:91:32:16:d7:c8: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:CE:ED:E5:7A:08:74:9E:75:A8:C6:75:5D:9B:0E:E4:47:41:F8 X509v3 Authority Key Identifier: keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c8:d5:f8:5a:aa:0f:08:2a:2f:e1:39:df:2d:8c:a2:ac:0a: c0:aa:44:8c:bb:aa:c7:46:3f:54:5b:d2:1c:f3:f6:22:f1:16: 5f:a6:2e:df:fc:25:e2:5a:14:94:9f:34:f5:35:74:db:ed:0b: fb:fc:cd:67:bc:39:d2:0b:b6:54:ff:53:60:7d:8c:63:fa:b4: a2:d4:fd:56:5a:14:0f:5a:0c:3e:cc:47:cd:4a:a8:14:d5:53: 23:25:7f:55:8f:38:9d:34:2a:18:59:66:07:c4:c5:da:cd:8b: c2:ca:7b:f4:26:91:64:a7:ba:e1:f6:f3:87:78:91:8f:b4:fb: ad:fd:fb:a4:f9:2f:df:55:8a:e8:42:74:ef:c3:62:79:f5:08: 8d:a6:f2:c4:28:84:84:53:4d:62:87:12:87:74:ea:f6:47:fc: cc:44:91:6b:81:f1:99:81:4f:6a:d2:b8:5e:74:35:c7:fb:1c: 5c:dd:51:c5:fd:bc:d4:c5:d4:9d:a8:2c:f3:47:2a:24:06:14: b1:fd:f3:ec:9e:0e:5e:3e:df:bc:d7:02:8b:ea:2c:02:55:76: 16:94:57:2e:fc:9d:52:35:0a:4a:cc:f6:d6:fe:39:bb:b2:be: f9:d5:42:22:b3:03:35:73:06:35:c8:a4:69:db:7b:99:b1:87: 1d:f7:da:0c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULtrIhWD6OBb/BpC9f7haKhvDGREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3 MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI1MTIwNjA2NDgzM1oX DTI1MTIwNzEwMjQzM1owMzExMC8GA1UEAxMoOUFFNUNFRURFNTdBMDg3NDlFNzVB OEM2NzU1RDlCMEVFNDQ3NDFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTcuKrwrGmLpQmOf9rbTaG18VYGOXNaZaYhfxyJ/BX+nwK74+ZnzPSutUYD 6sN9RGBYUUtDV92SMnAo59zMgku+SgemV4Rti7YNH2HT1u9HlJes9gV4MIFlPOtn 99jdGzykPFO2ZZDg5mIZsEuu0Y4P7W/4p/A67NWdPYWTbJwRtXWyO3lB0e+aGqQM 5q+QcuIXU9P9dr0pConBT0GLi3LHHhWrZlY6ZRgGlsSh0nzJExXQcvOQx0DAB+VW UkUkUvY67Zq6vKLy1Xo5zPwh1n+CZwlhcBJaEysU1GHQlTxzW4zLWiF76lTxI7uF K+9RxvML7xP49uke1pEyFtfIHacCAwEAAaOCAhkwggIVMB0GA1UdDgQWBBSa5c7t 5XoIdJ51qMZ1XZsO5EdB+DAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1 NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBADLI1fhaqg8IKi/hOd8tjKKsCsCqRIy7qsdGP1Rb0hzz9iLxFl+m Lt/8JeJaFJSfNPU1dNvtC/v8zWe8OdILtlT/U2B9jGP6tKLU/VZaFA9aDD7MR81K qBTVUyMlf1WPOJ00KhhZZgfExdrNi8LKe/QmkWSnuuH284d4kY+0+639+6T5L99V iuhCdO/DYnn1CI2m8sQohIRTTWKHEod06vZH/MxEkWuB8ZmBT2rSuF50Ncf7HFzd UcX9vNTF1J2oLPNHKiQGFLH98+yeDl4+37zXAovqLAJVdhaUVy78nVI1CkrM9tb+ ObuyvvnVQiKzAzVzBjXIpGnbe5mxhx332gw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:27:13 2025 by rpki-client