This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
File:                     A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft (raw, json)
Hash identifier:          4yE26gKL2SGI55eYjSKR8GqD82YfrGhzFH4SoE8D/jI=
Subject key identifier:   30:53:22:67:92:C4:CB:C7:72:81:44:50:E1:73:CF:2A:2C:2D:54:99
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       13FD0429A68CEB1A57B15BDBD940BFE243186104
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
Manifest number:          0D9D
Signing time:             Sat 06 Dec 2025 07:48:54 +0000
Manifest this update:     Sat 06 Dec 2025 07:43:54 +0000
Manifest next update:     Sun 07 Dec 2025 11:11:54 +0000
Files and hashes:         1: 323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa (hash: ZsC+5/DcFzC4A5mbI7rCEhdz+PubygU/arjL0OozCa0=)
                          2: 323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (hash: /H0cToo4P9Ztt/8fLLAgruWLgiFTIUHI/pQt8FJ8YJg=)
                          3: 323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa (hash: 2fKo9ZhMST2UXOx3fO1y5eOsYWx7rUGptBVQ5sxmghE=)
                          4: 323630323a666531333a3a2f33362d3438203d3e203533333536.roa (hash: He7YYwdnIjw2DNwUWjdKmmWMeamAEcqt/m2S2AHQ7gc=)
                          5: 323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (hash: E1f+w/L+Y4QmOObS5v+R5zJMWBLGXb0lfRTev6VJIeg=)
                          6: A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl (hash: 2PgOc52MWD6Hzg2caX2CqH/8lxlRZObRTDsLyYJCNPA=)
                          7: 323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa (hash: eOinL0SpHMFqP4k1RlMolVJy4l6JdOnWssHiv0K/HU4=)
                          8: 323630323a666531333a6661303a3a2f34342d3434203d3e203533333536.roa (hash: G7jypZt52u8XHfd/z4HdL+0VA9Y61c+3EDGqizJEEdE=)
                          9: 32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa (hash: lm4Sv/t6QfnCT0/X59Z+TWZSCEtDRPjiOJqSzkNpQpc=)
                          10: 323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (hash: GoDAUkuiE5yFmCJas3tsPgOoWIS1MftOJV0jA5ov80M=)
                          11: 323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (hash: xNhzWZ6D9bWw0QMUK4JNpAv7PXrbZbuYGTRV9SUzm/E=)
                          12: 323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa (hash: 0wxGI26pVbqHTfugW/XdMoY+zVU5VxIetuQ+/L9Bmoo=)
                          13: 323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa (hash: S6a3z9q8fYzikD+dwo8f0LJ8Hf/K9t56otyeHkMhBe8=)
                          14: 3230362e38332e382e302f32342d3234203d3e20313339363836.roa (hash: I76vwtMnCxOJnzyJSme/Zad72J4JArFLET312hYrAKk=)
                          15: 323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (hash: UXLgBCwCd/kC/dywQkp0EahVPBNuz2MkQO1QKIuz0Kg=)
                          16: 323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa (hash: fy8PJ1d5h/D7ApX/xtPO6FKiEx/rI/ivLVC8mMxPZHk=)
                          17: 323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (hash: 6+llNnPi02v1IB6ShWsv8LCi+rSoCHpwZnCCDQ9sMmU=)
                          18: 323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa (hash: bmTfUm/bdPR4HtNEJegttB8t0hlQFgvKt4AfOqTzOHE=)
                          19: 323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa (hash: iAjEKoVYmfx8nKC9EH02qWAefnhq8Qft2p5F6Pl0fGc=)
                          20: 32332e3136392e3232352e302f32342d3234203d3e203533333536.roa (hash: Roy818kcd/jSiSJqEoUMpDQeZU8nZ8YuCHlmpv0ikiY=)
                          21: 323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa (hash: xCJyzawYL9uWD409X+T0bygKbK+Bi6ZuTekSvAtgd2w=)
                          22: 323630323a666531333a6663343a3a2f34382d3438203d3e203533333536.roa (hash: 3wM2YopyYD3gTUtaIimXnS0zZ+90+PyA4aRgujvOZtI=)
                          23: 323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa (hash: 2j+abNNoMN3Wy5uMIT9iUFaTc4Uuax+QZhUXxFGvbm8=)
                          24: 323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa (hash: Xv55ZJ3QpEC+9xg6hfk5devBx+xfiQSBRuPCC6iZmWA=)
                          25: 323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa (hash: smCesmkWldhqZhmFJNas0LfhDFyHV7bdgYvxDHQPiqs=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:04:29:a6:8c:eb:1a:57:b1:5b:db:d9:40:bf:e2:43:18:61:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec  6 07:43:54 2025 GMT
            Not After : Dec  7 11:11:54 2025 GMT
        Subject: CN=3053226792C4CBC772814450E173CF2A2C2D5499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:0d:b6:0a:d6:65:1f:86:44:79:1e:ad:0f:
                    41:8d:1b:fb:91:f8:92:e1:c2:7f:fe:7f:83:24:92:
                    c8:c3:32:03:e5:4c:1c:f4:8e:76:32:0d:fe:0a:d4:
                    13:c7:1d:71:6e:65:ad:3b:a2:27:4c:b8:cb:9b:c7:
                    67:57:5c:61:b0:2a:3e:96:85:63:ba:69:f4:f2:14:
                    f0:f4:a9:3e:cb:ec:ad:9c:7b:32:8a:2d:f1:c4:8d:
                    27:43:66:51:9b:ef:06:3e:51:75:a8:29:14:44:cf:
                    27:46:13:90:36:2e:d7:38:da:ba:8b:f1:bc:ab:c6:
                    6f:17:81:29:77:ba:14:ce:58:ed:46:9a:03:99:5d:
                    d7:64:b6:ca:f4:16:02:38:a1:f5:92:68:2b:7c:fd:
                    3f:e4:9e:89:37:ec:3e:6b:69:80:ef:26:4a:39:7e:
                    64:42:e0:ad:da:c4:8b:13:5b:86:55:cb:02:fc:f2:
                    ef:07:ec:1e:18:93:3b:17:85:23:35:ab:a4:e0:98:
                    58:de:f6:22:3d:79:9f:d1:5d:33:94:67:8d:12:43:
                    c0:c2:e6:b1:a3:c4:ef:03:d0:30:08:5d:41:0a:1c:
                    0b:b2:28:97:2b:32:e3:3a:26:c7:d8:5f:20:3c:88:
                    45:c7:bd:f7:fc:ef:cf:80:c7:22:2d:63:d6:2c:4d:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:22:67:92:C4:CB:C7:72:81:44:50:E1:73:CF:2A:2C:2D:54:99
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:68:6e:15:62:19:f9:a0:27:a1:44:fb:52:16:cb:db:9f:
         28:64:35:b2:b3:77:48:20:a9:b3:51:93:17:bb:30:43:de:20:
         7d:d3:11:15:35:9c:71:3d:34:9e:4b:32:db:21:cd:e0:98:e5:
         e4:07:15:ab:e1:74:39:2d:5f:67:50:18:0f:df:f2:ed:46:8c:
         37:a8:7e:6a:89:ed:d9:e6:b0:e6:04:79:35:d5:83:b8:db:9c:
         f7:95:6a:0a:db:c9:e1:b4:80:48:9f:91:5c:40:a0:8d:31:66:
         34:e6:b3:ad:75:20:8a:b3:2e:32:c3:de:cd:49:af:03:f4:86:
         13:d9:45:75:20:1e:01:ff:8e:77:88:58:0c:49:b6:e4:59:62:
         58:cd:01:f2:c9:41:1a:e9:50:4f:97:cd:80:e7:08:7f:d1:3b:
         24:f8:bb:c3:04:a0:01:af:50:ca:04:8c:e9:96:83:b0:4f:df:
         82:d8:3b:f1:07:a8:0f:3e:a3:c8:9f:4d:d0:38:ad:4c:94:aa:
         20:ed:9c:85:f3:b6:0d:f8:78:d7:df:34:1f:42:ea:e0:f3:db:
         a5:06:dc:eb:51:e5:91:94:9b:ee:ce:c9:df:4f:2a:63:bb:e7:
         38:01:42:85:df:1a:84:a5:af:25:f5:f5:e4:08:ed:ca:77:90:
         9a:9d:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:12:42 2025 by rpki-client