Subject: [sidr] Using RRDP links in the RIPE NCC repository

From: Tim Bruijnzeels <[email-masked]>
Date: Thu, 14 Jan 2016 14:42:31 +0100

Hi all,

Just a heads up that we have started to include RRDP SIAs as in the RIPE NCC RPKI certificates. We are using a cloud provider to host the publication server and CDN - but I am not sure it's appropriate to name companies on this list ;). It shouldn't affect any recent validators - recent versions of rcynic, RPSTIR and the RIPE NCC RPKI Validator all ignore the additional URIs. As discussed at the last two IETFs, we figured it would be safe to start using this as a beta service.

However we have had one report from JPNIC who were using an older RP tool that had an issue with this. If you see similar problems you may want to upgrade your RP tools.

If you want to help us test the new protocol, our latest validator supports it - but you have to enable it in config, by setting the following in the rpki-validator.conf:
> prefer.rrdp = true

Our validator can be downloaded here:
https://www.ripe.net/manage-ips-and-asns/resource-management/certification/tools-and-resources

But of course we are also very interested in feedback from other RP software.

Please let us know if you have any question or comment, or find any issues.

Cheers,

Tim