The NRO RPKI Program aims to enhance the transparency, robustness and security of the RPKI system while also increasing the consistency of the RPKI system user experience across RIRs. Here's an update on our plans for the rest of 2025.| RIPE Labs
Refactored command line, simplified OpenID Connect configuration| NLnet Labs
Our latest RIPE NCC Days event took place in Chișinău, Moldova from 18-19 June 2025. At the meeting, we heard from local community leaders and examined the landscape of the Internet in Moldova and its neighbours.| RIPE Labs
Future capabilities of quantum attackers will present a host of new vulnerabilities for RPKI. A research student from SIDN Labs presents the first work on post-quantum cryptography for the RPKI, establishing the foundation for making this critical Internet infrastructure quantum-safe.| RIPE Labs
Exploring Relying Party (RP) software synchronization delays and how this can impair the responsiveness of RPKI-based validation.| MANRS
We are pleased to announce the two releases of Krill, versions 0.13.2 ‘Be kind, rewind’ and 0.14.5 ‘Who dis? New Phone.’ Krill is a daemon for running delegated RPKI, featuring a Certificate Authority and a publication server that allows you to create and publish signed statements …| NLnet Labs
This release introduces two fixes for the Krill Publication Server. If you only use Krill as an RPKI Certificate Authority and publish elsewhere, e.g. in an RPKI Publication Server provided by your RIR or NIR, then there is no need to update to this release. Firstly, this release fixes …| NLnet Labs
About one year ago we introduced a 1-Click App for Krill on the AWS Marketplace and DigitalOcean Marketplace. It was introduced in a time when installing and configuring Krill involved quite some steps. The goal was to allow operators to get started with Krill quickly, to gain operational experience with …| NLnet Labs
We are happy to introduce Krill 0.8.1 'The Gentle Art'. This release is less restrictive when creating ROAs, while still providing enough guidance to accurately reflect your routing intent. Krill automatically downloads BGP announcement information from RIPE RIS and uses this to analyse the known BGP announcements for …| NLnet Labs
We are happy to introduce Krill 0.8.0 'The Art of ROA Maintenance'. In this version we have added further refinements to the ROA management interface to give users the confidence that their authorisations accurately reflect their BGP announcements. The first of these improvements are warnings about ROAs that …| NLnet Labs
This release fixes an issue where BGP RIS Dump files that were not properly retrieved would cause a thread to choke. As this can lead to lock poisoning this type of event could cause other Krill processes to stop functioning properly. All users of Krill 0.7.0 and 0 …| NLnet Labs
We are incredibly excited that six months after the first release of Krill it already powers delegated RPKI for over 150 organisations. Today we are launching Krill 0.7.1 'Sobremesa', the biggest update yet of our open source RPKI Certificate Authority software. This version lets you create and maintain …| NLnet Labs
This post is part of our MANRS Basics series intended for non-experts interested in learning more about routing security.| MANRS
A step-by-step guide to running Delegated RPKI with Krill and publish ROAs with APNIC.| The NLnet Labs Blog
A step-by-step guide to running Delegated RPKI and publish ROAs with ARIN.| The NLnet Labs Blog
Merely doing RPKI ROV does not provide any guarantees where your packet ends up. We conducted an experiment where we look into the impact of RPKI ROV on whether the packet ends up in the intended location based on active beaconing with two servers.| The NLnet Labs Blog