A New NRO Resource for Network Operators Working Across Multiple RIRs - MANRS
Help for network operators to create Route Origin Authorizations (ROAs) through each of the five Regional Internet Registries (RIRs).| MANRS
Help for network operators to create Route Origin Authorizations (ROAs) through each of the five Regional Internet Registries (RIRs).| MANRS
Route server exposure at IXPs leaves peering LANs vulnerable to routing leaks and real-world DDoS attacks. In this article, we talk about how and why it matters.| RIPE Labs
We map where networks actually publish routing data - across RIR-run and third-party IRRs - and how that data is used in practice. Connecting our findings with RPKI growth and exploring regional patterns, we examine legacy space and operational risks to suggest clear clean-up priorities.| RIPE Labs
With record-breaking participation in Almaty, CAPIF 4 rallied network operators, IXPs, policymakers, and researchers to map Central Asia’s next steps. The message was clear: accelerate IPv6, deepen interconnection and measurement for resilience, and diversify paths to keep traffic closer to home.| RIPE Labs
No detours, no delays, and no outages — that’s the goal for research and education (R&E) networks powering today’s data-intensive science. To reach that goal, network operators need robust tools that provide enhanced visibility and operational awareness, helping them detect and defend against threats like route leaks, hijacks, and misconfigurations. UC San Diego’s Center for […] The post From Measurement to Mitigation: CAIDA and Internet2 Collaborate to Strengthen R&E Routing Se...| Internet2
The NRO RPKI Program aims to enhance the transparency, robustness and security of the RPKI system while also increasing the consistency of the RPKI system user experience across RIRs. Here's an update on our plans for the rest of 2025.| RIPE Labs
Refactored command line, simplified OpenID Connect configuration| NLnet Labs
Exploring Relying Party (RP) software synchronization delays and how this can impair the responsiveness of RPKI-based validation.| MANRS
We are pleased to announce the two releases of Krill, versions 0.13.2 ‘Be kind, rewind’ and 0.14.5 ‘Who dis? New Phone.’ Krill is a daemon for running delegated RPKI, featuring a Certificate Authority and a publication server that allows you to create and publish signed statements …| NLnet Labs
This release introduces two fixes for the Krill Publication Server. If you only use Krill as an RPKI Certificate Authority and publish elsewhere, e.g. in an RPKI Publication Server provided by your RIR or NIR, then there is no need to update to this release. Firstly, this release fixes …| NLnet Labs
About one year ago we introduced a 1-Click App for Krill on the AWS Marketplace and DigitalOcean Marketplace. It was introduced in a time when installing and configuring Krill involved quite some steps. The goal was to allow operators to get started with Krill quickly, to gain operational experience with …| NLnet Labs
We are happy to introduce Krill 0.8.1 'The Gentle Art'. This release is less restrictive when creating ROAs, while still providing enough guidance to accurately reflect your routing intent. Krill automatically downloads BGP announcement information from RIPE RIS and uses this to analyse the known BGP announcements for …| NLnet Labs
We are happy to introduce Krill 0.8.0 'The Art of ROA Maintenance'. In this version we have added further refinements to the ROA management interface to give users the confidence that their authorisations accurately reflect their BGP announcements. The first of these improvements are warnings about ROAs that …| NLnet Labs
This post is part of our MANRS Basics series intended for non-experts interested in learning more about routing security.| MANRS
A step-by-step guide to running Delegated RPKI with Krill and publish ROAs with APNIC.| The NLnet Labs Blog
A step-by-step guide to running Delegated RPKI and publish ROAs with ARIN.| The NLnet Labs Blog
Merely doing RPKI ROV does not provide any guarantees where your packet ends up. We conducted an experiment where we look into the impact of RPKI ROV on whether the packet ends up in the intended location based on active beaconing with two servers.| The NLnet Labs Blog
