Re: RPKI TAs

Hi all, We've also simplified our webpage: https://afrinic.net/rpki/tal And the URL to the TAL: https://rpki.afrinic.net/tal/afrinic.tal Cheers, Amreesh Phokeer AFRINIC On Thu, Aug 6, 2020 at 4:59 PM Randy Bush wrote: > > https://tal.rpki.ripe.net/ripe-ncc.tal (preferred) > > looks great

Re: RPKI TAs

> We've also simplified our webpage: > https://afrinic.net/rpki/tal > > And the URL to the TAL: > https://rpki.afrinic.net/tal/afrinic.tal thanks! wfm randy

Re: RPKI TAs

> https://tal.rpki.ripe.net/ripe-ncc.tal (preferred) looks great visually. stuffed in a dragon validator, just for qa. thanks! randy

Re: RPKI TAs

Hi Randy, all, We’ve updated our page: https://www.ripe.net/manage-ips-and-asns/resource-management/certification/ripe-ncc-rpki-trust-anchor-structure It now shows the correct

Re: RPKI TAs

> I dunno, 'straightforward' to me would mean the ARIN TA is installed by > default when you install a RPKI Cache Validator implementation uh, i want a trustable downlad of trust anchors. and it ain't from vendors. but yes, arin's legal dos it typical arin. but, if i ignore the bumph, i can

Re: RPKI TAs

While I certainly agree with you, I have a certainly-naive question - what the difference is between ARIN and RIPE's T: Aug 3 19:07:15 rpki-validator rpki-client[16164]: The RIPE NCC Certification Repository is subject to Terms and Conditions Aug 3 19:07:15 rpki-validator rpki-client[16164]:

Re: RPKI TAs

> On Aug 3, 2020, at 07:54 , Job Snijders wrote: > > On Mon, Aug 03, 2020 at 08:17:55AM -0500, John Kristoff wrote: >> On Sun, 2 Aug 2020 18:52:11 + >> Randy Bush wrote: >> >>> not to mention the ARIN stupidity >> >> Notwithstanding the RPA, downloading ARIN's TAL is straightforward:

Re: RPKI TAs

> why is it so hard that all RIRs make their TAL files available under > the same URL path but different hosts, e.g., https://ripe.net/rpki/tal, > https://arin.net/rpki/tal ? no, you are supposed to get TRUST material from alex's secret stash. sigh. it should be a dnssec lookup of ripe.net,

Re: RPKI TAs

On Mon, Aug 03, 2020 at 08:17:55AM -0500, John Kristoff wrote: > On Sun, 2 Aug 2020 18:52:11 + > Randy Bush wrote: > > > not to mention the ARIN stupidity > > Notwithstanding the RPA, downloading ARIN's TAL is straightforward: > > As documented here: > >

Re: RPKI TAs

On Sun, 2 Aug 2020 18:52:11 + Randy Bush wrote: > not to mention the ARIN stupidity Notwithstanding the RPA, downloading ARIN's TAL is straightforward: As documented here: One can wget, curl, or whatever this:

Re: RPKI TAs

On Mon, 3 Aug 2020, Alex Band wrote: > These are what we believe to be the correct, up-to-date RPKI TALs: > > https://github.com/NLnetLabs/routinator/tree/master/tals > why is it so hard that all RIRs make their TAL files available under the same URL path but different hosts, e.g.,

Re: RPKI TAs

I concur. Four out of five RIR Trust Anchor Locators were recently updated to allow fetching the Trust Anchor via an HTTPS URI, further removing the dependence on rsync. Sadly, most TALs are not clearly published anywhere and I had to get them though GitHub issues and emails to be able to

Re: RPKI TAs

> i kinda hacked with emacs and get > > rsync://rpki.ripe.net/ta/ripe-ncc-ta.cerpublic.key.info > > >

RPKI TAs

so i was trying to ensure i had a current set of TALs and was directed to https://www.ripe.net/manage-ips-and-asns/resource-management/certification/ripe-ncc-rpki-trust-anchor-structure the supposed TAL at the bottom of the page is pretty creative. anyone know what to do there? i kinda