Info! Please note that this translation has been provided at best effort, for your convenience. The English page remains the official version.

 

2025 is coming to an end, and we want to pause to reflect on our achievements this year as part of the NRO RPKI Program. A significant achievement was submitting the first draft specification to address concerns about RPKI Trust Anchors (TAs) claiming resources for which they are not authoritative (read more about this milestone). After presenting this draft to the SIDROPS IETF Working Group during the IETF 124 meeting, the RPKI Steering Group received input from the technical community and engaged with various stakeholders. The group is now discussing options for the next draft version. Look for updates in the new year and join the SIDROPS mailing list to participate in the discussions. Additionally, we published a series of joint RPKI baseline documents. The first document outlines the process of creating ROAs through each Regional Internet Registry (RIR) portal and is covered in a previous blog article.

The Number Resource Organization (NRO) has published a new reference page to help network operators and other members of the Internet technical community learn how to create Route Origin Authorizations (ROAs) through each of the five Regional Internet Registries (RIRs). The process of creating ROAs through each RIR portal brings together links to each RIR’s official ROA documentation, support contacts, and a high-level summary of differences across RIRs. It’s a small but meaningful step toward making the Resource Public Key Infrastructure (RPKI) ecosystem easier to navigate, more transparent, and ultimately more consistent across RIR regions. Why this matters for routing security RPKI is a critical building block for improving the security and resilience of the Internet routing system.

Advancing DNS Resilience Through the AFRINIC DNS Programme The AFRINIC DNS Programme is a long-term initiative designed to enhance Internet stability, improve DNS performance, and expand critical technical infrastructure across Africa and the globe. Through its operational and policy framework, AFRINIC supports authoritative DNS hosting for African country-code top-level domains (ccTLDs), reverse DNS (in-addr.arpa) zones, deployment of copy or Root servers, and a globally distributed anycast network that ensures resilient and secure DNS services. AFRINIC's infrastructure includes secondary nameservers for the reverse delegation zones specified in RFC 5855 (IN-ADDR.ARPA and IP6.ARPA), enhancing the robustness and reliability of global reverse DNS services. Major Milestone: Anycast DNS Node Successfully Deployed at Uganda IXP Advancing DNS Resilience Through the AFRINIC DNS Programme AFRINIC is pleased to announce the successful deployment of a new two Anycast DNS nodes at the Uganda Internet Exchange Point (U-IXP).

This document describes Resource Public Key Infrastructure (RPKI) related best practices and lessons learned.  It provides general recommendations aimed at supporting the implementation and operation of RPKI in diverse environments. These insights are drawn from practical experience and collaborative discussions but are not intended to be prescriptive. 

peeringdb ft

Welcome to our third half-yearly update. While we publish release notes with each update and promote new features and bug fixes on social media, these reports take a broader look at recent changes. You can find our previous half-yearly reports here and here. In 2025, PeeringDB’s board approved a 50% increase in spending on development and operations compared to 2024. All committees now have access to these resources, allowing us to complete more development work each month and devote more time to operational improvements.

 

The NRO RPKI Program aims to provide a more consistent and uniformly secure, resilient and reliable RPKI service. For 2025, the RPKI Steering Group, which includes RPKI experts from the five RIRs, set out to work on two main areas:

  • Enhancing the transparency, robustness and security of the RPKI system.
  • Increasing the consistency of the RPKI system user experience across RIRs.

 

The feedback period for the draft ‘Governance Document for the Recognition, Maintenance, and Derecognition of Regional Internet Registries’ (draft ‘RIR Governance Document’) has officially concluded. 

The consultation was open from 14 April to 27 May 2025, and allowed participants to share their opinions on the proposed text and requirements, as well as provide additional constructive comments.

Each RIR hosted at least one interactive informational session for their community during this period, where additional feedback may have been collected. Sessions were also hosted for ICANN communities, and an ICANN Public Comment process was held in parallel during the same period. The list of the sessions held and links to their archives are available on the NRO website.

This process focuses on reviewing and updating the fundamental principles of Internet Coordination Policy-2 (ICP-2), a key document that defines the criteria for recognizing and evaluating RIRs. The Number Resource Organization Number Council (NRO NC), which fulfils the role of the Address Supporting Organization Address Council (ASO AC), will discuss the feedback received from the RIR communities as well as the ICANN Public Comment process and use it to inform the next draft.

The NRO NC will publish the next draft for review to the RIR and ICANN communities in the later months of 2025.We would like to thank everyone who participated and provided feedback during this critical process. Your contributions are essential to ensuring that these principles reflect the needs and expectations of our community.

Author: Hervé Clément

Page 1 of 32