[routing-wg] Code Audit Report for RPKI

Dear colleagues,

Continuing from the work we started last year on strengthening our security compliance, we have asked an external party to carry out a security audit of our RPKI code. This was an important element in preparation for open sourcing the RPKI core code, which will be done in early January 2022.

We are publishing the security report for the second year in an effort to increase transparency and trust in the RPKI system. On our website [0], you will now find the code audit report written by Radically Open Security 2021 and our response to their findings.

We hope you will find these reports useful, and we look forward to your feedback.

[0] - https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/security-and-compliance

Kind regards, 
Bart Bakker
Senior Software Engineer
RIPE NCC