[Sidrops] update on draft-spaghetti-sidrops-rpki-ccr (-04)

Job Snijders <job@bsd.nl> Thu, 16 October 2025 14:15 UTC

Date: Thu, 16 Oct 2025 14:15:11 +0000
From: Job Snijders <job@bsd.nl>
To: sidrops@ietf.org
Message-ID: <aPD974_yjUPCkarD@feather.sobornost.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Message-ID-Hash: ML57NUZGOQJEUJTBUIFEEX4NZPVRUBNB
Precedence: list
Subject: [Sidrops] update on draft-spaghetti-sidrops-rpki-ccr (-04)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/7hF_PKKI8Sv07B085KpCYWrMwEA>

Beste lieve mensen,

I'm pleased to share with you the next version of the CCR data
interchange format specification, good strides were made!

* The CCR format has been extended to explicitly expose issuer-subordinate
  CA relationships. I consider this feature extremely useful in context
  of distributed computing: with this relationship graph and Manifest
  sequence numbers in hand, multiple CCRs can be merged into a single
  coherent view while honoring revocations without delay. This was a
  breaking change from the previous format definition.

* The test vectors & running code have been updated to reflect the above
  change. If folks want to experiment, grab the 'latest' version of
  rpki-client via dockerhub or compile from source. Continuously updated
  CCR files can be fetched here: https://console.rpki-client.org/rpki.ccr

* It has been clarified that the CCR format is an
  EncapsulatedContentInfo structure (similar to Signed Object payloads).

* After having provided a lot of useful feedback off-list, Theo Buehler
  now joined the author team! (This be reflected in version -05)

I think the document is now well situated for a call for WG adoption...

     Let us know if you have any questions / comments!!111

Fun fact about issuer/subordinate relationships in the RPKI:

- Out of the 48,744 CAs, there currently are only 247 CAs that have
  issued CA resource certificates! Only ~ 00.005% of CAs do delegate
  authority onwards.

Kind regards,

Job


----- Forwarded message from internet-drafts@ietf.org -----

Date: Wed, 15 Oct 2025 11:48:49 -0700
From: internet-drafts@ietf.org
To: Bart Bakker <bbakker@ripe.net>, Job Snijders <job@bsd.nl>, Tim Bruijnzeels
	<tbruijnzeels@ripe.net>
Subject: New Version Notification for draft-spaghetti-sidrops-rpki-ccr-04.txt

A new version of Internet-Draft draft-spaghetti-sidrops-rpki-ccr-04.txt has
been successfully submitted by Job Snijders and posted to the
IETF repository.

Name:     draft-spaghetti-sidrops-rpki-ccr
Revision: 04
Title:    A Profile for Resource Public Key Infrastructure (RPKI) Canonical Cache Representation (CCR)
Date:     2025-10-15
Group:    Individual Submission
Pages:    18
URL:      https://www.ietf.org/archive/id/draft-spaghetti-sidrops-rpki-ccr-04.txt
Status:   https://datatracker.ietf.org/doc/draft-spaghetti-sidrops-rpki-ccr/
HTML:     https://www.ietf.org/archive/id/draft-spaghetti-sidrops-rpki-ccr-04.html
HTMLized: https://datatracker.ietf.org/doc/html/draft-spaghetti-sidrops-rpki-ccr
Diff:     https://author-tools.ietf.org/iddiff?url2=draft-spaghetti-sidrops-rpki-ccr-04

Abstract:

   This document specifies a Canonical Cache Representation (CCR)
   content type for use with the Resource Public Key Infrastructure
   (RPKI).  CCR is a DER-encoded data interchange format which can be
   used to represent various aspects of the state of a validated cache
   at a particular point in time.  The CCR profile is a compact and
   versatile format well-suited for a diverse set of applications such
   as audit trail keeping, validated payload dissemination, and
   analytics pipelines.



The IETF Secretariat



----- End forwarded message -----

[Sidrops] update on draft-spaghetti-sidrops-rpki-… Job Snijders