[Sidrops] RPKIViews 2021-2025 Amalgamations: a near-complete capture of the entire RPKI

Job Snijders <job@bsd.nl> Fri, 23 January 2026 10:43 UTC

Return-Path: <job@instituut.net>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2A7CDABE8A77 for <sidrops@mail2.ietf.org>; Fri, 23 Jan 2026 02:43:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.877
X-Spam-Level:
X-Spam-Status: No, score=-1.877 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.017, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fYvy4GHu0_RM for <sidrops@mail2.ietf.org>; Fri, 23 Jan 2026 02:43:48 -0800 (PST)
Received: from mail-ej1-f54.google.com (mail-ej1-f54.google.com [209.85.218.54]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B0D3FABE8A72 for <sidrops@ietf.org>; Fri, 23 Jan 2026 02:43:48 -0800 (PST)
Received: by mail-ej1-f54.google.com with SMTP id a640c23a62f3a-b8715a4d9fdso267806666b.0 for <sidrops@ietf.org>; Fri, 23 Jan 2026 02:43:48 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769165020; x=1769769820; h=content-disposition:mime-version:message-id:subject:to:from:date :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=nKCNO+JzzeEtKmu71I9aHww2l4G6HtHfUfU4WYaIdrI=; b=cwZoyHa+P4MkBhjqeAZOUogHSHH8V+JG+ixINu5WRF3gUEr3BDYyvnvy49E2cvx31I laz7RUCp3yg0BJKbVZV7G6/2P1lfGfDF8PD3LIvMxF4AGpURQItWtb9w9au9vl2AUQg1 VS15IEioMWGlf0JqNJBN9DvyfaPccikFBMx7bpPSJI2LOluhRQQRusPU0ni17VRohATc 0PVBnX5uZ1pv2qoicA7MjwvBvB14paZTMg8VZPO60wyMWbkaB8yK6a4KdtBS7YZulY8f EDcKGaQNbykU6h0uuYjybZJCL33iqMKJa+qLwWM6n9dZ21onJ/8A54jb8BcIcEb3cZYb yIDw==
X-Gm-Message-State: AOJu0Yym0485V4r92F+JTreWpKkvmtRtqmSdoTurhZUwwDTOdasmOj+W gzdKkTYk1F0KdUthGov7IYZpuWDwXxyDD2OYOmIUTsyUQF6nwOnWK/7cJEfcF6c+uNEypRoE2Vg ffjOPVIE=
X-Gm-Gg: AZuq6aJ6l+nuTrwGwya0NziXcm4ot/iZmkA6MRyH/pODkBztxDu89nnp0/ZYoQoW45o krjvaCEA/dVNQhRiBpszrOdxn/OpwSwzJ5+OD+RPrmmttoWGvOJfPXSLPLNxMIjtOFXFw10/USg JsFZtJ283ATyizWVdw3AjFr0OLsQdVjncAOKF4SZMMbo5plgQYDTJnkX3nIW02ycHneba8VLpwS m+9XnyGxr5xewiPhSe+mcx7Knb/wLPbd4R3sCDbpOebownyoKxsSlXzIhraXRM69WHOrSWoeaJu FEkBfmUpw6w/l4dRvl15GYla/Vc70OrIuN4UVkYeTi9gLqB6YLpZR3oAoXAqA+VGgXaJJLo2OLE AwNcjU7nJjc5jc3TvzBwHs4N7xqwjPfecF0vqnFqXZcVGA5dm+z17Q7diauCWKu/7dTSj62D/WO nxMQ8AmEZz0k35mgCyX/PnqJINRGG3jDdzYqBdPoQHCJ+NTpB1cLD+6LICUDQJ/vs6tBFtnOR8L NhhAhnE8lL9pXGdKO06EOXeBrAGpbTImgwl4J+yOyjnNJy+vgz3aqGTPcmLFXhNb/L1VgxR
X-Received: by 2002:a17:907:2d2b:b0:b87:25a7:3ea0 with SMTP id a640c23a62f3a-b885ac75cc8mr167781566b.25.1769165019887; Fri, 23 Jan 2026 02:43:39 -0800 (PST)
Received: from feather.sobornost.net ([192.147.168.2]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-b885b3dac6esm90664166b.7.2026.01.23.02.43.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 23 Jan 2026 02:43:38 -0800 (PST)
Date: Fri, 23 Jan 2026 10:43:37 +0000
From: Job Snijders <job@bsd.nl>
To: sidrops@ietf.org
Message-ID: <aXNQ2Z_oV-tyWph-@feather.sobornost.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
X-Clacks-Overhead: GNU Erik Bais
Message-ID-Hash: DYES74MHUCT3FHEJRA4H4B35IUGXUQFM
X-Message-ID-Hash: DYES74MHUCT3FHEJRA4H4B35IUGXUQFM
X-MailFrom: job@instituut.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] RPKIViews 2021-2025 Amalgamations: a near-complete capture of the entire RPKI
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/vjTqjvWjqEggd6A84684i0WVXQ8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

Dear all,

The RPKI is an infrastructure which helps secure the global Internet
routing system. The RPKI is a distributed database. RPKIViews.org is a
global multi-perspective data collection initiative. I've normalized,
deduplicated, merged, sorted, and recompressed tens of terabytes of RPKI
data, resulting in handy datasets named the "RPKIViews Amalgamations".
These compact datasets together contain basically every ROA, ASPA, CRL,
Manifest, and Certificate that were issued in the last 5 years.

  RPKIViews 2021 Amalgamation, 46,507,392 RPKI objects
  doi: https://doi.org/10.5281/zenodo.18082494
  compressed: 33.8 gigabytes (uncompressed: 78.1 gigabytes).

  RPKIViews 2022 Amalgamation, 51,850,445 RPKI objects
  doi: https://doi.org/10.5281/zenodo.18327144
  compressed: 41.7 gigabytes (uncompressed: 110.2 gigabytes).

  RPKIViews 2023 Amalgamation, 57,286,485 RPKI objects
  doi: https://doi.org/10.5281/zenodo.18327429
  compressed: 48.7 gigabytes (uncompressed: 111.8 gigabytes).

  RPKIViews 2024 Amalgamation, 56,586,149 RPKI objects
  doi: https://doi.org/10.5281/zenodo.18328474
  compressed: 51.4 gigabytes (uncompressed: 115.5 gigabytes).

  RPKIViews 2025 Amalgamation, 61,524,413 RPKI objects
  doi: https://doi.org/10.5281/zenodo.18332099
  compressed: 58.4 gigabytes (uncompressed: 145.0 gigabytes)

The DER-encoded objects originally were fetched from publication servers
which were discovered using the Trust Anchor Locators of the following
Regional Internet Registries: AfriNIC, APNIC, ARIN, LACNIC, and RIPE
NCC. Not all objects contained within this dataset comply with the
requirements of modern day RPKI relying party implementations.

The following file naming scheme is used for the tar archive members:
every filename is the URL-safe Base64-encoded SHA-256 message digest of
the object's ASN.1 encoded content. For performance reasons, the
directory hierarchy is constructed using the last few bytes of the
filename. The file's recorded last-modification timestamp is constructed
following the procedure outlined in RFC 9589. The tar achive adheres to
the IEEE Std 100.2 POSIX.2 "USTAR" interchange format and is compressed
in "--long -19" Zstandard (RFC 8878) form. Individual objects can be
inspected as JSON with "rpki-client -jf ./path/to/object" (filemode).

Happy hacking & sleuthing! :-)

Kind regards,

Job