Internet routing system hacker-for-hire, active in OpenBSD & IETFhttps://bsky.app/profile/jobsnijders.bsky.socialhttps://bsky.app/profile/jobsnijders.bsky.social/post/3mhdye7pho22m“The RPKI is a distributed database” - a recording of my talk at IETF 125 "Tech Deep Dive on Routing Security" (url skips to DB part) https://www.youtube.com/watch?v=NRMjgwzbKjk&t=4415s18 Mar 2026 17:14 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3mhdye7pho22mhttps://bsky.app/profile/jobsnijders.bsky.social/post/3meys3jrwh22uSome random RPKI stats:: The typical RPKI validator instance consumed ~ 50 GB of network traffic in January 2026 but there was only 20GB of newly discovered RPKI material in that month: 40% efficiency rating for January 2026.16 Feb 2026 19:32 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3meys3jrwh22uhttps://bsky.app/profile/jobsnijders.bsky.social/post/3m4ozecdyg227At today’s IEPG I presented on a new way of distributing RPKI data globally http://iepg.org/2025-11-02-ietf124/slides-124-iepg-sessa-rethinking-rpki-data-distribution-a-different-way-to-split-the-bill-00.pdf03 Nov 2025 02:54 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m4ozecdyg227https://bsky.app/profile/jobsnijders.bsky.social/post/3m4bb6rsyfs2jAPNIC now supports "signing with resources". This is an RPKI-based mechanism to verify control over IPs and ASes. Useful for BYOIP! I helped develop this as an open standard & software implementation. Nice to see it finally reach the production environment :-) https://orbit.apnic.net/hyperkitty/list/apnic-services@apnic.net/thread/AMIULYGZ3IIVSUY3PY6CYYA7NLZD647Z/28 Oct 2025 15:37 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m4bb6rsyfs2jhttps://bsky.app/profile/jobsnijders.bsky.social/post/3m3rmb5ssls22OpenBSD 7.8 is out! This release includes the result of a fantastic engineering effort: a multi-threaded version of rpki-client. man.openbsd.org/rpki-client22 Oct 2025 10:12 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m3rmb5ssls22https://bsky.app/profile/jobsnijders.bsky.social/post/3m3rlyo6yvk22OpenBSD 7.8 is out! This release includes a little project of mine, a new implementation of the "watch" utility! This one has a real time display, can pause on error, highlight words & lines. man.openbsd.org/watch22 Oct 2025 10:07 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m3rlyo6yvk22https://bsky.app/profile/jobsnijders.bsky.social/post/3m3bzhuaiyc2lIn both the APNIC and RIPE region policy proposals to prune persistently nonfunctional RPKI delegations reached consensus. Important step in maintaining a healthy scalable ecosystem. https://www.ripe.net/publications/docs/ripe-847/ https://www.apnic.net/community/policy/proposals/prop-166/16 Oct 2025 05:26 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m3bzhuaiyc2lhttps://bsky.app/profile/jobsnijders.bsky.social/post/3m2jtzhx53s26OpenSSH 10.1 has been released! \o/ I contributed changes to the DSCP marking mechanism: if a SSH connection contains ONLY interactive sessions, ssh/sshd will automagically classify the packets for Expedited Forwarding (DSCP EF). https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-October/042178.html06 Oct 2025 14:44 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3m2jtzhx53s26https://bsky.app/profile/jobsnijders.bsky.social/post/3lzu2yaw7ls2vAnimation of an aspect of the Internet's routing system: RPKI manifest issuances throughout the day, a re-issuance makes the thingies ploink rightwards27 Sep 2025 22:50 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lzu2yaw7ls2vhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lzet5lbzpk26wow wow wow - rpki-client 9.6 has been released! This amazing release includes support for multi-threaded object validation, the new versatile CCR data interchange format (https://datatracker.ietf.org/doc/html/draft-spaghetti-sidrops-rpki-ccr), and many other improvements. Release notes here: https://www.rssf.nl/post/rpki-client-9-6-released21 Sep 2025 21:20 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lzet5lbzpk26https://bsky.app/profile/jobsnijders.bsky.social/post/3lyhwk3gh4k2vSuper happy to see this move forward! https://mailman.ripe.net/archives/list/routing-wg@ripe.net/thread/2T5IPND45U2XCWP5UUPUWTU4LMDVEOGI/ [contains quote post or other embedded content]10 Sep 2025 09:34 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lyhwk3gh4k2vhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lqx4gm5rhk2uI wrote a new new Policy Proposal: "Revocation of Persistently Non-functional Delegated RPKI CAs" Policy proposal itself: https://www.ripe.net/community/policies/proposals/2025-02/ Discussion: https://mailman.ripe.net/archives/list/routing-wg@ripe.net/thread/SW7HSAGK57X4WFCMF4YMU2SN6ABQTY5A/ Consider chiming in!06 Jun 2025 15:08 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lqx4gm5rhk2uhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lnsvwzrpd22qYay! OpenBSD 7.7 has been released! openbsd.org/77.html27 Apr 2025 18:45 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lnsvwzrpd22qhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lfrqx5we5c2nSpent the last 6 days hiking the gorgeous StauSeeSteig trail15 Jan 2025 12:22 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lfrqx5we5c2nhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lf7rtxyd6k2trpki-client 9.4 has been released! This release imposes restrictions on Trust Anchor certificate validity periods, includes ASPA support for BIRD2, protection against AS0 TALs, and various reliability improvements. Read the release notes here: https://cdn.openbsd.org/pub/OpenBSD/rpki-client/rpki-client-9.4.txt08 Jan 2025 08:50 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lf7rtxyd6k2thttps://bsky.app/profile/jobsnijders.bsky.social/post/3ldbylpbbyc2fNew (short) RFC: Detecting RPKI Repository Delta Protocol (RRDP) Session Desynchronization https://www.rfc-editor.org/rfc/rfc9697.html Rpki-client was the first to implement Ties’s clever concept14 Dec 2024 19:06 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3ldbylpbbyc2fhttps://bsky.app/profile/jobsnijders.bsky.social/post/3ld4dsfe5o22uToday marks the day: 1 month nicotine free! https://media.tenor.com/LWIHCDTlxcsAAAAC/i-dont-smoke-matt-smith.gif?hh=498&ww=49812 Dec 2024 13:10 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3ld4dsfe5o22uhttps://bsky.app/profile/jobsnijders.bsky.social/post/3lckkl4mffk27Today my latest RFC was published. It fixes a security issue in the RPKI distribution protocol: in the original RRDP specification it was possible for one repository operator to impose load on another repository operator. https://rfc-editor.org/rfc/rfc9674.html05 Dec 2024 11:23 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lckkl4mffk27https://bsky.app/profile/jobsnijders.bsky.social/post/3lbf2lks7o225insightful thread about SCION [contains quote post or other embedded content]20 Nov 2024 13:29 +0000at://did:plc:rcsof2ei5cbbp24scf76nyx2/app.bsky.feed.post/3lbf2lks7o225