We are happy to announce the latest release of Routinator, version 0.8.2 ‘Once More, with Feeling.’
Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow.
This release adjusts the validation behaviour of Routinator. As the rules proposed by draft-ietf-sidrops-6486bis and implemented by Routinator since version 0.8.0 turned out to be too strict, validation has been relaxed again. A CA is now only rejected and all its objects ignored if the manifest or CRL are invalid or if any of the objects listed on the manifest are either missing or have a different hash. Previously, a CA was rejected entirely if objects themselves where invalid for any reason, including cases such as expired child certificates.
All users of Routinator 0.8.0 and 0.8.1 are encouraged to upgrade to this release.