We plan to perform a switchover of the RIPE database primary instance, so we can perform patching on the server. We don't expect any downtime for Whois queries or updates. Posted on
May 05, 2026 - 12:24 CEST
Resolved -
This incident has been resolved.
May 5, 13:07 CEST
Identified -
We are currently investigating an issue that prevents delegated CAs from communicating with the RIPE NCC parent CA.
This issue does not affect the validity of delegated CAs that already have a current certificate. Publication by delegated CAs is also unaffected.
The BPKI TA certificate used in the RFC 8183 XML setup messages for delegated CAs, and the CRL included in RFC 6492 provisioning protocol messages signed by the RIPE NCC CA have expired.
The impact is as follows: Delegated CAs cannot be configured at the moment Existing delegated CAs may see the following error message: "RFC 6492 Issue: CMS is not valid: CRL nextUpdate time in the past" Existing delegated CAs cannot request certificates for updated resources Existing delegated CAs cannot perform an RPKI key rollover
As far as we understand, Krill verifies the validity period of the BPKI TA certificate during setup only, and then continues to trust the public key until it is told otherwise. Because of this we expect that the issues experienced by existing Krill CAs will be resolved when our system starts using updated CRLs in the RFC 6492 messages.
We are working on a fix. Because the fix is non-trivial we expect that this issue may persist for the next 12 to 24 hours.
We will provide a further update tomorrow morning.
May 4, 21:03 CEST
Resolved -
This incident has been resolved.
May 1, 08:59 CEST
Monitoring -
The problems appear to have been caused by temporary connectivity issues between our data queuing systems and the processing environment. Those issues now seem to be resolved. We will monitor the situation.
Apr 30, 23:29 CEST
Investigating -
There is currently an issue with the processing of incoming measurement results for RIPE Atlas. We are investigating the issue and will update this status message when we have more details to share.
Apr 30, 23:09 CEST
Resolved -
Our IRRd instances that we use to have a local copy of internet routing registry data have recovered. This final recovery resolves this incident for RIPEstat.
Apr 23, 11:37 CEST
Update -
We are continuing to monitor for any further issues.
Apr 23, 07:28 CEST
Monitoring -
RIPEstat experienced partial unavailability between 03:00 and 05:30 UTC due to a widespread Docker infrastructure issue at RIPE NCC. Because the issue also affected our monitoring infrastructure during this window, we cannot fully determine the scope of the impact. Services have recovered. We are investigating the root cause.
Apr 23, 07:28 CEST