See you soon @dnsoarc 47.

#stickers #DNS #LoveDNS #DNSSEC @nlnetlabs

Does your organisation rely on NLnet Labs? If you have budget left this year, please consider using some of it to support our #OpenSource work.

As an independent non-profit foundation, we fund maintenance of our open-source software through support agreements, new development through grants, and research and policy work from our reserves.

Take out a support agreement, sponsor a feature, or make a donation. If someone else manages the budget, please share this with them.
https://nlnetlabs.nl/funding/

They're really great at writing software over at @nlnetlabs , but their release names are mouthfuls. Here are today's catches (and it's Friday!):

"Wait Until Your Mother Hears About This", "Full of Grace", and "We Have Stickers"

:-)

And that's not all! Release-Friday ends with a massive feature release for Cascade, just in time for @dnsoarc 47. The beta-8 ‘We have stickers’ release is joined by releases of dnst and the cascade-hsm-bridge.

This release sees significant changes to the key manager and HSM support. Now RSASHA512, ECDSAP384SHA384, ED25519 and ED448 are also supported for HSMs, with some caveats.

https://community.nlnetlabs.nl/t/cascade-0-1-0-beta8-we-have-stickers-dnst-0-3-0-alpha-cascade-hsm-bridge-0-2-0-beta2/3503

#DNS #LoveDNS #DNSSEC

And we have more #RPKI news, because Krill 0.16.2 ‘Wait Until Your Mother Hears About This’ was also released on what you can call a classic NLnet Labs release-Friday.

This release deals with naughty child-CAs who keep requesting new certificates. Now, Krill doesn't re-issue child certificates if none of the content has changed and the current certificates are still valid for at least a few more (configurable) weeks.

https://github.com/NLnetLabs/krill/releases/tag/v0.16.2

Just when we thought doing CVE security releases is our life now, we're proud, excited and relieved to offer you Routinator 0.16.0 ‘Full of Grace’.

Some options are now enabled by default, like ASPA and BGPsec, as well as strict validation mode because the Internet is a more dangerous place then ever.

We also added some new features, such as Resource Signed Checklists (RSC, RFC 9323) and SLURM v2 which adds filtering and adding ASPA assertions. And, a new UI!

https://github.com/NLnetLabs/routinator/releases/tag/v0.16.0

#RPKI

Here are some quick previews for the new look of the Roto documentation (following the new style of all our docs at @nlnetlabs).

I have also taken some time to do some small cleanup and improvements in a few places. For example, the list with types in the standard library now has some descriptions and use natural sorting.

You can check it out here: https://roto.docs.nlnetlabs.nl/en/latest

#roto

Now that community.nlnetlabs.nl has a new coat of paint, please do come on over, because we'd really like to hear from you! We even wrote a blog about all the things we want to hear from you about:

https://blog.nlnetlabs.nl/we-want-your-feedback/

Spent the last couple of days on a matching coat of paint for https://community.nlnetlabs.nl, this morning we received stickers, now creating some animations...

I really need to stop tinkering with our rebranding adventure. 😄

Because we care about our users too, NLnet Labs solved this problem with symmetry. 😉

Make space on your laptops @dnsoarc, @ietf and @denog attendees—we're packing new stickers!* 🧡

*yes, also hexagons! ⬢

#OpenSource #merch

Converting the Keynote presentation template I made to OpenDocument Presentation format for my dear colleagues is a test of patience and persistence.

#FridayFun

One of the new things in Routinator v0.16.0 is an improved connections page, which now shows you the logs per publication point. This allows you to quickly figure out why, for example, a publication point isn't working. Believe it or not, it's not always DNS.

Of course we have a live demo as well: https://nate.nlnetlabs.nl/ui/connections

We released the first release candidate for the next feature release of Routinator, 0.16.0-rc1.

The main features are SLURM support for ASPA and support for validating Resource Signed Checklists (RSCs). We also updated the bundled UI which now can show you all the repository issues.

For the detailed release notes, see https://github.com/NLnetLabs/routinator/releases/tag/v0.16.0-rc1

This is cool! Fun fact: Roto also has partial precedence! The `&&` and `||` don't have precedence between them and comparison operators (`==`, `<`, etc.) also cannot be chained.

https://ziglang.org/devlog/2026/#2026-10-24

#roto

🚨 Security update: Routinator 0.15.3 is now available.

This release fixes several security issues. These security fixes primarily fix some cases where someone could make Routinator exit or become unavailable. They have been assigned CVE-2026-72752 till -72758.

https://community.nlnetlabs.nl/t/routinator-0-15-3-until-it-ends-there-is-no-end-released/3496

And @terts and @jasper are on their way to Sofia to go to RIPE93.

Find us to talk about routing and DNS security. Or memory-safe programming languages, or embedding programming languages in applications, or, or…

Any other subject, we’d like to think we’re pretty versatile

Dankjewel @bert_hubert bij @bnrnieuwsradio: kleine organisaties (zoals @nlnetlabs) die software ontwikkelen waar de halve wereld op draait, maar dat weet niemand. 💚

Trying to make an elegant hexagon version of the new @nlnetlabs logo because we're already getting requests from DNS OARC, RIPE and FOSDEM attendees. 😅

NSD 4.15.4 is now available.

In addition to a number of bug fixes, this release of our authoritative DNS server adds UNECE and ISO RR types and a report-channel config option to return a Report-Channel EDNS option in responses.

Also, a catalog-group-pattern option to limit the patterns from which catalog consumer member zones may be configured by using the group property. Thanks to Qifan Zhang, Palo Alto Networks, for the suggestion.

https://community.nlnetlabs.nl/t/nsd-4-15-4-released/3494

#DNS #OpenSource

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495

#DNS #OpenSource #Security #CVE