The Internet Society is excited to embark on a new initiative supported by the 2024 ARIN Community Grant Program to explore the potential applications of Resource Public Key Infrastructure (RPKI) Signed Checklists (RSCs).
This project seeks to deepen our understanding of RSCs, as outlined in RFC 9323, evaluate their impact on Internet security, and propose a roadmap for their broader adoption.
Take the survey
Understanding RPKI Signed Checklists (RSC)
RPKI is a critical framework designed to secure the global Internet routing system by ensuring the authenticity and integrity of Internet Number Resources. RSC is a new standard that provides cryptographic attestations to verify the validity of digital transactions using RPKI.
Three key objectives drive this initiative:
- Analyzing the technical and governance implications of RSCs by conducting an in-depth review of RFC 9323 to identify the technical specifications and governance structures needed to support RSC adoption.
- Identifying use cases and adoption strategies by documenting real-world scenarios where RSCs can be effectively applied to enhance security and reliability within Internet operations, such as Bring Your Own IP (BYOIP) from cloud providers, Letter of Authorizations (LOAs), and IP Leasing.
- Developing strategic recommendations by synthesizing our findings into a strategic framework to guide the integration of RSC into the broader Internet security ecosystem.
An impact assessment will complement this, evaluating RSC’s benefits in improving security and operational efficiency while identifying any gaps or vulnerabilities in its implementation.
Additionally, we will engage with key stakeholders, including the Number Resource Organization (NRO) and Regional Internet Registries (RIRs), to assess operational readiness and gather valuable feedback on RSC deployment. Community outreach and consensus-building efforts will ensure a well-rounded perspective on RSC’s implications, foster collaboration, and identify necessary policy or infrastructure updates.
The outcomes of this project will benefit multiple stakeholders, including Internet resource holders, RIRs, NRO, and the wider technical community.
Indirectly, Internet Society members, general Internet users, and the broader industry will also gain from enhanced security and improved trust in Internet transactions.
Network Operators! Share Your Views on RSCs
At APRICOT 2025, we surveyed 35 network operators to understand how they perceive RSC, identify potential use cases, and address real-world challenges. While these results do not completely represent the entire region, they include a diverse group of major operators, such as Telstra, Telekom Malaysia, and Vocus, which offer valuable industry perspectives.
We are still collecting feedback through this survey. Your responses will help shape best practices, inform discussions, and guide further standardization efforts.
By leveraging this research, we aim to support a more secure, stable, and trustworthy Internet for all. Stay tuned for updates as we advance this important initiative, shaping the future of Internet security with RSC.
Watch my interim report presentation at ARIN 55.
Image by Borko Manigoda from Pixabay