Inside a 14-month responsible disclosure with the RIPE NCC

This post covers the disclosure process for the vulnerabilities described in my RPKI exploit chain , through RIPE NCC&rsquo;s Responsible Disclosure Policy . Update 2026-06-10 : RIPE NCC published their own retrospective on this disclosure: What We Learned from a Multi-Service Vulnerability Disclosure , by their CISO Eleonora Petridou. What went well RIPE NCC engaged in good faith throughout. All…