This security policy for rpki-client applies to the rpki-client-portable repository and the version of rpki-client in OpenBSD.

Backports for security and reliability fixes are only provided for OpenBSD. They usually result in a new portable release at the same time.

Please send a mail to security@rpki-client.org.

• Include OS version and the rpki-client version number: rpki-client -V.
• Please strive for brevity and focus on the bug itself.
• A short summary written by a human with a modicum of understanding is strongly preferred over any generated output.
• If you refer to line numbers, please mention the RCS tag (/* $OpenBSD: ... $ */) at the top of the relevant source files.