untrusted comment: verify with openbsd-76-base.pub
RWTkuwn4mbq8ovHAitbeAxheu/mv7eGBU0mUPVv1BshhAZlHQi2z9G1/AeZmuaYUwrRsQgdJwJk2OiUkBNjvtSN3xuwN4sum2A8=

OpenBSD 7.6 errata 014, April 9, 2025:

Incorrect internal RRDP state handling in rpki-client can lead to a
denial of service.

Apply by doing:
    signify -Vep /etc/signify/openbsd-76-base.pub -x 014_rpki.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install rpki-client:
    cd /usr/src/usr.sbin/rpki-client
    make obj
    make
    make install

Index: usr.sbin/rpki-client/repo.c
===================================================================
RCS file: /cvs/src/usr.sbin/rpki-client/repo.c,v
diff -u -p -r1.67 repo.c
--- usr.sbin/rpki-client/repo.c	19 Sep 2024 20:48:36 -0000	1.67
+++ usr.sbin/rpki-client/repo.c	7 Apr 2025 19:33:25 -0000
@@ -923,6 +923,7 @@ rrdp_clear(unsigned int id)
 
 	/* remove rrdp repository contents */
 	remove_contents(rr->basedir);
+	rr->state = REPO_LOADING;
 }
 
 /*