"start CRL update" - where it comes from?

infabo · November 10, 2024, 7:22am

Out of curiosity, I enabled logging for all topics, excluding some of the particularly “noisy” ones:

/system/logging/add prefix=GENERAL topics=!ssh,!lte,!wireless,!ipsec,!l2tp,!dns

Now, I’m seeing these “start CRL update” messages appearing. There are two requests every hour.

[ro@uter] > log/print where message~"CRL"
11-09 21:13:11 certificate,debug GENERAL: start CRL update 
11-09 21:13:40 certificate,debug GENERAL: start CRL update 
11-09 22:13:11 certificate,debug GENERAL: start CRL update 
11-09 22:13:40 certificate,debug GENERAL: start CRL update 
11-09 23:13:11 certificate,debug GENERAL: start CRL update 
11-09 23:13:40 certificate,debug GENERAL: start CRL update 
00:13:11 certificate,debug GENERAL: start CRL update 
00:13:40 certificate,debug GENERAL: start CRL update 
01:13:11 certificate,debug GENERAL: start CRL update 
01:13:40 certificate,debug GENERAL: start CRL update 
02:13:11 certificate,debug GENERAL: start CRL update 
02:13:40 certificate,debug GENERAL: start CRL update 
03:13:11 certificate,debug GENERAL: start CRL update 
03:13:40 certificate,debug GENERAL: start CRL update 
04:13:11 certificate,debug GENERAL: start CRL update 
04:13:40 certificate,debug GENERAL: start CRL update 
05:13:11 certificate,debug GENERAL: start CRL update 
05:13:40 certificate,debug GENERAL: start CRL update 
06:13:11 certificate,debug GENERAL: start CRL update 
06:13:40 certificate,debug GENERAL: start CRL update 
07:13:11 certificate,debug GENERAL: start CRL update 
07:13:40 certificate,debug GENERAL: start CRL update

After researching, I found this information in the manual: https://help.mikrotik.com/docs/spaces/ROS/pages/2555969/Certificates#Certificates-Settings
It explains that you can configure whether the CRL is downloaded automatically. By default it is Disabled. Even “use-crl” is disabled by default. In a forum post, I saw someone mention that the CRL is downloaded every hour when “crl-download” is enabled.

However, I don’t have “crl-download” enabled:

[ro@uter] > /certificate/export
# 2024-11-10 08:17:03 by RouterOS 7.16.1
# software id = removed
#
# model = D53G-5HacD2HnD
# serial number = removed

To be verbose:

[ro@uter] > /certificate/settings/print 
  crl-download: no
       crl-use: no
     crl-store: ram

So, where are these CRL update logs coming from? Any ideas how I can track this down further?

voljka · November 10, 2024, 12:10pm

may be mikrotik cloud services, software updates use certificates and frequently monitor crl list? if crl download goes over http you can sniff it out

infabo · December 6, 2024, 8:31am

Since updating to 7.16.2 these CRL messages are going crazy:

[ro@uter] > log/print where message~"CRL"
02:20:05 certificate,debug GENERAL: start CRL update 
02:21:05 certificate,debug GENERAL: start CRL update 
02:22:05 certificate,debug GENERAL: start CRL update 
02:23:05 certificate,debug GENERAL: start CRL update 
02:24:05 certificate,debug GENERAL: start CRL update 
02:25:05 certificate,debug GENERAL: start CRL update 
02:26:05 certificate,debug GENERAL: start CRL update 
02:27:05 certificate,debug GENERAL: start CRL update 
02:28:05 certificate,debug GENERAL: start CRL update 
02:29:05 certificate,debug GENERAL: start CRL update 
02:30:05 certificate,debug GENERAL: start CRL update 
02:31:05 certificate,debug GENERAL: start CRL update 
02:32:05 certificate,debug GENERAL: start CRL update 
02:33:05 certificate,debug GENERAL: start CRL update 
02:34:05 certificate,debug GENERAL: start CRL update 
02:35:05 certificate,debug GENERAL: start CRL update 
02:36:05 certificate,debug GENERAL: start CRL update 
02:37:05 certificate,debug GENERAL: start CRL update 
02:38:05 certificate,debug GENERAL: start CRL update 
02:39:05 certificate,debug GENERAL: start CRL update 
02:40:05 certificate,debug GENERAL: start CRL update 
02:41:05 certificate,debug GENERAL: start CRL update 
02:42:05 certificate,debug GENERAL: start CRL update 
02:43:05 certificate,debug GENERAL: start CRL update 
02:44:05 certificate,debug GENERAL: start CRL update 
02:45:05 certificate,debug GENERAL: start CRL update 
02:46:05 certificate,debug GENERAL: start CRL update 
02:47:05 certificate,debug GENERAL: start CRL update 
02:48:05 certificate,debug GENERAL: start CRL update 
02:49:05 certificate,debug GENERAL: start CRL update 
02:50:05 certificate,debug GENERAL: start CRL update 
02:51:05 certificate,debug GENERAL: start CRL update 
02:52:05 certificate,debug GENERAL: start CRL update 
02:53:05 certificate,debug GENERAL: start CRL update 
02:54:05 certificate,debug GENERAL: start CRL update 
02:55:05 certificate,debug GENERAL: start CRL update 
02:56:05 certificate,debug GENERAL: start CRL update 
02:57:05 certificate,debug GENERAL: start CRL update 
02:58:05 certificate,debug GENERAL: start CRL update 
02:59:05 certificate,debug GENERAL: start CRL update 
03:00:05 certificate,debug GENERAL: start CRL update 
03:01:05 certificate,debug GENERAL: start CRL update 
03:02:05 certificate,debug GENERAL: start CRL update 
03:03:05 certificate,debug GENERAL: start CRL update 
03:04:05 certificate,debug GENERAL: start CRL update 
03:05:05 certificate,debug GENERAL: start CRL update 
03:06:05 certificate,debug GENERAL: start CRL update 
03:07:05 certificate,debug GENERAL: start CRL update 
03:08:05 certificate,debug GENERAL: start CRL update 
03:09:05 certificate,debug GENERAL: start CRL update 
03:10:05 certificate,debug GENERAL: start CRL update 
03:11:05 certificate,debug GENERAL: start CRL update 
03:12:05 certificate,debug GENERAL: start CRL update 
03:13:05 certificate,debug GENERAL: start CRL update 
03:14:05 certificate,debug GENERAL: start CRL update 
03:15:05 certificate,debug GENERAL: start CRL update 
03:16:05 certificate,debug GENERAL: start CRL update 
03:17:05 certificate,debug GENERAL: start CRL update 
03:18:05 certificate,debug GENERAL: start CRL update 
03:19:05 certificate,debug GENERAL: start CRL update 
03:20:05 certificate,debug GENERAL: start CRL update 
03:21:05 certificate,debug GENERAL: start CRL update 
03:22:05 certificate,debug GENERAL: start CRL update 
03:23:05 certificate,debug GENERAL: start CRL update 
03:24:05 certificate,debug GENERAL: start CRL update 
03:25:05 certificate,debug GENERAL: start CRL update 
03:26:05 certificate,debug GENERAL: start CRL update 
03:27:05 certificate,debug GENERAL: start CRL update 
03:28:05 certificate,debug GENERAL: start CRL update 
03:29:05 certificate,debug GENERAL: start CRL update 
03:30:05 certificate,debug GENERAL: start CRL update 
03:31:05 certificate,debug GENERAL: start CRL update 
03:32:05 certificate,debug GENERAL: start CRL update 
03:33:05 certificate,debug GENERAL: start CRL update 
03:34:05 certificate,debug GENERAL: start CRL update 
03:35:05 certificate,debug GENERAL: start CRL update 
03:36:05 certificate,debug GENERAL: start CRL update 
03:37:05 certificate,debug GENERAL: start CRL update 
03:38:05 certificate,debug GENERAL: start CRL update 
03:39:05 certificate,debug GENERAL: start CRL update 
03:40:05 certificate,debug GENERAL: start CRL update 
03:41:05 certificate,debug GENERAL: start CRL update 
03:42:05 certificate,debug GENERAL: start CRL update 
03:43:05 certificate,debug GENERAL: start CRL update 
03:44:05 certificate,debug GENERAL: start CRL update 
03:45:05 certificate,debug GENERAL: start CRL update 
03:46:05 certificate,debug GENERAL: start CRL update 
03:47:05 certificate,debug GENERAL: start CRL update 
03:48:05 certificate,debug GENERAL: start CRL update 
03:49:05 certificate,debug GENERAL: start CRL update 
03:50:05 certificate,debug GENERAL: start CRL update 
03:51:05 certificate,debug GENERAL: start CRL update 
03:52:05 certificate,debug GENERAL: start CRL update 
03:53:05 certificate,debug GENERAL: start CRL update 
03:54:05 certificate,debug GENERAL: start CRL update 
03:55:05 certificate,debug GENERAL: start CRL update 
03:56:05 certificate,debug GENERAL: start CRL update 
03:57:05 certificate,debug GENERAL: start CRL update 
03:58:05 certificate,debug GENERAL: start CRL update 
03:59:05 certificate,debug GENERAL: start CRL update 
04:00:05 certificate,debug GENERAL: start CRL update 
04:01:05 certificate,debug GENERAL: start CRL update 
04:02:05 certificate,debug GENERAL: start CRL update 
04:03:05 certificate,debug GENERAL: start CRL update 
04:04:05 certificate,debug GENERAL: start CRL update 
04:05:05 certificate,debug GENERAL: start CRL update 
04:06:05 certificate,debug GENERAL: start CRL update 
04:07:05 certificate,debug GENERAL: start CRL update 
04:08:05 certificate,debug GENERAL: start CRL update 
04:09:05 certificate,debug GENERAL: start CRL update 
04:10:05 certificate,debug GENERAL: start CRL update 
04:11:05 certificate,debug GENERAL: start CRL update 
04:12:05 certificate,debug GENERAL: start CRL update 
04:13:05 certificate,debug GENERAL: start CRL update 
04:14:05 certificate,debug GENERAL: start CRL update 
04:15:05 certificate,debug GENERAL: start CRL update 
04:16:05 certificate,debug GENERAL: start CRL update 
04:17:05 certificate,debug GENERAL: start CRL update 
04:18:05 certificate,debug GENERAL: start CRL update 
04:19:05 certificate,debug GENERAL: start CRL update 
04:20:05 certificate,debug GENERAL: start CRL update 
04:21:05 certificate,debug GENERAL: start CRL update 
04:22:05 certificate,debug GENERAL: start CRL update 
04:23:05 certificate,debug GENERAL: start CRL update 
04:24:05 certificate,debug GENERAL: start CRL update 
04:25:05 certificate,debug GENERAL: start CRL update 
04:26:05 certificate,debug GENERAL: start CRL update 
04:27:05 certificate,debug GENERAL: start CRL update 
04:28:05 certificate,debug GENERAL: start CRL update 
04:29:05 certificate,debug GENERAL: start CRL update 
04:30:05 certificate,debug GENERAL: start CRL update 
04:31:05 certificate,debug GENERAL: start CRL update 
04:32:05 certificate,debug GENERAL: start CRL update 
04:33:05 certificate,debug GENERAL: start CRL update 
04:34:05 certificate,debug GENERAL: start CRL update 
04:35:05 certificate,debug GENERAL: start CRL update 
04:36:05 certificate,debug GENERAL: start CRL update 
04:37:05 certificate,debug GENERAL: start CRL update 
04:38:05 certificate,debug GENERAL: start CRL update 
04:39:05 certificate,debug GENERAL: start CRL update 
04:40:05 certificate,debug GENERAL: start CRL update 
04:41:05 certificate,debug GENERAL: start CRL update 
04:42:05 certificate,debug GENERAL: start CRL update 
04:43:05 certificate,debug GENERAL: start CRL update 
04:44:05 certificate,debug GENERAL: start CRL update 
04:45:05 certificate,debug GENERAL: start CRL update 
04:46:05 certificate,debug GENERAL: start CRL update 
04:47:05 certificate,debug GENERAL: start CRL update 
04:48:05 certificate,debug GENERAL: start CRL update 
04:49:05 certificate,debug GENERAL: start CRL update 
04:50:05 certificate,debug GENERAL: start CRL update 
04:51:05 certificate,debug GENERAL: start CRL update 
04:52:05 certificate,debug GENERAL: start CRL update 
04:53:05 certificate,debug GENERAL: start CRL update 
04:54:05 certificate,debug GENERAL: start CRL update 
04:55:05 certificate,debug GENERAL: start CRL update 
04:56:05 certificate,debug GENERAL: start CRL update 
04:57:05 certificate,debug GENERAL: start CRL update 
04:58:05 certificate,debug GENERAL: start CRL update 
04:59:05 certificate,debug GENERAL: start CRL update 
05:00:05 certificate,debug GENERAL: start CRL update 
05:01:05 certificate,debug GENERAL: start CRL update 
05:02:05 certificate,debug GENERAL: start CRL update 
05:03:05 certificate,debug GENERAL: start CRL update 
05:04:05 certificate,debug GENERAL: start CRL update 
05:05:05 certificate,debug GENERAL: start CRL update 
05:06:05 certificate,debug GENERAL: start CRL update 
05:07:05 certificate,debug GENERAL: start CRL update 
05:08:05 certificate,debug GENERAL: start CRL update 
05:09:05 certificate,debug GENERAL: start CRL update 
05:10:05 certificate,debug GENERAL: start CRL update 
05:11:05 certificate,debug GENERAL: start CRL update 
05:12:05 certificate,debug GENERAL: start CRL update 
05:13:05 certificate,debug GENERAL: start CRL update 
05:14:05 certificate,debug GENERAL: start CRL update 
05:15:05 certificate,debug GENERAL: start CRL update 
05:16:05 certificate,debug GENERAL: start CRL update 
05:17:05 certificate,debug GENERAL: start CRL update 
05:18:05 certificate,debug GENERAL: start CRL update 
05:19:05 certificate,debug GENERAL: start CRL update 
05:20:05 certificate,debug GENERAL: start CRL update 
05:21:05 certificate,debug GENERAL: start CRL update 
05:22:05 certificate,debug GENERAL: start CRL update 
05:23:05 certificate,debug GENERAL: start CRL update 
05:24:05 certificate,debug GENERAL: start CRL update 
05:25:05 certificate,debug GENERAL: start CRL update 
05:26:05 certificate,debug GENERAL: start CRL update 
05:27:05 certificate,debug GENERAL: start CRL update 
05:28:05 certificate,debug GENERAL: start CRL update 
05:29:05 certificate,debug GENERAL: start CRL update 
05:30:05 certificate,debug GENERAL: start CRL update 
05:31:05 certificate,debug GENERAL: start CRL update 
05:32:05 certificate,debug GENERAL: start CRL update 
05:33:05 certificate,debug GENERAL: start CRL update 
05:34:05 certificate,debug GENERAL: start CRL update 
05:35:05 certificate,debug GENERAL: start CRL update 
05:36:05 certificate,debug GENERAL: start CRL update 
05:37:05 certificate,debug GENERAL: start CRL update 
05:38:05 certificate,debug GENERAL: start CRL update 
05:39:05 certificate,debug GENERAL: start CRL update 
05:40:05 certificate,debug GENERAL: start CRL update 
05:41:05 certificate,debug GENERAL: start CRL update 
05:42:05 certificate,debug GENERAL: start CRL update 
05:43:05 certificate,debug GENERAL: start CRL update 
05:44:05 certificate,debug GENERAL: start CRL update 
05:45:05 certificate,debug GENERAL: start CRL update 
05:46:05 certificate,debug GENERAL: start CRL update 
05:47:05 certificate,debug GENERAL: start CRL update 
05:48:05 certificate,debug GENERAL: start CRL update 
05:49:05 certificate,debug GENERAL: start CRL update 
05:50:05 certificate,debug GENERAL: start CRL update 
05:51:05 certificate,debug GENERAL: start CRL update 
05:52:05 certificate,debug GENERAL: start CRL update 
05:53:05 certificate,debug GENERAL: start CRL update 
05:54:05 certificate,debug GENERAL: start CRL update 
05:55:05 certificate,debug GENERAL: start CRL update 
05:56:05 certificate,debug GENERAL: start CRL update 
05:57:05 certificate,debug GENERAL: start CRL update 
05:58:05 certificate,debug GENERAL: start CRL update 
05:59:05 certificate,debug GENERAL: start CRL update 
06:00:05 certificate,debug GENERAL: start CRL update 
06:01:05 certificate,debug GENERAL: start CRL update 
06:02:05 certificate,debug GENERAL: start CRL update 
06:03:05 certificate,debug GENERAL: start CRL update 
06:04:05 certificate,debug GENERAL: start CRL update 
06:05:05 certificate,debug GENERAL: start CRL update 
06:06:05 certificate,debug GENERAL: start CRL update 
06:07:05 certificate,debug GENERAL: start CRL update 
06:08:05 certificate,debug GENERAL: start CRL update 
06:09:05 certificate,debug GENERAL: start CRL update 
06:10:05 certificate,debug GENERAL: start CRL update 
06:11:05 certificate,debug GENERAL: start CRL update 
06:12:05 certificate,debug GENERAL: start CRL update 
06:13:05 certificate,debug GENERAL: start CRL update 
06:14:05 certificate,debug GENERAL: start CRL update 
06:15:05 certificate,debug GENERAL: start CRL update 
06:16:05 certificate,debug GENERAL: start CRL update 
06:17:05 certificate,debug GENERAL: start CRL update 
06:18:05 certificate,debug GENERAL: start CRL update 
06:19:05 certificate,debug GENERAL: start CRL update 
06:20:05 certificate,debug GENERAL: start CRL update 
06:21:05 certificate,debug GENERAL: start CRL update 
06:22:05 certificate,debug GENERAL: start CRL update 
06:23:05 certificate,debug GENERAL: start CRL update 
06:24:05 certificate,debug GENERAL: start CRL update 
06:25:05 certificate,debug GENERAL: start CRL update 
06:26:05 certificate,debug GENERAL: start CRL update 
06:27:05 certificate,debug GENERAL: start CRL update 
06:28:05 certificate,debug GENERAL: start CRL update 
06:29:05 certificate,debug GENERAL: start CRL update 
06:30:05 certificate,debug GENERAL: start CRL update 
06:31:05 certificate,debug GENERAL: start CRL update 
06:32:05 certificate,debug GENERAL: start CRL update 
06:33:05 certificate,debug GENERAL: start CRL update 
06:34:05 certificate,debug GENERAL: start CRL update 
06:35:05 certificate,debug GENERAL: start CRL update 
06:36:05 certificate,debug GENERAL: start CRL update 
06:37:05 certificate,debug GENERAL: start CRL update 
06:38:05 certificate,debug GENERAL: start CRL update 
06:39:05 certificate,debug GENERAL: start CRL update 
06:40:05 certificate,debug GENERAL: start CRL update 
06:41:05 certificate,debug GENERAL: start CRL update 
06:42:05 certificate,debug GENERAL: start CRL update 
06:43:05 certificate,debug GENERAL: start CRL update 
06:44:05 certificate,debug GENERAL: start CRL update 
06:45:05 certificate,debug GENERAL: start CRL update 
06:46:05 certificate,debug GENERAL: start CRL update 
06:47:05 certificate,debug GENERAL: start CRL update 
06:48:05 certificate,debug GENERAL: start CRL update 
06:49:05 certificate,debug GENERAL: start CRL update 
06:50:05 certificate,debug GENERAL: start CRL update 
06:51:05 certificate,debug GENERAL: start CRL update 
06:52:05 certificate,debug GENERAL: start CRL update 
06:53:05 certificate,debug GENERAL: start CRL update 
06:54:05 certificate,debug GENERAL: start CRL update 
06:55:05 certificate,debug GENERAL: start CRL update 
06:56:05 certificate,debug GENERAL: start CRL update 
06:57:05 certificate,debug GENERAL: start CRL update 
06:58:05 certificate,debug GENERAL: start CRL update 
06:59:05 certificate,debug GENERAL: start CRL update 
07:00:05 certificate,debug GENERAL: start CRL update 
07:01:05 certificate,debug GENERAL: start CRL update 
07:02:05 certificate,debug GENERAL: start CRL update 
07:03:05 certificate,debug GENERAL: start CRL update 
07:04:05 certificate,debug GENERAL: start CRL update 
07:05:05 certificate,debug GENERAL: start CRL update 
07:06:05 certificate,debug GENERAL: start CRL update 
07:07:05 certificate,debug GENERAL: start CRL update 
07:08:05 certificate,debug GENERAL: start CRL update 
07:09:06 certificate,debug GENERAL: start CRL update 
07:10:06 certificate,debug GENERAL: start CRL update 
07:11:06 certificate,debug GENERAL: start CRL update 
07:12:06 certificate,debug GENERAL: start CRL update 
07:13:05 certificate,debug GENERAL: start CRL update 
07:14:05 certificate,debug GENERAL: start CRL update 
07:15:05 certificate,debug GENERAL: start CRL update 
07:16:05 certificate,debug GENERAL: start CRL update 
07:17:05 certificate,debug GENERAL: start CRL update 
07:18:05 certificate,debug GENERAL: start CRL update 
07:19:06 certificate,debug GENERAL: start CRL update 
07:20:06 certificate,debug GENERAL: start CRL update 
07:21:06 certificate,debug GENERAL: start CRL update 
07:22:06 certificate,debug GENERAL: start CRL update 
07:23:06 certificate,debug GENERAL: start CRL update 
07:24:06 certificate,debug GENERAL: start CRL update 
07:25:06 certificate,debug GENERAL: start CRL update 
07:26:06 certificate,debug GENERAL: start CRL update 
07:27:05 certificate,debug GENERAL: start CRL update 
07:28:05 certificate,debug GENERAL: start CRL update 
07:29:06 certificate,debug GENERAL: start CRL update 
07:30:05 certificate,debug GENERAL: start CRL update 
07:31:05 certificate,debug GENERAL: start CRL update 
07:32:06 certificate,debug GENERAL: start CRL update 
07:33:06 certificate,debug GENERAL: start CRL update 
07:34:06 certificate,debug GENERAL: start CRL update 
07:35:06 certificate,debug GENERAL: start CRL update 
07:36:06 certificate,debug GENERAL: start CRL update 
07:37:06 certificate,debug GENERAL: start CRL update 
07:38:06 certificate,debug GENERAL: start CRL update 
07:39:06 certificate,debug GENERAL: start CRL update 
07:40:06 certificate,debug GENERAL: start CRL update 
07:41:06 certificate,debug GENERAL: start CRL update 
07:42:06 certificate,debug GENERAL: start CRL update 
07:43:06 certificate,debug GENERAL: start CRL update 
07:44:06 certificate,debug GENERAL: start CRL update 
07:45:06 certificate,debug GENERAL: start CRL update 
07:46:06 certificate,debug GENERAL: start CRL update 
07:47:06 certificate,debug GENERAL: start CRL update 
07:48:06 certificate,debug GENERAL: start CRL update 
07:49:06 certificate,debug GENERAL: start CRL update 
07:50:06 certificate,debug GENERAL: start CRL update 
07:51:06 certificate,debug GENERAL: start CRL update 
07:52:06 certificate,debug GENERAL: start CRL update 
07:53:06 certificate,debug GENERAL: start CRL update 
07:54:06 certificate,debug GENERAL: start CRL update 
07:55:06 certificate,debug GENERAL: start CRL update 
07:56:06 certificate,debug GENERAL: start CRL update 
07:57:06 certificate,debug GENERAL: start CRL update 
07:58:06 certificate,debug GENERAL: start CRL update 
07:59:06 certificate,debug GENERAL: start CRL update 
08:00:06 certificate,debug GENERAL: start CRL update 
08:01:06 certificate,debug GENERAL: start CRL update 
08:02:06 certificate,debug GENERAL: start CRL update 
08:03:06 certificate,debug GENERAL: start CRL update 
08:04:06 certificate,debug GENERAL: start CRL update 
08:05:06 certificate,debug GENERAL: start CRL update 
08:06:06 certificate,debug GENERAL: start CRL update 
08:07:06 certificate,debug GENERAL: start CRL update 
08:08:06 certificate,debug GENERAL: start CRL update 
08:09:06 certificate,debug GENERAL: start CRL update 
08:10:06 certificate,debug GENERAL: start CRL update 
08:11:06 certificate,debug GENERAL: start CRL update 
08:12:06 certificate,debug GENERAL: start CRL update 
08:13:06 certificate,debug GENERAL: start CRL update 
08:14:06 certificate,debug GENERAL: start CRL update 
08:15:06 certificate,debug GENERAL: start CRL update 
08:16:06 certificate,debug GENERAL: start CRL update 
08:17:06 certificate,debug GENERAL: start CRL update 
08:18:06 certificate,debug GENERAL: start CRL update 
08:19:06 certificate,debug GENERAL: start CRL update 
08:20:06 certificate,debug GENERAL: start CRL update 
08:21:06 certificate,debug GENERAL: start CRL update 
08:22:06 certificate,debug GENERAL: start CRL update 
08:23:06 certificate,debug GENERAL: start CRL update 
08:24:06 certificate,debug GENERAL: start CRL update 
08:25:06 certificate,debug GENERAL: start CRL update 
08:26:06 certificate,debug GENERAL: start CRL update 
08:27:06 certificate,debug GENERAL: start CRL update 
08:28:06 certificate,debug GENERAL: start CRL update 
08:29:06 certificate,debug GENERAL: start CRL update 
08:30:06 certificate,debug GENERAL: start CRL update 
08:31:06 certificate,debug GENERAL: start CRL update 
08:32:06 certificate,debug GENERAL: start CRL update 
08:33:06 certificate,debug GENERAL: start CRL update 
08:34:06 certificate,debug GENERAL: start CRL update 
08:35:06 certificate,debug GENERAL: start CRL update 
08:36:06 certificate,debug GENERAL: start CRL update 
08:37:06 certificate,debug GENERAL: start CRL update 
08:38:06 certificate,debug GENERAL: start CRL update 
08:39:06 certificate,debug GENERAL: start CRL update 
08:40:06 certificate,debug GENERAL: start CRL update 
08:41:06 certificate,debug GENERAL: start CRL update 
08:42:06 certificate,debug GENERAL: start CRL update 
 08:43:06 certificate,debug GENERAL: start CRL update
 08:44:06 certificate,debug GENERAL: start CRL update
 08:45:06 certificate,debug GENERAL: start CRL update
 08:46:06 certificate,debug GENERAL: start CRL update
 08:47:06 certificate,debug GENERAL: start CRL update
 08:48:06 certificate,debug GENERAL: start CRL update
 08:49:06 certificate,debug GENERAL: start CRL update
 08:50:06 certificate,debug GENERAL: start CRL update
 08:51:06 certificate,debug GENERAL: start CRL update
 08:52:06 certificate,debug GENERAL: start CRL update
 08:53:06 certificate,debug GENERAL: start CRL update
 08:54:06 certificate,debug GENERAL: start CRL update
 08:55:06 certificate,debug GENERAL: start CRL update
 08:56:06 certificate,debug GENERAL: start CRL update
 08:57:06 certificate,debug GENERAL: start CRL update
 08:58:06 certificate,debug GENERAL: start CRL update
 08:59:06 certificate,debug GENERAL: start CRL update
 09:00:06 certificate,debug GENERAL: start CRL update
 09:01:06 certificate,debug GENERAL: start CRL update
 09:02:06 certificate,debug GENERAL: start CRL update
 09:03:06 certificate,debug GENERAL: start CRL update
 09:04:06 certificate,debug GENERAL: start CRL update
 09:05:06 certificate,debug GENERAL: start CRL update
 09:06:06 certificate,debug GENERAL: start CRL update
 09:07:06 certificate,debug GENERAL: start CRL update
 09:08:06 certificate,debug GENERAL: start CRL update
 09:09:06 certificate,debug GENERAL: start CRL update
 09:10:06 certificate,debug GENERAL: start CRL update
 09:11:06 certificate,debug GENERAL: start CRL update
 09:12:06 certificate,debug GENERAL: start CRL update
 09:13:06 certificate,debug GENERAL: start CRL update
 09:14:06 certificate,debug GENERAL: start CRL update
 09:15:06 certificate,debug GENERAL: start CRL update
 09:16:06 certificate,debug GENERAL: start CRL update
 09:17:06 certificate,debug GENERAL: start CRL update
 09:18:06 certificate,debug GENERAL: start CRL update
 09:19:06 certificate,debug GENERAL: start CRL update
 09:20:06 certificate,debug GENERAL: start CRL update
 09:21:06 certificate,debug GENERAL: start CRL update
 09:22:06 certificate,debug GENERAL: start CRL update
 09:23:06 certificate,debug GENERAL: start CRL update
 09:24:06 certificate,debug GENERAL: start CRL update
 09:25:06 certificate,debug GENERAL: start CRL update
 09:26:06 certificate,debug GENERAL: start CRL update
 09:27:06 certificate,debug GENERAL: start CRL update
 09:28:06 certificate,debug GENERAL: start CRL update
 09:29:06 certificate,debug GENERAL: start CRL update
 09:30:06 certificate,debug GENERAL: start CRL update
 09:31:06 certificate,debug GENERAL: start CRL update

infabo · December 6, 2024, 9:39am

I could not identify any request to this specific “CRL update” event until now. There are only TLS requests in the time frame. But I see other packets originating from the router itself toward some “suspicious” destinations (cloudfront,amazonaws,skewed.de, …) where I dont know the purpose…

infabo · January 5, 2026, 3:00pm

I have reported this a year ago and it was acknowledged as wrong behaviour:

Hello,

Such message is printed because CRL exists.

We will change this behavior in upcoming RouterOS versions.

CRL update should be performed only if in certificate settings crl-download is set to yes.

Today I received an update:

Hello,

This is an automated message. Our bug tracker reports that your issue has been fixed. This means that we plan to release a RouterOS update with this fix. Make sure to upgrade to the next release when it comes out. To be sure this specific fix is included, read the changelog when the next version comes out. If your issue is not mentioned, it might mean it will be in the next release.

If you would like any more details - please reply to this message and one of our support engineers will contact you.

Best regards,

Regards, MikroTik Support.

I'll give another update once I have identified the corresponding changelog item.