Dear all, To foster informed discussion about the policy proposal at: https://mailman.ripe.net/archives/list/routing-wg@ripe.net/thread/USQUMNOE3L... I've collected and analysed data from the field to provide insight into the current state of 'non-functional CAs' (using data from http://www.rpkiviews.org/) Over 20,000 full snapshot files from the period January 1st, 2024 through February 24th, 2025 (inclusive) were processed. As of yesterday (2025-02-24T23:38:26Z), 271 Delegated CA setups existed under RIPE NCC's Trust Anchor. Of those, 56 currently are "non-functional" (20%), 28 have been non-functional for more than 100 days (10%), . Kind regards, Job rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer broken for more than 421 days https://console.rpki-client.org/krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0... rpki.ripe.net/repository/DEFAULT/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.cer broken for more than 421 days https://console.rpki-client.org/rpkica.mckay.com/rpki/MCnet/Jp4Tjp_GB5I1Rfea... rpki.ripe.net/repository/DEFAULT/SvoHcYEuZjfYsYof9Q9B80mGaak.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/32bfd357... rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/32bfd357... rpki.ripe.net/repository/DEFAULT/_F7x9mT2uw4a972lPWfgWJuJXh8.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/ad0eb3cf... rpki.ripe.net/repository/DEFAULT/q0wWl7GMPHFVUyBsTDm76eUvZYs.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d2288b0e... rpki.ripe.net/repository/DEFAULT/ENrGqvlAx8X_G4Pso1JtRrpHUJM.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/240ce547... rpki.ripe.net/repository/DEFAULT/UvTKqH0IH8Jd3xF76Kn-mQqhILw.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/ad0eb3cf... rpki.ripe.net/repository/DEFAULT/WT6ByS75j5EwrENkGq6AIlRun0o.cer last sighting of a valid manifest 20240303T170549Z 358 days ago https://console.rpki-client.org/rpki.netiface.net/repo/Civilized/0/593E81C92... rpki.ripe.net/repository/DEFAULT/xZR-zIaDrQ282VqPMy8MqhNXR5A.cer last sighting of a valid manifest 20240420T123556Z 311 days ago https://console.rpki-client.org/rpki.netiface.net/repo/Civilized/0/C5947ECC8... rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer last sighting of a valid manifest 20240426T173605Z 304 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/a4c6bdc5... rpki.ripe.net/repository/DEFAULT/74jXus0opsOTvMwR3GTd53t-xJs.cer last sighting of a valid manifest 20240518T093553Z 283 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/509e44a5... rpki.ripe.net/repository/DEFAULT/w9a4Z_-YTcfF6szS2j-Szzxnfas.cer last sighting of a valid manifest 20240519T010546Z 282 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c58479df... rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/330c7f5c... rpki.ripe.net/repository/DEFAULT/fFzcP9UWU7USC06-3S-jgiQKWGg.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rpki.0i1.eu/repo/h45/0/7C5CDC3FD51653B5120B4... rpki.ripe.net/repository/DEFAULT/fduZ9z57WCw1KJDjrVeF02efiJE.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/b64c075f... rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer last sighting of a valid manifest 20240930T060419Z 148 days ago https://console.rpki-client.org/rpki.athene-center.net/repo/rpki-athene-cent... rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/2fd217e5... rpki.ripe.net/repository/DEFAULT/lFAxyyKjXNts5XnLcCcOp7Oomic.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c5592a54... rpki.ripe.net/repository/DEFAULT/1kJOUxpa1qyAryDw1twssYcyLsE.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/30df2d1b... rpki.ripe.net/repository/DEFAULT/suTT3a_E97-6XbYHoDPzYhCMqFA.cer last sighting of a valid manifest 20241008T080637Z 140 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/e292649c... rpki.ripe.net/repository/DEFAULT/sy4-N1Phw0647Ando2PwbGe324o.cer last sighting of a valid manifest 20241013T090705Z 135 days ago https://console.rpki-client.org/pub.krill.ausra.cloud/repo/Ausra-Systems-Int... rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer last sighting of a valid manifest 20241014T220355Z 133 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/378e5eb0... rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer last sighting of a valid manifest 20241020T030414Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3... rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer last sighting of a valid manifest 20241019T140355Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3... rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer last sighting of a valid manifest 20241019T213358Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/1/9... rpki.ripe.net/repository/DEFAULT/_XqMEQpihGk3hXKikYZT9vjXJtI.cer last sighting of a valid manifest 20241029T223405Z 118 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d88b854e... rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer last sighting of a valid manifest 20241031T020400Z 117 days ago https://console.rpki-client.org/rpki01.hel-fi.rpki.win:44595/repo/as60900/0/... =========================================================================================================== =============== POLICY TARGET CUT-OFF ===================== =============== THE BELOW CAs HAVE BEEN NON-FUNCTIONAL FOR LESS THAN ONE HUNDRED DAYS ===================== =============== AND WERE INCLUDED ONLY FOR INFORMATIONAL PURPOSES ===================== =========================================================================================================== rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer last sighting of a valid manifest 20241126T183422Z 90 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d3cc54ec... rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer last sighting of a valid manifest 20241126T190428Z 90 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d3cc54ec... rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer last sighting of a valid manifest 20241205T210706Z 81 days ago https://console.rpki-client.org/rpki.folf.systems/repo/Folf-Systems/0/E883D1... rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer last sighting of a valid manifest 20241214T060423Z 73 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/9af6c38e... rpki.ripe.net/repository/DEFAULT/HICFhJKexkMiDWmnfl4FDh0J2Wk.cer last sighting of a valid manifest 20241230T170649Z 56 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/fd30a818... rpki.ripe.net/repository/DEFAULT/Wr5-CR2hOR8CTsDPfY428NI1d4o.cer last sighting of a valid manifest 20250101T120719Z 55 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/f0f5aca9... rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer last sighting of a valid manifest 20250107T130548Z 49 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/74c1572c... rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer last sighting of a valid manifest 20250111T233549Z 44 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/b277449f... rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer last sighting of a valid manifest 20250112T223552Z 43 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/02c72b7c... rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer last sighting of a valid manifest 20250116T210542Z 39 days ago https://console.rpki-client.org/rpki-rps.arin.net/repository/8a848adf914e0aa... rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer last sighting of a valid manifest 20250116T233541Z 39 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c99265ef... rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer last sighting of a valid manifest 20250117T060546Z 39 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c99265ef... rpki.ripe.net/repository/DEFAULT/IUQgQoqlbnXGmG8810rcA6Hx_7I.cer last sighting of a valid manifest 20250119T023546Z 37 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/e1a3b0bc... rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer last sighting of a valid manifest 20250120T123547Z 36 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/4bfa7a9f... rpki.ripe.net/repository/DEFAULT/s0CjI3bSG3QyCZU1brqFtAZT5nI.cer last sighting of a valid manifest 20250131T073907Z 25 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/8188cf9f... rpki.ripe.net/repository/DEFAULT/vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer last sighting of a valid manifest 20250202T123643Z 23 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/bcbbf0bf... rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer last sighting of a valid manifest 20250202T013647Z 23 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/22a80682... rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer last sighting of a valid manifest 20250207T023654Z 18 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/47cfdd4f... rpki.ripe.net/repository/DEFAULT/XwGuGDbX2nd-u5Ch6pfTfDABGOg.cer last sighting of a valid manifest 20250209T200651Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/09f71023... rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer last sighting of a valid manifest 20250209T200651Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/3c8e4e11... rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer last sighting of a valid manifest 20250209T173652Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/98826bce... rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer last sighting of a valid manifest 20250214T020629Z 11 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/24db6e0e... rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer last sighting of a valid manifest 20250213T173605Z 11 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/24cc8de5... rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer last sighting of a valid manifest 20250215T170716Z 9 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c974e2af... rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer last sighting of a valid manifest 20250218T213609Z 6 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/f9719fb9... rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer last sighting of a valid manifest 20250219T160634Z 5 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/80a6dc53... rpki.ripe.net/repository/DEFAULT/1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer last sighting of a valid manifest 20250222T100827Z 3 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/5440d602... rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer last sighting of a valid manifest 20250223T063836Z 2 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/0157647c...