Dear all, To foster informed discussion about the policy proposal at: https://mailman.ripe.net/archives/list/[email protected]/thread/USQUMNOE3L3UUD3JZVI6LH7VMDRPL7K4/ I've collected and analysed data from the field to provide insight into the current state of 'non-functional CAs' (using data from http://www.rpkiviews.org/)
Over 20,000 full snapshot files from the period January 1st, 2024 through February 24th, 2025 (inclusive) were processed. As of yesterday (2025-02-24T23:38:26Z), 271 Delegated CA setups existed under RIPE NCC's Trust Anchor. Of those, 56 currently are "non-functional" (20%), 28 have been non-functional for more than 100 days (10%), . Kind regards, Job rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer broken for more than 421 days https://console.rpki-client.org/krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft.html rpki.ripe.net/repository/DEFAULT/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.cer broken for more than 421 days https://console.rpki-client.org/rpkica.mckay.com/rpki/MCnet/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.mft.html rpki.ripe.net/repository/DEFAULT/SvoHcYEuZjfYsYof9Q9B80mGaak.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft.html rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft.html rpki.ripe.net/repository/DEFAULT/_F7x9mT2uw4a972lPWfgWJuJXh8.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/3/FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.mft.html rpki.ripe.net/repository/DEFAULT/q0wWl7GMPHFVUyBsTDm76eUvZYs.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/0/AB4C1697B18C3C715553206C4C39BBE9E52F658B.mft.html rpki.ripe.net/repository/DEFAULT/ENrGqvlAx8X_G4Pso1JtRrpHUJM.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/240ce547-40ef-4f04-95be-088f3bc02503/0/10DAC6AAF940C7C5FF1B83ECA3526D46BA475093.mft.html rpki.ripe.net/repository/DEFAULT/UvTKqH0IH8Jd3xF76Kn-mQqhILw.cer broken for more than 421 days https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/0/52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.mft.html rpki.ripe.net/repository/DEFAULT/WT6ByS75j5EwrENkGq6AIlRun0o.cer last sighting of a valid manifest 20240303T170549Z 358 days ago https://console.rpki-client.org/rpki.netiface.net/repo/Civilized/0/593E81C92EF98F9130AC43641AAE8022546E9F4A.mft.html rpki.ripe.net/repository/DEFAULT/xZR-zIaDrQ282VqPMy8MqhNXR5A.cer last sighting of a valid manifest 20240420T123556Z 311 days ago https://console.rpki-client.org/rpki.netiface.net/repo/Civilized/0/C5947ECC8683AD0DBCD95A8F332F0CAA13574790.mft.html rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer last sighting of a valid manifest 20240426T173605Z 304 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft.html rpki.ripe.net/repository/DEFAULT/74jXus0opsOTvMwR3GTd53t-xJs.cer last sighting of a valid manifest 20240518T093553Z 283 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft.html rpki.ripe.net/repository/DEFAULT/w9a4Z_-YTcfF6szS2j-Szzxnfas.cer last sighting of a valid manifest 20240519T010546Z 282 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/0/C3D6B867FF984DC7C5EACCD2DA3F92CF3C677DAB.mft.html rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft.html rpki.ripe.net/repository/DEFAULT/fFzcP9UWU7USC06-3S-jgiQKWGg.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rpki.0i1.eu/repo/h45/0/7C5CDC3FD51653B5120B4EBEDD2FA382240A5868.mft.html rpki.ripe.net/repository/DEFAULT/fduZ9z57WCw1KJDjrVeF02efiJE.cer last sighting of a valid manifest 20240630T023703Z 240 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/1/7DDB99F73E7B582C352890E3AD5785D3679F8891.mft.html rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer last sighting of a valid manifest 20240930T060419Z 148 days ago https://console.rpki-client.org/rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft.html rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft.html rpki.ripe.net/repository/DEFAULT/lFAxyyKjXNts5XnLcCcOp7Oomic.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c5592a54-4035-4970-86dc-3d1803b7b60f/0/945031CB22A35CDB6CE579CB70270EA7B3A89A27.mft.html rpki.ripe.net/repository/DEFAULT/1kJOUxpa1qyAryDw1twssYcyLsE.cer last sighting of a valid manifest 20241004T143642Z 143 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/30df2d1b-1498-4686-91bb-64b582010328/0/D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.mft.html rpki.ripe.net/repository/DEFAULT/suTT3a_E97-6XbYHoDPzYhCMqFA.cer last sighting of a valid manifest 20241008T080637Z 140 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/e292649c-2f1e-4e3a-9731-5b4a6e276845/0/B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.mft.html rpki.ripe.net/repository/DEFAULT/sy4-N1Phw0647Ando2PwbGe324o.cer last sighting of a valid manifest 20241013T090705Z 135 days ago https://console.rpki-client.org/pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/0/B32E3E3753E1C34EB8EC09DDA363F06C67B7DB8A.mft.html rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer last sighting of a valid manifest 20241014T220355Z 133 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft.html rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer last sighting of a valid manifest 20241020T030414Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft.html rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer last sighting of a valid manifest 20241019T140355Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft.html rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer last sighting of a valid manifest 20241019T213358Z 128 days ago https://console.rpki-client.org/rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft.html rpki.ripe.net/repository/DEFAULT/_XqMEQpihGk3hXKikYZT9vjXJtI.cer last sighting of a valid manifest 20241029T223405Z 118 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.mft.html rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer last sighting of a valid manifest 20241031T020400Z 117 days ago https://console.rpki-client.org/rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft.html =========================================================================================================== =============== POLICY TARGET CUT-OFF ===================== =============== THE BELOW CAs HAVE BEEN NON-FUNCTIONAL FOR LESS THAN ONE HUNDRED DAYS ===================== =============== AND WERE INCLUDED ONLY FOR INFORMATIONAL PURPOSES ===================== =========================================================================================================== rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer last sighting of a valid manifest 20241126T183422Z 90 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft.html rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer last sighting of a valid manifest 20241126T190428Z 90 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft.html rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer last sighting of a valid manifest 20241205T210706Z 81 days ago https://console.rpki-client.org/rpki.folf.systems/repo/Folf-Systems/0/E883D1D2313A14E8659F604A65D65CE39A3F826B.mft.html rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer last sighting of a valid manifest 20241214T060423Z 73 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft.html rpki.ripe.net/repository/DEFAULT/HICFhJKexkMiDWmnfl4FDh0J2Wk.cer last sighting of a valid manifest 20241230T170649Z 56 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/fd30a818-e105-413c-9d00-d36a887eff80/0/1C808584929EC643220D69A77E5E050E1D09D969.mft.html rpki.ripe.net/repository/DEFAULT/Wr5-CR2hOR8CTsDPfY428NI1d4o.cer last sighting of a valid manifest 20250101T120719Z 55 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/5ABE7E091DA1391F024EC0CF7D8E36F0D235778A.mft.html rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer last sighting of a valid manifest 20250107T130548Z 49 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft.html rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer last sighting of a valid manifest 20250111T233549Z 44 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft.html rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer last sighting of a valid manifest 20250112T223552Z 43 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft.html rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer last sighting of a valid manifest 20250116T210542Z 39 days ago https://console.rpki-client.org/rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft.html rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer last sighting of a valid manifest 20250116T233541Z 39 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft.html rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer last sighting of a valid manifest 20250117T060546Z 39 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft.html rpki.ripe.net/repository/DEFAULT/IUQgQoqlbnXGmG8810rcA6Hx_7I.cer last sighting of a valid manifest 20250119T023546Z 37 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/e1a3b0bc-c24b-4965-b6fb-5f1c980a2f03/1/214420428AA56E75C6986F3CD74ADC03A1F1FFB2.mft.html rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer last sighting of a valid manifest 20250120T123547Z 36 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft.html rpki.ripe.net/repository/DEFAULT/s0CjI3bSG3QyCZU1brqFtAZT5nI.cer last sighting of a valid manifest 20250131T073907Z 25 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft.html rpki.ripe.net/repository/DEFAULT/vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer last sighting of a valid manifest 20250202T123643Z 23 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/BEEB4B595E9E084649D0ABE5B77B8DFF736D03F3.mft.html rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer last sighting of a valid manifest 20250202T013647Z 23 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft.html rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer last sighting of a valid manifest 20250207T023654Z 18 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft.html rpki.ripe.net/repository/DEFAULT/XwGuGDbX2nd-u5Ch6pfTfDABGOg.cer last sighting of a valid manifest 20250209T200651Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft.html rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer last sighting of a valid manifest 20250209T200651Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft.html rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer last sighting of a valid manifest 20250209T173652Z 15 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft.html rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer last sighting of a valid manifest 20250214T020629Z 11 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft.html rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer last sighting of a valid manifest 20250213T173605Z 11 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft.html rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer last sighting of a valid manifest 20250215T170716Z 9 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft.html rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer last sighting of a valid manifest 20250218T213609Z 6 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft.html rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer last sighting of a valid manifest 20250219T160634Z 5 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft.html rpki.ripe.net/repository/DEFAULT/1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer last sighting of a valid manifest 20250222T100827Z 3 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft.html rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer last sighting of a valid manifest 20250223T063836Z 2 days ago https://console.rpki-client.org/rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft.html ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/routing-wg.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
