have you looked at the validation log report at the warning and error levels? not pretty. not a very pleasing picture of the state of the RPKI repos out there. randy --- randy at psg.com `gpg --locate-external-keys --auto-key-locate wkd randy at psg.com` signatures are back, thanks to dmarc header butchery