We are currently beta testing our RPKI Publication as a Service. Under this “hybrid RPKI” model, users run the Certificate Authority (CA) themselves, while we manage the repository that the files are stored in. Users need to configure our publication server as the repository and the CA software publishes files via RFC 8181 to our repository. In this hybrid model the RIPE NCC runs the repositories - with high demands on availability - and the CA operator runs the CA and has sole control over their private key.
At present, the Publication as a Service is being tested in an open beta with a select group of users, who will provide us with feedback, and help improve our documentation. If you would like to participate in this beta, please get in touch with us at rpki [at] ripe [dot] net.