# Container paths. Omit ta to refresh the TA certificate each run.
# TAL files themselves are operator-maintained and are never auto-updated.
config-version = 1
mode = "validate"
out = "/output"
rrdp-state-dir = "/state/repository"
ccr-out = "/output/result.ccr"
run-timeout-secs = 1800
require-complete = true
ta-refresh-policy = "allow-valid-cache"
log-level = "info"
log-format = "text"

[[anchors]]
id = "afrinic"
tal = "/input/afrinic.tal"
# ta = "/input/afrinic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "apnic"
tal = "/input/apnic.tal"
# ta = "/input/apnic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "arin"
tal = "/input/arin.tal"
# ta = "/input/arin.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "lacnic"
tal = "/input/lacnic.tal"
# ta = "/input/lacnic.cer" # uncomment to pin a fixed TA certificate

[[anchors]]
id = "ripe"
tal = "/input/ripe.tal"
# ta = "/input/ripe.cer" # uncomment to pin a fixed TA certificate