<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Dear Colleagues,</div><div><br></div>On 29 May 2015, AFRINIC released an updated version of its RPKI core infrastructure (v2.0). AFRINIC is pleased to announce that by now, all members have already migrated their engine to the new platform, on which they have also created their ROAs. 33 members have activated their new engines with a total of 77 active ROAs.<br><br>The features of the new release are:<br><br><span class="Apple-tab-span" style="white-space: pre;"> </span>• The AFRINIC Root certificate now covers 'ALL' resources managed by AFRINIC.<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• Members can now get all allocated/assigned resources certified.<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• Adoption of a new minority-majority certification model. Instead of using one certificate, AFRINIC now manages a split certificates set namely:<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• AFRINIC-CA (Covers AFRINIC managed space for which AFRINIC is majority space holder)<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• APNIC-TO-AFRINIC (Covers AFRINIC managed space for which APNIC is majority space holder)<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• ARIN-TO-AFRINIC (Covers AFRINIC managed space for which ARIN is majority space holder)<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• LACNIC-TO-AFRINIC (Covers AFRINIC managed space for which LACNIC is majority space holder)<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• RIPE-TO-AFRINIC (Covers AFRINIC managed space for which RIPE is majority space holder)<br><br>AFRINIC has changed its repository structure from “flat” to “hierarchical”. All objects (certificates and ROAs) can be retrieved from one single URI (<a href="rsync://rpki.afrinic.net/repository">rsync://rpki.afrinic.net/repository</a>)<br><br><span class="Apple-tab-span" style="white-space: pre;"> </span>• Support for MAX LENGTH as stipulated by RFC6482 on the ROA format.<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• Compliance to RFC7318 on policy qualifiers.<br><span class="Apple-tab-span" style="white-space: pre;"> </span>• Fix for the “Bad CMS SI signed attributes” issue in ROAs and manifest files.<br><br>AFRINIC is now proceeding with the deactivation of the old platform, which includes the following:<br><br><br><div class="table-wrap" style="margin: 10px 0px 0px; padding: 0px; overflow-x: auto; color: rgb(51, 51, 51); font-family: Arial, Helvetica, sans-serif; font-size: 13.3333px; line-height: 19.0476px; widows: 1; background-color: rgb(255, 255, 255);"><table class="confluenceTable" style="border-collapse: collapse; margin: 0px; overflow-x: auto;"><tbody data-kwik="22"><tr data-kwik="23"><td data-kwik="24" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><p class="p5" data-kwik="25" style="margin: 0px; padding: 0px;"> </p></td><td data-kwik="26" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><strong data-kwik="28">Step</strong></div></td><td data-kwik="29" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><strong data-kwik="31">Scheduled</strong></div></td><td data-kwik="32" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><strong data-kwik="34">Impact</strong><span class="s1" data-kwik="35"> </span></div></td><td data-kwik="36" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><strong data-kwik="38">Status</strong></div></td></tr><tr data-kwik="39"><td data-kwik="40" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">1</div></td><td data-kwik="42" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Activation of new engine and re-issuance of new ROAs</div></td><td data-kwik="44" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">June – August 2015</div></td><td data-kwik="46" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">None</div></td><td data-kwik="48" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Completed</div></td></tr><tr data-kwik="50"><td data-kwik="51" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">2</div></td><td data-kwik="53" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Revocation of old ROAs</div></td><td data-kwik="55" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">June – October 2015</div></td><td data-kwik="57" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">None</div></td><td data-kwik="59" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Completed</div></td></tr><tr data-kwik="61"><td data-kwik="62" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">3</div></td><td data-kwik="64" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Deactivation of old member engines</div></td><td data-kwik="66" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">November 16,<span class="s1" data-kwik="68"> </span>2015</div></td><td data-kwik="69" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Old member repositories will not be available. Top-down validation will complain about missing folders</div></td><td data-kwik="71" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">To Do</div></td></tr><tr data-kwik="73"><td data-kwik="74" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">4</div></td><td data-kwik="76" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><span class="s1" data-kwik="78"> </span>Deactivation of old production master engine</div></td><td data-kwik="79" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">November 18,<span class="s1" data-kwik="81"> </span>2015</div></td><td data-kwik="82" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">Old master repository will not be available. Top-down validation will complain about missing folders</div></td><td data-kwik="84" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">To Do</div></td></tr><tr data-kwik="86"><td data-kwik="87" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">5</div></td><td data-kwik="89" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;"><span class="s1" data-kwik="91"> </span>AFRINIC Root Cycle</div></td><td data-kwik="92" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">November 20,<span class="s1" data-kwik="94"> </span>2015</div></td><td data-kwik="95" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">None</div></td><td data-kwik="97" class="confluenceTd" style="border: 1px solid rgb(221, 221, 221); padding: 7px 10px; vertical-align: top;"><div style="margin: 0px; padding: 0px;">To Do</div></td></tr></tbody></table></div> <div><br>The deactivation of the old member engines and old master production engine will have an impact of TOP-DOWN validation. However, the impact will not have any consequence on the validation of the active ROAs that have all been created on the new platform. Errors in validation, as from Step 3, will be temporary and will disappear as soon step 5 is completed.</div><div><br>38 member certificates are involved in this migration process.</div><div><br>Progress on the deactivation process will be communicated to all stakeholders as and when needed. Should members or relying parties require additional information, please contact the AFRINIC RPKI team on <a href="mailto:rpki-help@afrinic.net">rpki-help@afrinic.net</a><br></div><div><br></div><div><br></div><div>AFRINIC Team</div><div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="margin: 0px; color: rgb(16, 97, 200);"><br></div></div></div></div></div></div></body></html>