[DBWG] AFRINIC RPKI RRDP connectivity issues?

[S. Moonesamy]

Dear Job,
At 03:46 AM 17-05-2023, Job Snijders via DBWG wrote:
>The incident has been marked as "resolved", but the issue still persists:
>
>rpki-client: 
><https://rrdp.afrinic.net/notification.xml>https://rrdp.afrinic.net/notification.xml: 
>pulling from network
>rpki-client: 
><https://rrdp.afrinic.net/notification.xml>https://rrdp.afrinic.net/notification.xml: 
>downloading snapshot (11218e02-4ae9-4c95-a8fa-49df27f15272#72902)
>rpki-client: 
>rsync://<http://rpki.afrinic.net/repository>rpki.afrinic.net/repository: 
>synchronisation timeout
>rpki-client: 
><https://rrdp.afrinic.net/11218e02-4ae9-4c95-a8fa-49df27f15272/72902/snapshot.>https://rrdp.afrinic.net/11218e02-4ae9-4c95-a8fa-49df27f15272/72902/snapshot... 
>(196.216.2.29): data write: Broken pipe
>rpki-client: 
><https://rrdp.afrinic.net/notification.xml>https://rrdp.afrinic.net/notification.xml: 
>load from network failed, fallback to rsync
>
>If there are hard-to-solve issues with the RRDP server, it might 
>make sense to temporarily shutdown the RRDP webserver and rely on 
>RSYNC only - as the sloshing back and forward isn't optimal.

I ran a quick test (please see rpki-client output below).  I was 
unable to reproduce the issue which you encountered.  I'll contact 
you off-list.

rpki-client: ta/afrinic: pulling from 
https://rpki.afrinic.net/repository/AfriNIC.cer
rpki-client: ta/apnic: pulling from 
https://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
rpki-client: ta/lacnic: pulling from 
https://rrdp.lacnic.net/ta/rta-lacnic-rpki.cer
rpki-client: ta/ripe: pulling from https://rpki.ripe.net/ta/ripe-ncc-ta.cer
rpki-client: ta/afrinic: loaded from network
rpki-client: https://rrdp.afrinic.net/notification.xml: pulling from network
rpki-client: https://rrdp.afrinic.net/notification.xml: repository not modified
rpki-client: https://rrdp.afrinic.net/notification.xml: loaded from network
rpki-client: ta/ripe: loaded from network
rpki-client: ta/lacnic: loaded from network
rpki-client: ta/apnic: loaded from network
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/e9fVVRg6gfgLprfZNoeRJF7Y0z4.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/mxi9dO1YDbl9W9qdlXDKFpcMy8w.mft: 
no valid mft available
rpki-client: https://rrdp.ripe.net/notification.xml: pulling from network
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/V00kEnto5oHJEhRaMMayIbP4KlA.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/STmJqI9ygR8i60Gk6wwSdOHx2pA.mft: 
no valid mft available
rpki-client: https://rrdp.ripe.net/notification.xml: notification 
file not modified
rpki-client: https://rrdp.ripe.net/notification.xml: loaded from network
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/0YiYIkQP2ghuQ_3L-e-Gb9Uepbw.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/6n6vYSDTEzssFOqYEf97HcuEQhE.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/z1Kz6_gz2w85Tz77x4mC_9aJbxA.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/BpTOBmDPIzc01Obno4jqMUHuRbk.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/YmFCTuhQuS5FxpB3tvSkzniKeJM.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/S4D0bEIIq3jyH3EKKWI1-QYyTis.mft: 
no valid mft available
rpki-client: https://rrdp.lacnic.net/rrdp/notification.xml: pulling 
from network
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/vJWioqaGyUWVsW4DMK6ROPdodIg.mft: 
no valid mft available
rpki-client: 
rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/uMx4HMq3HaLS0ZoP0TbJGEBE2zA.mft: 
no valid mft available

Regards,
S. Moonesamy