+Ben. On 9/Apr/19 15:45, Nick Hilliard wrote:
> > > Hi Mark, Ben, > > Afrinic's rpki manifest signature expired on april 6th and wasn't > fixed for several hours. This may have caused validation failure > during that period. Couple of things: > > 1. Did you see any operational impact from this, or are you monitoring > for this sort of failure on your networks? On my side, I did not see any operational issues. It was 1 day into our final implementation of dropping Invalids, so perhaps Ben might have a better perspective as his deployment had been up since the 1st of this month. > > 2. the trust anchor has an expiry date some time in 2027. Does the > afrinic community have an opinion about trust anchor with extended > lifetimes like this? I have not seen it discussed on any of the AFRINIC mailing lists, nor in the few face-to-face AFRINIC meetings I've attended. That said, I see that LACNIC and RIPE have theirs valid for another 93 and 98 years, respectively. Mark.
