Your IP address is



Report on the RPKI Incident

6 March 2015 - Please find attached a PostMortem Report on the RPKI  Validation Incident  which occurred on  the 2nd of  March 2015


Overview of AFRINIC RPKI System

AFRINIC RPKI's system launched on 1st January 2011 is composed of an Offline root CA  and a production CA. Both CA publish objects in the RPKI repository available at <>;/  rsync:// <>;


Like every CA in the RPKI, the Offline root CA maintains a CRL and a manifest for the certificates it manages and objects in its repository. As per CA practices, the CRL and manifest are valid for 30 days

(Next update time is set to 30days). Processes and mechanisms have been put in place to refresh these objects weeks before expiration.


Description of the incident

The CRL and Manifest of the root CA were refreshed on the 01/28/2015  and next update set to 03/02/2015  as showed below:


Manifest   -------------

Object Type: RPKI Manifest

Signing time: 2015-01-28T08:01:29.000Z

Version: 0

Number: 59

This update time: 2015-01-28T08:01:28.000Z

Next update time: 2015-03-02T08:01:28.000Z


CRL  ---------

Certificate Revocation List (CRL):

Version 2 (0x1)

Signature Algorithm: sha256WithRSAEncryption

Issuer: /CN=AfriNIC-Root-Certificate

Last Update: Jan 28 08:01:28 2015 GMT

Next Update: Mar  2 08:01:28 2015 GMT


Due to some issues with internal monitoring system, this task was missed and as from 08:01 AM UTC, the 03/02/2015, the CRL and Manifest were invalid and  therefore the whole AFRINIC RPKI repository became invalid.

This was the first time this incident occurred since January 2011.


Actions taken

The incident was reported by a ticket opened on our support system the 03/02/2014 at 10:30 PM UTC. Investigations confirmed the issue and immediate corrective measures taken. At  5:55 AM on the 03/03/2015,  the repository has been restored to normal mode.

The internal systems and processes have been reviewed and  appropriate measures taken such as  more stringent monitoring, regular system audit, redundancy, etc  to avoid this in the future.


Questions or comments to   This e-mail address is being protected from spambots. You need JavaScript enabled to view it

Call for Presentations for the Africa Internet Summit 2015 is Open

24 February 2015 - The Call for Presentations for the Africa Internet Summit, AIS’15, is now open. We invite all individuals wishing to present during the meeting, which will be held from 24 May - 5 June 2015 in Tunis, Tunisia to submit their presentation abstract. 

To enrich the discussions and share knowledge with the technical community at AIS’15, we are seeking presentations of a wide range of issues, broadly related to access and development of the Internet in Africa. We are specifically interested in presentations focusing on: 


• Internet Governance

• E-governance

• Core Internet Infrastructure

• Access, Utility and Development

• The Internet and Economic Development

• Business Practices and Technology

• Higher Education in the Age of Technology

• Cyber Security

• Technology and Business

• Cloud Computing

• Open Data/Big Data

• Technology and Content Production

• Relations between Mobile Operators and the Internet Community

• Mobile Applications

• IPv6

• Peering and Interconnection



• IXPs 


Your contribution can be in the form of a presentation during a session, a tutorial, or a live technical demonstration.

Kindly read all information carefully before submitting your proposal. 


Speakers’ Guidelines


• Presentations should be 15 -30 minutes in length, with approximately 10-15 minutes for Q&A at the end of each presentation.

• The maximum time allotted per presentation will not exceed 45 minutes.

• We shall send you a URL of our online submission system to upload your final presentation slides.

• The presenter(s) will be required to upload their final presentation in PDF format, no later than three (3) days prior to the presentation date.

• Presenters are responsible for producing any handouts should they require them. There are usually approximately 200 delegates in each session.

• Tutorials can range from 90 minutes to half a day in length.

• Presentations with marketing and/or commercial content are not allowed.


How to submit


Please send submissions to: aiscfp[@] Your proposal should contain the following information:


• Full Name

• Email Address

• Affiliation

• Title of Presentation

• A detailed abstract or outline describing the presentation

• Draft slides for the presentation (if ready/available)

• Length of talk (minutes)

• Short biography


Important dates to note


• Deadline for submitting an application –    24 March 2015

• Notification of acceptance of application – 31 March 2015

• Final submission of draft presentation  –  30 April 2015

• Submission of  final presentation - 24 May 2015


If you are interested in presenting at AIS'15, please send us an abstract of 300 words or less outlining the key ideas of your presentation, tutorial, or demonstration at: aiscfp [@]


Page 55 of 126