The RPKI Single Trust Anchor

The trust anchor is the apex certificate of the RPKI and is represented by the TAL (Trust Anchor Locator). Relying parties need to configure the AFRINIC TAL in their validators to retrieve objects from the AFRINIC RPKI Repository. 

Since October 2017, AFRINIC operates the RPKI under a single trust anchor, which covers "All resources" in the IPv4, IPv6 and ASN space. This is following the decision that all RIRs will operate a Trust Anchor that reflects all holdings (0/0). More details can be found here.

 

 

You can download the RPKI TAL here.