[DBWG] Nonconformant X.509 issuer+subject names in some Afrinic RPKI CA/EE certs

Nishal Goburdhan nishal at controlfreak.co.za
Mon Jan 26 21:26:08 UTC 2026


> To accelerate the depletion of non-conformant X.509 RPKI Certificates at AFRINIC, AFRINIC will:
>
> 1. Publish an article online about this matter and detail the steps for an end user to revoke a non-compliant X.509 RPKI Certificate;
> 2. Use its usual communication channels to its Members and the Community to raise awareness on the matter; and
> 3. Open a Helpdesk to aid end users.


all of this seems to be missing a reasonable timeframe?
i’d imagine that since this is a known isssue, it’s one that has already cost CPU cycles, so churning out that timeline should be easy, eh?

--n.



More information about the DBWG mailing list