[DBWG] Nonconformant X.509 issuer+subject names in some Afrinic RPKI CA/EE certs
Nishal Goburdhan
nishal at controlfreak.co.za
Mon Jan 26 21:26:08 UTC 2026
> To accelerate the depletion of non-conformant X.509 RPKI Certificates at AFRINIC, AFRINIC will:
>
> 1. Publish an article online about this matter and detail the steps for an end user to revoke a non-compliant X.509 RPKI Certificate;
> 2. Use its usual communication channels to its Members and the Community to raise awareness on the matter; and
> 3. Open a Helpdesk to aid end users.
all of this seems to be missing a reasonable timeframe?
i’d imagine that since this is a known isssue, it’s one that has already cost CPU cycles, so churning out that timeline should be easy, eh?
--n.
More information about the DBWG
mailing list