RFC 6487: A Profile for X.509 PKIX Resource Certificates

This document defines a standard profile for X.509 certificates for the purpose of supporting validation of assertions of "right-of-use" of Internet Number…

Read RFC 6487 on the RFC Editor

Outgoing relationships (17 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers
Normative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Normative reference — RFC 4211: Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)
Normative reference — RFC 6484: Certificate Policy (CP) for the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 6485: The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 5781: The rsync URI Scheme
Informative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Informative reference — RFC 6480: An Infrastructure to Support Secure Internet Routing
Informative reference — RFC 4122: A Universally Unique IDentifier (UUID) URN Namespace
Informative reference — RFC 4514: Lightweight Directory Access Protocol (LDAP): String Representation of Distinguished Names
Informative reference — RFC 6481: A Profile for Resource Certificate Repository Structure
Informative reference — RFC 2985: PKCS #9: Selected Object Classes and Attribute Types Version 2.0
Informative reference — RFC 6488: Signed Object Template for the Resource Public Key Infrastructure (RPKI)
Informative reference — RFC 6486: Manifests for the Resource Public Key Infrastructure (RPKI)
Informative reference — RFC 6489: Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI)

Incoming relationships (25 related RFCs)

Updated by, Normatively referenced by — RFC 8209: A Profile for BGPsec Router Certificates, Certificate Revocation Lists, and Certification Requests
Updated by, Normatively referenced by — RFC 7318: Policy Qualifiers in Resource Public Key Infrastructure (RPKI) Certificates
Updated by, Informatively referenced by — RFC 9829: Handling of Resource Public Key Infrastructure (RPKI) Certificate Revocation List (CRL) Number Extensions
Normatively referenced by — RFC 6481: A Profile for Resource Certificate Repository Structure
Normatively referenced by — RFC 6488: Signed Object Template for the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 8205: BGPsec Protocol Specification
Normatively referenced by — RFC 6486: Manifests for the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 6489: Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 9286: Manifests for the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 8210: The Resource Public Key Infrastructure (RPKI) to Router Protocol, Version 1
Normatively referenced by — RFC 8211: Adverse Actions by a Certification Authority (CA) or Repository Manager in the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 6907: Use Cases and Interpretations of Resource Public Key Infrastructure (RPKI) Objects for Issuers and Relying Parties
Normatively referenced by — RFC 9632: Finding and Using Geofeed Data
Normatively referenced by — RFC 7382: Template for a Certification Practice Statement (CPS) for the Resource PKI (RPKI)
Normatively referenced by — RFC 8360: Resource Public Key Infrastructure (RPKI) Validation Reconsidered
Normatively referenced by — RFC 8416: Simplified Local Internet Number Resource Management with the RPKI (SLURM)
Normatively referenced by — RFC 9582: A Profile for Route Origin Authorizations (ROAs)
Normatively referenced by — RFC 8897: Requirements for Resource Public Key Infrastructure (RPKI) Relying Parties
Normatively referenced by — RFC 9323: A Profile for RPKI Signed Checklists (RSCs)
Normatively referenced by — RFC 9977: Publishing End-Site Prefix Lengths
Normatively referenced by — RFC 9981: Resource Public Key Infrastructure (RPKI) Manifest Number Handling
Informatively referenced by — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informatively referenced by — RFC 7132: Threat Model for BGP Path Security
Informatively referenced by — RFC 6492: A Protocol for Provisioning Resource Certificates
Informatively referenced by — RFC 8374: BGPsec Design Choices and Summary of Supporting Discussions