RFC 8211: Adverse Actions by a Certification Authority (CA) or Repository Manager in the Resource Public Key Infrastructure (RPKI)

This document analyzes actions by or against a Certification Authority (CA) or an independent repository manager in the RPKI that can adversely affect the…

Read RFC 8211 on the RFC Editor

Outgoing relationships (18 related RFCs)

Normative reference — RFC 6480: An Infrastructure to Support Secure Internet Routing
Normative reference — RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers
Normative reference — RFC 6482: A Profile for Route Origin Authorizations (ROAs)
Normative reference — RFC 6487: A Profile for X.509 PKIX Resource Certificates
Normative reference — RFC 6481: A Profile for Resource Certificate Repository Structure
Normative reference — RFC 6488: Signed Object Template for the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 6486: Manifests for the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 6489: Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 6493: The Resource Public Key Infrastructure (RPKI) Ghostbusters Record
Normative reference — RFC 6916: Algorithm Agility Procedure for the Resource Public Key Infrastructure (RPKI)
Normative reference — RFC 7935: The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure
Normative reference — RFC 6483: Validation of Route Origination Using the Resource Certificate Public Key Infrastructure (PKI) and Route Origin Authorizations (ROAs)
Informative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Informative reference — RFC 2622: Routing Policy Specification Language (RPSL)
Informative reference — RFC 2725: Routing Policy System Security
Informative reference — RFC 7132: Threat Model for BGP Path Security
Informative reference — RFC 2650: Using RPSL in Practice
Informative reference — RFC 7682: Considerations for Internet Routing Registries (IRRs) and Routing Policy Configuration

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9455: Avoiding Route Origin Authorizations (ROAs) Containing Multiple IP Prefixes
Informatively referenced by — RFC 8416: Simplified Local Internet Number Resource Management with the RPKI (SLURM)
Informatively referenced by — RFC 8897: Requirements for Resource Public Key Infrastructure (RPKI) Relying Parties