Resource Public Key Infrastructure (RPKI) Trust Anchor Locator

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 11
Abstract: This document defines a Trust Anchor Locator (TAL) for the Resource Public Key Infrastructure (RPKI). The TAL allows Relying Parties in the RPKI to download the current Trust Anchor (TA) Certification Authority (CA) certificate from one or more locations and verify that the key of this self-signed certificate matches the key on the TAL. Thus, Relying Parties can be configured with TA keys but can allow these TAs to change the content of their CA certificate. In particular, it allows TAs to change the set of IP Address Delegations and/or Autonomous System Identifier Delegations included in the extension(s) (RFC 3779) of their certificate. This document obsoletes the previous definition of the TAL as provided in RFC 7730 by adding support for Uniform Resource Identifiers (URIs) (RFC 3986) that use HTTP over TLS (HTTPS) (RFC 7230) as the scheme.
Publication Date: 2019-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8630
Link: https://doi.org/10.17487/RFC8630
Author(s): Geoff Huston
Sam Weiler
George Michaelson
Stephen Kent
Tim Bruijnzeels

Latest version of IETF RFC 8630

Document Versions — IETF RFC 8630

▶ IETF RFC 8630 (2019-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3779 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4648 [Active*]
IETF RFC 5198 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5781 [Active*]
IETF RFC 6125 [Superseded*]
IETF RFC 6480 [Active*]
IETF RFC 6487 [Active*]
IETF RFC 7230 [Superseded*]
IETF RFC 7525 [Superseded*]
IETF RFC 7730 [Superseded*]
IETF RFC 8174 [Active*]
T-REC-X.509.2016 — X.509 EXTERNAL

Bibliographic Reference(s)

IETF RFC 4158 [Active*]
IETF RFC 5914 [Active*]
IETF RFC 6486 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8630.json

Supersedes:

IETF RFC 7730 [Superseded*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8630, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator. Available at https://doi.org/10.17487/RFC8630

Snippet:

IETF RFC 8630, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator. Available at https://doi.org/10.17487/RFC8630

HTML (ISO 690 compliant)

Preview:

IETF RFC 8630, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator. Available at https://doi.org/10.17487/RFC8630

Snippet:

<span class="citation"><cite>IETF RFC 8630</cite>, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator. Available at <a href="https://doi.org/10.17487/RFC8630" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8630</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8630, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator
doi: 10.17487/RFC8630
url: https://doi.org/10.17487/RFC8630

Snippet:

<li>
<cite id="bib-rfc8630">IETF RFC 8630</cite>, Resource Public Key Infrastructure (RPKI) Trust Anchor Locator
<span class="doi">10.17487/RFC8630</span>
</li>

Referenced By

IETF RFC 9981 [Active*]