IETF RFC 9810
[ACTIVE]
Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 116
- Abstract
- This document describes the Internet X.509 Public Key Infrastructure (PKI) Certificate Management Protocol (CMP). Protocol messages are defined for X.509v3 certificate creation and management. CMP provides interactions between client systems and PKI components such as a Registration Authority (RA) and a Certification Authority (CA). This document adds support for management of certificates containing a Key Encapsulation Mechanism (KEM) public key and uses EnvelopedData instead of EncryptedValue. This document also includes the updates specified in Section 2 and Appendix A.2 of RFC 9480. This document obsoletes RFC 4210, and together with RFC 9811, it also obsoletes RFC 9480. Appendix F of this document updates Section 9 of RFC 5912.
- Publication Date
- 2025-07-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9810- Link
- https://doi.org/10.17487/RFC9810
- Author(s)
- Hendrik BrockhausDavid von OheimbMike OunsworthJohn Gray
- Keyword(s)
- CMP, HTTP, Certificate Management, PKI
Latest version of IETF RFC 9810
Document Versions — IETF RFC 9810
-
▶ IETF RFC 9810 (2025-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 2985 [Active*]
- IETF RFC 2986 [Active*]
- IETF RFC 3629 [Active*]
- IETF RFC 4211 [Active*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5480 [Active*]
- IETF RFC 5646 [Active*]
- IETF RFC 5652 [Active*]
- IETF RFC 5958 [Active*]
- IETF RFC 6402 [Superseded*]
- IETF RFC 8174 [Active*]
- IETF RFC 8933 [Active*]
- IETF RFC 9045 [Active*]
- IETF RFC 9481 [Active*]
- IETF RFC 9629 [Active*]
Bibliographic Reference(s)
- 3GPP.TS-33.310.202012 — ETSI-3GPP.33.310 EXTERNAL
- 10.1007-978-3-319-70500-2_12 — HHK EXTERNAL
- 10.1007-s00145-011-9114-1 — FO EXTERNAL
- 10.1109-ieeestd.2018.8423794 — IEEE.802.1AR-2018 EXTERNAL
- IETF.draft-ietf-lamps-kyber-certificates-11 — I-D.ietf-lamps-kyber-certificates EXTERNAL
- ISO.20543.2019 — ISO.20543-2019 EXTERNAL
- NIST.SP.800-90Ar1 — NIST_SP_800_90Ar1 EXTERNAL
- Gueneysu, T., Hodges, P., Land, G., Ounsworth, M., Stebila, D., and G. Zaverucha, "Proof-of-possession for KEM certificates using verifiable generation", Cryptology ePrint Archive, Paper 2022/703, 2022, <https://eprint.iacr.org/2022/703>. EXTERNAL
- UNISIG, "ERTMS/ETCS On-line Key Management FFFIS", Subset-137, V1.0.0, December 2015, <https://www.era.europa.eu/system/files/2023-01/sos3_index083_-_subset-137_v100.pdf>. EXTERNAL
- Heninger, N., Durumeric, Z., Wustrow, E., and J. A. Halderman, "Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices", 21st USENIX Security Symposium (USENIX Security 12), August 2012, <https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/heninger>. EXTERNAL
- Killmann, W. and W. Schindler, "A proposal for: Functionality classes for random number generators - Version 2.0", Federal Office for Information Security (BSI), September 2011, <https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Interpretationen/AIS_31_Functionality_classes_for_random_number_generators_e.pdf>. EXTERNAL
- National Institute of Science and Technology (NIST), "National Vulnerability Database - CVE-2008-0166", May 2008, <https://nvd.nist.gov/vuln/detail/CVE-2008-0166>. EXTERNAL
- IETF RFC 1847 [Active*]
- IETF RFC 2510 [Superseded*]
- IETF RFC 2585 [Active*]
- IETF RFC 4210 [Superseded*]
- RFC4212 — RFC4212 EXTERNAL
- IETF RFC 4303 [Active*]
- IETF RFC 4511 [Active*]
- IETF RFC 5912 [Active*]
- RFC6268 — RFC6268 EXTERNAL
- IETF RFC 6712 [Superseded*]
- IETF RFC 7296 [Active*]
- RFC7299 — RFC7299 EXTERNAL
- IETF RFC 8446 [Superseded*]
- RFC8572 — RFC8572 EXTERNAL
- RFC8649 — RFC8649 EXTERNAL
- RFC8995 — RFC8995 EXTERNAL
- IETF RFC 9147 [Active*]
- IETF RFC 9162 [Active*]
- IETF RFC 9480 [Superseded*]
- RFC9482 — RFC9482 EXTERNAL
- RFC9483 — RFC9483 EXTERNAL
- RFC9733 — RFC9733 EXTERNAL
- IETF RFC 9811 [Active*]
- ITU-T X.509 [Active]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9810.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9810, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP). Available at https://doi.org/10.17487/RFC9810
Snippet:
IETF RFC 9810, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP). Available at https://doi.org/10.17487/RFC9810
HTML (ISO 690 compliant)
Preview:
IETF RFC 9810, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP). Available at https://doi.org/10.17487/RFC9810
Snippet:
<span class="citation"><cite>IETF RFC 9810</cite>, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP). Available at <a href="https://doi.org/10.17487/RFC9810" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9810</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9810, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
doi: 10.17487/RFC9810
url: https://doi.org/10.17487/RFC9810
doi: 10.17487/RFC9810
url: https://doi.org/10.17487/RFC9810
Snippet:
<li> <cite id="bib-rfc9810">IETF RFC 9810</cite>, Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP) <span class="doi">10.17487/RFC9810</span> </li>
Referenced By
- IETF RFC 9811 [Active*]
- IETF RFC 9908 [Active*]
- IETF RFC 9965 [Active*]