UPDF AI

RIPE NCC's Implementation of Resource Public Key Infrastructure (RPKI) Certificate Tree Validation

Oleg Muravskiy,T. Bruijnzeels

2018 · DOI: 10.17487/RFC8488
Request for Comments · 3 Citations

TLDR

This document describes the approach to validate the content of the RPKI certificate tree, as it is implemented in the RIPE NCC RPKI Validator, which allows it to be used with repositories available over the rsync protocol, theRPKI Repository Delta Protocol, and repositories that use a mix of both.

Abstract

This document describes the approach to validate the content of the

RPKI certificate tree, as it is implemented in the RIPE NCC RPKI

Validator. This approach is independent of a particular object

retrieval mechanism. This allows it to be used with repositories

available over the rsync protocol, the RPKI Repository Delta Protocol,

and repositories that use a mix of both.