--- 1/draft-ietf-sidrops-rpki-tree-validation-01.txt 2018-06-29 07:14:36.851886125 -0700 +++ 2/draft-ietf-sidrops-rpki-tree-validation-02.txt 2018-06-29 07:14:37.891911005 -0700 @@ -1,53 +1,54 @@ SIDR Operations O. Muravskiy -Internet-Draft T. Bruijnzeels -Intended status: Informational RIPE NCC -Expires: January 20, 2018 July 19, 2017 +Internet-Draft RIPE NCC +Intended status: Informational T. Bruijnzeels +Expires: December 30, 2018 NLNetLabs + June 28, 2018 RPKI Certificate Tree Validation by the RIPE NCC RPKI Validator - draft-ietf-sidrops-rpki-tree-validation-01 + draft-ietf-sidrops-rpki-tree-validation-02 Abstract This document describes the approach to validate the content of the RPKI certificate tree, as it is implemented in the RIPE NCC RPKI Validator. This approach is independent of a particular object retrieval mechanism. This allows it to be used with repositories available over the rsync protocol, the RPKI Repository Delta Protocol, and repositories that use a mix of both. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- - Drafts is at http://datatracker.ietf.org/drafts/current/. + Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." - This Internet-Draft will expire on January 20, 2018. + This Internet-Draft will expire on December 30, 2018. Copyright Notice - Copyright (c) 2017 IETF Trust and the persons identified as the + Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents - (http://trustee.ietf.org/license-info) in effect on the date of + (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Scope of this document . . . . . . . . . . . . . . . . . . . 3 @@ -626,76 +627,77 @@ 10.1. Normative References [I-D.ietf-sidr-delta-protocol] Bruijnzeels, T., Muravskiy, O., Weber, B., and R. Austein, "RPKI Repository Delta Protocol (RRDP)", draft-ietf-sidr- delta-protocol-08 (work in progress), March 2017. [I-D.ietf-sidr-rpki-validation-reconsidered] Huston, G., Michaelson, G., Martinez, C., Bruijnzeels, T., Newton, A., and D. Shaw, "RPKI Validation Reconsidered", - draft-ietf-sidr-rpki-validation-reconsidered-08 (work in - progress), June 2017. + draft-ietf-sidr-rpki-validation-reconsidered-10 (work in + progress), December 2017. [RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008, - . + . [RFC6481] Huston, G., Loomans, R., and G. Michaelson, "A Profile for Resource Certificate Repository Structure", RFC 6481, DOI 10.17487/RFC6481, February 2012, - . + . [RFC6482] Lepinski, M., Kent, S., and D. Kong, "A Profile for Route Origin Authorizations (ROAs)", RFC 6482, DOI 10.17487/RFC6482, February 2012, - . + . [RFC6485] Huston, G., "The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (RPKI)", RFC 6485, DOI 10.17487/RFC6485, February 2012, - . + . [RFC6486] Austein, R., Huston, G., Kent, S., and M. Lepinski, "Manifests for the Resource Public Key Infrastructure (RPKI)", RFC 6486, DOI 10.17487/RFC6486, February 2012, - . + . [RFC6487] Huston, G., Michaelson, G., and R. Loomans, "A Profile for X.509 PKIX Resource Certificates", RFC 6487, DOI 10.17487/RFC6487, February 2012, - . + . [RFC6488] Lepinski, M., Chi, A., and S. Kent, "Signed Object Template for the Resource Public Key Infrastructure (RPKI)", RFC 6488, DOI 10.17487/RFC6488, February 2012, - . + . [RFC6493] Bush, R., "The Resource Public Key Infrastructure (RPKI) Ghostbusters Record", RFC 6493, DOI 10.17487/RFC6493, - February 2012, . + February 2012, . [RFC7730] Huston, G., Weiler, S., Michaelson, G., and S. Kent, "Resource Public Key Infrastructure (RPKI) Trust Anchor Locator", RFC 7730, DOI 10.17487/RFC7730, January 2016, - . + . 10.2. Informative References - [github] "RIPE NCC RPKI Validator on GitHub", . + [github] "RIPE NCC RPKI Validator on GitHub", + . [rsync] "Rsync home page", . Authors' Addresses Oleg Muravskiy RIPE NCC Email: oleg@ripe.net - + URI: https://www.ripe.net/ Tim Bruijnzeels - RIPE NCC + NLNetLabs - Email: tim@ripe.net + Email: tim@nlnetlabs.nl + URI: https://www.nlnetlabs.nl/