Skip to main content

8. Security Considerations

8. Security Considerations​

The RPKI supports and improves the security of the global Internet routing system. Reliability improvements to RPKI, such as those described here, strengthen its dependability.

When an RP skips the manifestNumber check after a filename change, it should still verify thisUpdate according to [RFC9286] to protect against replay attacks. Section 4 adds another replay-attack protection through manifest SIA verification. Although this document updates [RFC9286], the security considerations from [RFC9286] remain relevant.

Last updated on