Resources Public Key Infrastructure (RPKI)

My colleagues in HKSAR Government have successfully signed the routing prefixes with RPKI and the results could be checked over Hurricane Electric's BGP portal.

I guess the HKSAR Government is the first entity in Hong Kong to adopt RPKI signing to secure the global routing infrastructure.  RPKI signing is just one part.  For routers to be able to validate RPKI, the routers must be able to support RPKI and there is a need to establish an RPKI-validating cache server with trust anchors of the five RIRs configured.  Again,  I have no doubt that the Government will be the first entity in Hong Kong to adopt the full set of RPKI configurations.

No comments: