357 files changed, 1070 insertions, 1426 deletions

diff --git a/Makefile.in b/Makefile.in
index 1247ff0d..4465ef9e 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -1,16 +1,38 @@
 # $Id$
 
-PYTHON = @PYTHON@
+CFLAGS		= @CFLAGS@
+LDFLAGS		= @LDFLAGS@ @POW_LDFLAGS@
+LIBS		= @LIBS@
 
-abs_top_builddir = @abs_top_builddir@
+PYTHON		= @PYTHON@
+INSTALL		= @INSTALL@ -m 555 
 
-SUBDIRS = @TOP_LEVEL_SUBDIRS@
+prefix		= @prefix@
+exec_prefix	= @exec_prefix@
+datarootdir	= @datarootdir@
+datadir		= @datadir@
+localstatedir	= @localstatedir@
+sharedstatedir	= @sharedstatedir@
+sysconfdir	= @sysconfdir@
+bindir		= @bindir@
+sbindir		= @sbindir@
+libexecdir	= @libexecdir@
+sysconfdir	= @sysconfdir@
+
+abs_builddir	= @abs_builddir@
+abs_top_srcdir	= @abs_top_srcdir@
+abs_top_builddir= @abs_top_builddir@
+srcdir          = @srcdir@
+
+SUBDIRS		= @TOP_LEVEL_SUBDIRS@
+
+SETUP_PY_INSTALL_LAYOUT = @SETUP_PY_INSTALL_LAYOUT@
 
 default: all
 
 test:: all
 
-all:: VERSION
+all:: VERSION rpki/autoconf.py setup_autoconf.py
 
 all install clean test distclean deinstall uninstall::
 	@for i in ${SUBDIRS}; do echo "Making $@ in $$i"; (cd $$i && ${MAKE} $@); done
@@ -20,8 +42,9 @@ export:
 	tar czf subvert-rpki.hactrn.net-$$(date +%Y.%m.%d).tar.gz subvert-rpki.hactrn.net
 	rm -rf subvert-rpki.hactrn.net
 
-distclean clean::
-	rm -rf build autom4te.cache
+clean distclean::
+	rm -rf build autom4te.cache rpki/autoconf.py setup_autoconf.py setup_autoconf.pyc ${POW_SO} build dist
+	find . -type f -name '*.py[co]' -delete
 
 distclean::
 	rm -rf Makefile config.log config.status
@@ -30,3 +53,56 @@ VERSION: .FORCE
 	${PYTHON} buildtools/make-version.py
 
 .FORCE:
+
+rpki/autoconf.py: Makefile
+	@echo 'Generating $@';							\
+	(echo '# Automatically generated.  DO NOT EDIT.';			\
+	 echo ;									\
+	 echo 'bindir	      = "${bindir}"';					\
+	 echo 'datarootdir    = "${datarootdir}"';				\
+	 echo 'localstatedir  = "${localstatedir}"';				\
+	 echo 'sbindir	      = "${sbindir}"';					\
+	 echo 'sharedstatedir = "${sharedstatedir}"';				\
+	 echo 'sysconfdir     = "${sysconfdir}"';				\
+	 echo 'libexecdir     = "${libexecdir}"';				\
+	 echo ;									\
+	 echo 'WSGI_DAEMON_PROCESS	    = "${WSGI_DAEMON_PROCESS}"';	\
+	 echo 'WSGI_PROCESS_GROUP	    = "${WSGI_PROCESS_GROUP}"';		\
+	 echo 'RCYNIC_HTML_DIR		    = "${RCYNIC_HTML_DIR}"';		\
+	 echo 'APACHE_VERSION		    = "${APACHE_VERSION}"';		\
+	 echo 'WSGI_PYTHON_EGG_CACHE_DIR    = "${WSGI_PYTHON_EGG_CACHE_DIR}"';	\
+	 echo 'WSGI_PYTHON_EGG_CACHE_USER   = "${WSGI_PYTHON_EGG_CACHE_USER}"';	\
+	) > $@
+
+setup_autoconf.py: rpki/autoconf.py
+	@echo 'Generating $@';					\
+	(cat rpki/autoconf.py;					\
+	 echo ;							\
+	 echo 'CFLAGS         = """${CFLAGS}"""';               \
+	 echo 'LDFLAGS        = """${LDFLAGS}"""';              \
+	 echo 'LIBS           = """${LIBS}"""';                 \
+	) > $@
+
+SETUP_PY_ROOT = `${PYTHON} -c 'import sys; print "--root " + sys.argv[1] if sys.argv[1] else ""' '${DESTDIR}'`
+
+POW_SO	= rpki/POW/_POW.so
+
+all:: setup_autoconf.py ${POW_SO} build/stamp
+
+.FORCE:
+
+${POW_SO}: .FORCE setup_autoconf.py
+	${PYTHON} setup.py build_ext --inplace
+
+build/stamp: .FORCE setup_autoconf.py
+	${PYTHON} setup.py build
+	touch $@
+
+lint:
+	find rpki -name '*.py' | xargs pylint --rcfile ${abs_top_srcdir}/buildtools/pylint.rc
+
+tags: Makefile
+	find rpki rp ca schemas -type f \
+		\( -name '*.[ch] -o -name '*.py' -o -name '*.sql' -o -name '*.rnc' \) \
+		! -name relaxng.py ! -name sql_schemas.py -print | \
+	etags -
diff --git a/buildtools/make-version.py b/buildtools/make-version.py
index af513b5d..a73a89ab 100644
--- a/buildtools/make-version.py
+++ b/buildtools/make-version.py
@@ -63,7 +63,7 @@ if v == unknown:
     sys.stderr.write("Warning: Could not determine software version\n")
 
 if old is None or v != old:
+  with open("rpki/version.py", "w") as f:
+    f.write("VERSION = \"%s\"\n" % v)
   with open("VERSION", "w") as f:
     f.write(v + "\n")
-  with open("rpkid/rpki/version.py", "w") as f:
-    f.write("VERSION = \"%s\"\n" % v)
diff --git a/rpkid/Doxyfile b/ca/Doxyfile
index 33f39f4b..33f39f4b 100644
--- a/rpkid/Doxyfile
+++ b/ca/Doxyfile
diff --git a/rpkid/Makefile.in b/ca/Makefile.in
index d36a3163..317b8395 100644
--- a/rpkid/Makefile.in
+++ b/ca/Makefile.in
@@ -33,58 +33,12 @@ APACHE_VERSION			= @APACHE_VERSION@
 WSGI_PYTHON_EGG_CACHE_DIR	= @WSGI_PYTHON_EGG_CACHE_DIR@
 WSGI_PYTHON_EGG_CACHE_USER	= @WSGI_PYTHON_EGG_CACHE_USER@
 
-RPKID_INSTALL_TARGETS	= @RPKID_INSTALL_TARGETS@
-
-SETUP_PY_INSTALL_LAYOUT = @SETUP_PY_INSTALL_LAYOUT@
-
-SETUP_PY_ROOT = `${PYTHON} -c 'import sys; print "--root " + sys.argv[1] if sys.argv[1] else ""' '${DESTDIR}'`
-
-POW_SO = rpki/POW/_POW.so
-
-all:: rpki/autoconf.py setup_autoconf.py rpki/relaxng.py myrpki.rng rpki/sql_schemas.py ${POW_SO} build/stamp
-
-.FORCE:
-
-${POW_SO}: .FORCE setup_autoconf.py
-	${PYTHON} setup.py build_ext --inplace
-
-build/stamp: .FORCE setup_autoconf.py
-	${PYTHON} setup.py build
-	touch $@
+CA_INSTALL_TARGETS	= @CA_INSTALL_TARGETS@
 
 clean::
-	rm -rf ${POW_SO} build dist
-
-RNGS = left-right-schema.rng up-down-schema.rng publication-schema.rng myrpki.rng router-certificate-schema.rng
-
-rpki/relaxng.py: ${abs_top_srcdir}/buildtools/make-relaxng.py ${RNGS}
-	${PYTHON} ${abs_top_srcdir}/buildtools/make-relaxng.py ${RNGS} >$@.tmp
-	mv $@.tmp $@
-
-left-right-schema.rng: left-right-schema.rnc
-	${TRANG} left-right-schema.rnc left-right-schema.rng
-
-up-down-schema.rng: up-down-schema.rnc
-	${TRANG} up-down-schema.rnc up-down-schema.rng
-
-publication-schema.rng: publication-schema.rnc
-	${TRANG} publication-schema.rnc publication-schema.rng
-
-myrpki.rng: myrpki.rnc
-	${TRANG} myrpki.rnc myrpki.rng
-
-router-certificate-schema.rng: router-certificate-schema.rnc
-	${TRANG} router-certificate-schema.rnc router-certificate-schema.rng
-
-rpki/sql_schemas.py: ${abs_top_srcdir}/buildtools/make-sql-schemas.py rpkid.sql pubd.sql
-	${PYTHON} ${abs_top_srcdir}/buildtools/make-sql-schemas.py >$@.tmp
-	mv $@.tmp $@
-
-clean::
-	find . -type f -name '*.py[co]' -delete
 	cd tests; $(MAKE) $@
 
-install:: ${RPKID_INSTALL_TARGETS}
+install:: ${CA_INSTALL_TARGETS}
 
 install-always:: all
 	${PYTHON} setup.py install ${SETUP_PY_ROOT} ${SETUP_PY_INSTALL_LAYOUT} --record installed
@@ -101,77 +55,27 @@ uninstall deinstall::
 distclean::
 	rm -f installed
 
-dont-run-trang:
-	touch *.rng
-
-relaxng: left-right-schema.rng up-down-schema.rng publication-schema.rng
+relaxng:
 	cd tests; $(MAKE) protocol-samples
-	xmllint --noout --relaxng  left-right-schema.rng  tests/left-right-protocol-samples/*.xml
-	xmllint --noout --relaxng     up-down-schema.rng     tests/up-down-protocol-samples/*.xml
-	xmllint --noout --relaxng publication-schema.rng tests/publication-protocol-samples/*.xml
+	xmllint --noout --relaxng ../schemas/relaxng/left-right-schema.rng  tests/left-right-protocol-samples/*.xml
+	xmllint --noout --relaxng ../schemas/relaxng/up-down-schema.rng     tests/up-down-protocol-samples/*.xml
+	xmllint --noout --relaxng ../schemas/relaxng/publication-schema.rng tests/publication-protocol-samples/*.xml
 
 unit-tests: all
 	PWD=`pwd`; for i in rpki/*.py; do echo "[$$i]"; PYTHONPATH=$$PWD ${PYTHON} $$i; done
 
-all-tests:: unit-tests
-
-all-tests:: relaxng
+all-tests:: unit-tests relaxng
 
 test all-tests parse-test profile yamltest yamlconf:: all
 	cd tests; $(MAKE) $@
 
-tags: Makefile
-	find . -type d -name build -prune -o -type f \( -name '*.py' -o -name '*.sql' -o -name '*.rnc' -o -name '*.py.in' \) ! -name relaxng.py ! -name sql_schemas.py -print | etags -
-
-lint:
-	pylint --rcfile ${abs_top_srcdir}/buildtools/pylint.rc rpki/*.py rpki/irdb/*.py *.py tests/*.py
-
-# Documentation
-
-doc/pubd.dot: pubd.sql
-	sh ${abs_top_srcdir}/buildtools/graphviz-sql.sh $? >$@
-
-doc/rpkid.dot: rpkid.sql
-	sh ${abs_top_srcdir}/buildtools/graphviz-sql.sh $? >$@
-
-.SUFFIXES: .dot .png .pdf .eps
-
-.dot.pdf:
-	dot -Tps2 $? | ps2pdf - $@
-
-.dot.eps:
-	dot -o $@ -Teps $?
-
-.dot.png:
-	dot -o $@ -Tpng $?
-
-dot: doc/pubd.dot doc/rpkid.dot
-
-eps: doc/pubd.eps doc/rpkid.eps doc/rpkid-bpki.eps doc/pubd-bpki.eps
-
-png: doc/pubd.png doc/rpkid.png doc/rpkid-bpki.png doc/pubd-bpki.png
-
-pdf: doc/pubd.pdf doc/rpkid.pdf doc/rpkid-bpki.pdf doc/pubd-bpki.pdf
-
-docclean:
-	rm -rf doc/html doc/latex doc/xml
-	rm -f  doc/*.eps doc/*.pdf doc/*.png
-	rm -f doc/pubd.dot doc/rpkid.dot
-
-html: dot eps png
-	TZ='' IMAGE_PATH=${abs_builddir}/doc doxygen
-
-docs: dot eps png html pdf
-
-##
-
-distclean:: clean docclean
+distclean:: clean
 	cd tests; ${MAKE} $@
-	rm -f TAGS Makefile
+	rm -f Makefile
 
 all:: examples/rpki.conf
 
-examples/rpki.conf: rpki/autoconf.py rpki-confgen rpki-confgen.xml
+examples/rpki.conf: ${abs_top_srcdir}/rpki/autoconf.py rpki-confgen rpki-confgen.xml
 	${PYTHON} rpki-confgen \
 		--read-xml rpki-confgen.xml \
 		--autoconf \
@@ -185,41 +89,6 @@ examples/rpki.conf: rpki/autoconf.py rpki-confgen rpki-confgen.xml
 clean::
 	rm -f examples/rpki.conf
 
-rpki/autoconf.py: Makefile
-	@echo 'Generating $@';							\
-	(echo '# Automatically generated.  DO NOT EDIT.';			\
-	 echo ;									\
-	 echo 'bindir	      = "${bindir}"';					\
-	 echo 'datarootdir    = "${datarootdir}"';				\
-	 echo 'localstatedir  = "${localstatedir}"';				\
-	 echo 'sbindir	      = "${sbindir}"';					\
-	 echo 'sharedstatedir = "${sharedstatedir}"';				\
-	 echo 'sysconfdir     = "${sysconfdir}"';				\
-	 echo 'libexecdir     = "${libexecdir}"';				\
-	 echo ;									\
-	 echo 'WSGI_DAEMON_PROCESS	    = "${WSGI_DAEMON_PROCESS}"';	\
-	 echo 'WSGI_PROCESS_GROUP	    = "${WSGI_PROCESS_GROUP}"';		\
-	 echo 'RCYNIC_HTML_DIR		    = "${RCYNIC_HTML_DIR}"';		\
-	 echo 'APACHE_VERSION		    = "${APACHE_VERSION}"';		\
-	 echo 'WSGI_PYTHON_EGG_CACHE_DIR    = "${WSGI_PYTHON_EGG_CACHE_DIR}"';	\
-	 echo 'WSGI_PYTHON_EGG_CACHE_USER   = "${WSGI_PYTHON_EGG_CACHE_USER}"';	\
-	) > $@
-
-clean::
-	rm -f rpki/autoconf.py
-
-setup_autoconf.py: rpki/autoconf.py
-	@echo 'Generating $@';					\
-	(cat rpki/autoconf.py;					\
-	 echo ;							\
-	 echo 'CFLAGS         = """${CFLAGS}"""';               \
-	 echo 'LDFLAGS        = """${LDFLAGS}"""';              \
-	 echo 'LIBS           = """${LIBS}"""';                 \
-	) > $@
-
-clean::
-	rm -f setup_autoconf.py setup_autoconf.pyc
-
 install-postconf: \
 	install-user install-egg-cache install-conf install-apache install-mysql install-django install-bpki install-cron
 
diff --git a/rpkid/README b/ca/README
index 91d372de..91d372de 100644
--- a/rpkid/README
+++ b/ca/README
diff --git a/rpkid/examples/asns.csv b/ca/examples/asns.csv
index 9d742740..9d742740 100644
--- a/rpkid/examples/asns.csv
+++ b/ca/examples/asns.csv
diff --git a/rpkid/examples/prefixes.csv b/ca/examples/prefixes.csv
index ece18d32..ece18d32 100644
--- a/rpkid/examples/prefixes.csv
+++ b/ca/examples/prefixes.csv
diff --git a/rpkid/examples/roas.csv b/ca/examples/roas.csv
index e4ec3074..e4ec3074 100644
--- a/rpkid/examples/roas.csv
+++ b/ca/examples/roas.csv
diff --git a/rpkid/examples/rsyncd.conf b/ca/examples/rsyncd.conf
index faf1dd0d..faf1dd0d 100644
--- a/rpkid/examples/rsyncd.conf
+++ b/ca/examples/rsyncd.conf
diff --git a/rpkid/irbe_cli b/ca/irbe_cli
index 9deac6d6..9deac6d6 100755
--- a/rpkid/irbe_cli
+++ b/ca/irbe_cli
diff --git a/rpkid/irdbd b/ca/irdbd
index 493e3d72..493e3d72 100755
--- a/rpkid/irdbd
+++ b/ca/irdbd
diff --git a/rpkid/pubd b/ca/pubd
index 7d8ecbfa..7d8ecbfa 100755
--- a/rpkid/pubd
+++ b/ca/pubd
diff --git a/rpkid/rootd b/ca/rootd
index cb59f958..cb59f958 100755
--- a/rpkid/rootd
+++ b/ca/rootd
diff --git a/rpkid/tests/rpki b/ca/rpki
index 8d289d0b..8d289d0b 120000
--- a/rpkid/tests/rpki
+++ b/ca/rpki
diff --git a/rpkid/rpki-confgen b/ca/rpki-confgen
index f531bee8..f531bee8 100755
--- a/rpkid/rpki-confgen
+++ b/ca/rpki-confgen
diff --git a/rpkid/rpki-confgen.xml b/ca/rpki-confgen.xml
index e0ed273a..e0ed273a 100644
--- a/rpkid/rpki-confgen.xml
+++ b/ca/rpki-confgen.xml
diff --git a/rpkid/portal-gui/scripts/rpki-manage b/ca/rpki-manage
index 0d581ce9..0d581ce9 100755
--- a/rpkid/portal-gui/scripts/rpki-manage
+++ b/ca/rpki-manage
diff --git a/rpkid/rpki-sql-backup b/ca/rpki-sql-backup
index 0b2d079d..0b2d079d 100755
--- a/rpkid/rpki-sql-backup
+++ b/ca/rpki-sql-backup
diff --git a/rpkid/rpki-sql-setup b/ca/rpki-sql-setup
index 40a78532..40a78532 100755
--- a/rpkid/rpki-sql-setup
+++ b/ca/rpki-sql-setup
diff --git a/rpkid/rpki-start-servers b/ca/rpki-start-servers
index edaffb2e..edaffb2e 100755
--- a/rpkid/rpki-start-servers
+++ b/ca/rpki-start-servers
diff --git a/rpkid/portal-gui/rpki.wsgi b/ca/rpki.wsgi
index 72ba75ac..72ba75ac 100644
--- a/rpkid/portal-gui/rpki.wsgi
+++ b/ca/rpki.wsgi
diff --git a/rpkid/rpkic b/ca/rpkic
index 333a5eb7..333a5eb7 100755
--- a/rpkid/rpkic
+++ b/ca/rpkic
diff --git a/rpkid/rpkid b/ca/rpkid
index a4cc6cd3..a4cc6cd3 100755
--- a/rpkid/rpkid
+++ b/ca/rpkid
diff --git a/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen b/ca/rpkigui-apache-conf-gen
index 6201c364..6201c364 100755
--- a/rpkid/portal-gui/scripts/rpkigui-apache-conf-gen
+++ b/ca/rpkigui-apache-conf-gen
diff --git a/rpkid/portal-gui/scripts/rpkigui-check-expired b/ca/rpkigui-check-expired
index eb0c7fbb..eb0c7fbb 100755
--- a/rpkid/portal-gui/scripts/rpkigui-check-expired
+++ b/ca/rpkigui-check-expired
diff --git a/rpkid/portal-gui/scripts/rpkigui-import-routes b/ca/rpkigui-import-routes
index 234a865b..234a865b 100755
--- a/rpkid/portal-gui/scripts/rpkigui-import-routes
+++ b/ca/rpkigui-import-routes
diff --git a/rpkid/portal-gui/scripts/rpkigui-query-routes b/ca/rpkigui-query-routes
index 1f698f23..1f698f23 100755
--- a/rpkid/portal-gui/scripts/rpkigui-query-routes
+++ b/ca/rpkigui-query-routes
diff --git a/rpkid/portal-gui/scripts/rpkigui-rcynic b/ca/rpkigui-rcynic
index 8fb91a70..8fb91a70 100755
--- a/rpkid/portal-gui/scripts/rpkigui-rcynic
+++ b/ca/rpkigui-rcynic
diff --git a/rpkid/tests/Makefile.in b/ca/tests/Makefile.in
index b63e8dc3..b63e8dc3 100644
--- a/rpkid/tests/Makefile.in
+++ b/ca/tests/Makefile.in
diff --git a/rpkid/tests/left-right-protocol-samples.xml b/ca/tests/left-right-protocol-samples.xml
index 7b97386d..7b97386d 100644
--- a/rpkid/tests/left-right-protocol-samples.xml
+++ b/ca/tests/left-right-protocol-samples.xml
diff --git a/rpkid/tests/myrpki-xml-parse-test.py b/ca/tests/myrpki-xml-parse-test.py
index 10b9cd58..10b9cd58 100644
--- a/rpkid/tests/myrpki-xml-parse-test.py
+++ b/ca/tests/myrpki-xml-parse-test.py
diff --git a/rpkid/tests/old_irdbd.py b/ca/tests/old_irdbd.py
index d258e4c0..d258e4c0 100644
--- a/rpkid/tests/old_irdbd.py
+++ b/ca/tests/old_irdbd.py
diff --git a/rpkid/tests/old_irdbd.sql b/ca/tests/old_irdbd.sql
index e773bb2e..e773bb2e 100644
--- a/rpkid/tests/old_irdbd.sql
+++ b/ca/tests/old_irdbd.sql
diff --git a/rpkid/tests/publication-protocol-samples.xml b/ca/tests/publication-protocol-samples.xml
index 96b095a7..96b095a7 100644
--- a/rpkid/tests/publication-protocol-samples.xml
+++ b/ca/tests/publication-protocol-samples.xml
diff --git a/rpkid/tests/rcynic.conf b/ca/tests/rcynic.conf
index ea31fe58..ea31fe58 100644
--- a/rpkid/tests/rcynic.conf
+++ b/ca/tests/rcynic.conf
diff --git a/rpkid/tests/revoke.yaml b/ca/tests/revoke.yaml
index 2edb8335..ae53f0d8 100644
--- a/rpkid/tests/revoke.yaml
+++ b/ca/tests/revoke.yaml
@@ -54,7 +54,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -67,7 +67,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 
@@ -81,7 +81,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -92,7 +92,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -105,7 +105,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -118,7 +118,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -129,7 +129,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -142,7 +142,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -155,7 +155,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -166,7 +166,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -179,7 +179,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -192,7 +192,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -203,7 +203,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -216,7 +216,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -229,7 +229,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -240,7 +240,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -253,7 +253,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -266,7 +266,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -277,7 +277,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -290,7 +290,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -303,7 +303,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -314,7 +314,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -327,7 +327,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -340,7 +340,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -351,7 +351,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -364,7 +364,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -377,7 +377,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
@@ -388,7 +388,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -401,7 +401,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - name: R0
@@ -414,7 +414,7 @@ kids:
   cd rcynic-data;
   pax -rwl . ../$dir; find . -type f -name '*.cer' |
   sort |
-  xargs ../../../../utils/uri/uri -s
+  xargs ../../../../rp/utils/uri -s
   >../${dir%.data}.uris;
   sleep 1
 - sleep 30
diff --git a/rpkid/tests/rootd.yaml b/ca/tests/rootd.yaml
index 2ee5dcd4..2ee5dcd4 100644
--- a/rpkid/tests/rootd.yaml
+++ b/ca/tests/rootd.yaml
diff --git a/ca/tests/rpki b/ca/tests/rpki
new file mode 120000
index 00000000..8d289d0b
--- /dev/null
+++ b/ca/tests/rpki
@@ -0,0 +1 @@
+../rpki
\ No newline at end of file
diff --git a/rpkid/tests/smoketest.1.yaml b/ca/tests/smoketest.1.yaml
index 914aaae4..81bc887a 100644
--- a/rpkid/tests/smoketest.1.yaml
+++ b/ca/tests/smoketest.1.yaml
@@ -52,7 +52,7 @@ kids:
 
 ---
 - shell set -x;
-  rtr_origin='python ../../../rtr-origin/rtr-origin.py';
+  rtr_origin='python ../../../rp/rpki-rtr/rtr-origin.py';
   $rtr_origin --cronjob rcynic-data/authenticated &&
   $rtr_origin --show
 ---
@@ -70,7 +70,7 @@ kids:
       ipv4: 10.3.0.1/32, 10.0.0.44/32
 ---
 - shell set -x;
-  rtr_origin='python ../../../rtr-origin/rtr-origin.py';
+  rtr_origin='python ../../../rp/rpki-rtr/rtr-origin.py';
   $rtr_origin --cronjob rcynic-data/authenticated &&
   $rtr_origin --show
 ---
diff --git a/rpkid/tests/smoketest.2.yaml b/ca/tests/smoketest.2.yaml
index 0cdec650..0cdec650 100644
--- a/rpkid/tests/smoketest.2.yaml
+++ b/ca/tests/smoketest.2.yaml
diff --git a/rpkid/tests/smoketest.3.yaml b/ca/tests/smoketest.3.yaml
index e6a10a12..41a88643 100644
--- a/rpkid/tests/smoketest.3.yaml
+++ b/ca/tests/smoketest.3.yaml
@@ -51,17 +51,17 @@ kids:
         ipv4: 10.3.0.0/23
 ---
 #- shell find publication -type f -name '*.roa'
-#        -print -exec ../../../utils/print_roa/print_roa {} \;
+#        -print -exec ../../../rp/utils/print_roa {} \;
 #- shell find publication -type f -name '*.mft'
-#        -print -exec ../../../utils/print_manifest/print_manifest {} \;
+#        -print -exec ../../../rp/utils/print_manifest {} \;
 #---
 #- shell find publication -type f -name '*.roa'
-#        -print -exec ../../../utils/print_roa/print_roa {} \;
+#        -print -exec ../../../rp/utils/print_roa {} \;
 #- shell find publication -type f -name '*.mft'
-#        -print -exec ../../../utils/print_manifest/print_manifest {} \;
+#        -print -exec ../../../rp/utils/print_manifest {} \;
 #---
 - shell set -x;
-  rtr_origin=../../../rtr-origin/rtr-origin;
+  rtr_origin=../../../rp/rpki-rtr/rtr-origin;
   $rtr_origin --cronjob rcynic-data/authenticated &&
   $rtr_origin --show
 ---
@@ -76,6 +76,6 @@ kids:
       ipv6: 2002:0a00::/32-128
 ---
 - shell set -x;
-  rtr_origin=../../../rtr-origin/rtr-origin;
+  rtr_origin=../../../rp/rpki-rtr/rtr-origin;
   $rtr_origin --cronjob rcynic-data/authenticated &&
   $rtr_origin --show
diff --git a/rpkid/tests/smoketest.4.yaml b/ca/tests/smoketest.4.yaml
index c0d446bc..c0d446bc 100644
--- a/rpkid/tests/smoketest.4.yaml
+++ b/ca/tests/smoketest.4.yaml
diff --git a/rpkid/tests/smoketest.5.yaml b/ca/tests/smoketest.5.yaml
index c6304dfc..c6304dfc 100644
--- a/rpkid/tests/smoketest.5.yaml
+++ b/ca/tests/smoketest.5.yaml
diff --git a/rpkid/tests/smoketest.6.yaml b/ca/tests/smoketest.6.yaml
index e8d65433..e8d65433 100644
--- a/rpkid/tests/smoketest.6.yaml
+++ b/ca/tests/smoketest.6.yaml
diff --git a/rpkid/tests/smoketest.7.yaml b/ca/tests/smoketest.7.yaml
index fedd2fff..7c808552 100644
--- a/rpkid/tests/smoketest.7.yaml
+++ b/ca/tests/smoketest.7.yaml
@@ -70,8 +70,8 @@ roa_request:
 ---
 - shell set -x;
   find publication -type f -name '*.roa'
-       -print -exec ../../../utils/print_roa/print_roa {} \;
+       -print -exec ../../../rp/utils/print_roa {} \;
        ;
-  rtr_origin=../../../rtr-origin/rtr-origin;
+  rtr_origin=../../../rp/rpki-rtr/rtr-origin;
   $rtr_origin --cronjob rcynic-data/authenticated &&
   $rtr_origin --show
diff --git a/rpkid/tests/smoketest.8.yaml b/ca/tests/smoketest.8.yaml
index cd6d1e7a..cd6d1e7a 100644
--- a/rpkid/tests/smoketest.8.yaml
+++ b/ca/tests/smoketest.8.yaml
diff --git a/rpkid/tests/smoketest.9.yaml b/ca/tests/smoketest.9.yaml
index 3efc4f08..3efc4f08 100644
--- a/rpkid/tests/smoketest.9.yaml
+++ b/ca/tests/smoketest.9.yaml
diff --git a/rpkid/tests/smoketest.clean.sql b/ca/tests/smoketest.clean.sql
index 9f5ff9fb..9f5ff9fb 100644
--- a/rpkid/tests/smoketest.clean.sql
+++ b/ca/tests/smoketest.clean.sql
diff --git a/rpkid/tests/smoketest.py b/ca/tests/smoketest.py
index 28bedaa4..e5f5a754 100644
--- a/rpkid/tests/smoketest.py
+++ b/ca/tests/smoketest.py
@@ -115,14 +115,14 @@ prog_poke      = cfg.get("prog_poke",      "../testpoke.py")
 prog_rootd     = cfg.get("prog_rootd",     "../../rootd")
 prog_pubd      = cfg.get("prog_pubd",      "../../pubd")
 prog_rsyncd    = cfg.get("prog_rsyncd",    "rsync")
-prog_rcynic    = cfg.get("prog_rcynic",    "../../../rcynic/rcynic")
+prog_rcynic    = cfg.get("prog_rcynic",    "../../../rp/rcynic/rcynic")
 prog_openssl   = cfg.get("prog_openssl",   "../../../openssl/openssl/apps/openssl")
 
-rcynic_stats   = cfg.get("rcynic_stats",   "echo ; ../../../rcynic/rcynic-text %s.xml ; echo" % rcynic_name)
+rcynic_stats   = cfg.get("rcynic_stats",   "echo ; ../../../rp/rcynic/rcynic-text %s.xml ; echo" % rcynic_name)
 
-rpki_sql_file  = cfg.get("rpki_sql_file",  "../rpkid.sql")
+rpki_sql_file  = cfg.get("rpki_sql_file",  "../../schemas/sql/rpkid.sql")
 irdb_sql_file  = cfg.get("irdb_sql_file",  "old_irdbd.sql")
-pub_sql_file   = cfg.get("pub_sql_file",   "../pubd.sql")
+pub_sql_file   = cfg.get("pub_sql_file",   "../../schemas/sql/pubd.sql")
 
 startup_delay  = int(cfg.get("startup_delay", "10"))
 
diff --git a/rpkid/tests/smoketest.setup.sql b/ca/tests/smoketest.setup.sql
index 326988f1..326988f1 100644
--- a/rpkid/tests/smoketest.setup.sql
+++ b/ca/tests/smoketest.setup.sql
diff --git a/rpkid/tests/split-protocol-samples.xsl b/ca/tests/split-protocol-samples.xsl
index 8800b6da..8800b6da 100644
--- a/rpkid/tests/split-protocol-samples.xsl
+++ b/ca/tests/split-protocol-samples.xsl
diff --git a/rpkid/tests/sql-cleaner.py b/ca/tests/sql-cleaner.py
index c5b25ac2..c5b25ac2 100644
--- a/rpkid/tests/sql-cleaner.py
+++ b/ca/tests/sql-cleaner.py
diff --git a/rpkid/tests/sql-dumper.py b/ca/tests/sql-dumper.py
index f4a7681d..f4a7681d 100644
--- a/rpkid/tests/sql-dumper.py
+++ b/ca/tests/sql-dumper.py
diff --git a/rpkid/tests/testpoke.py b/ca/tests/testpoke.py
index fd5ab206..fd5ab206 100644
--- a/rpkid/tests/testpoke.py
+++ b/ca/tests/testpoke.py
diff --git a/rpkid/tests/testpoke.xsl b/ca/tests/testpoke.xsl
index 91658b0b..91658b0b 100644
--- a/rpkid/tests/testpoke.xsl
+++ b/ca/tests/testpoke.xsl
diff --git a/rpkid/tests/testpoke.yaml b/ca/tests/testpoke.yaml
index f2b2c618..f2b2c618 100644
--- a/rpkid/tests/testpoke.yaml
+++ b/ca/tests/testpoke.yaml
diff --git a/rpkid/tests/up-down-protocol-samples/Makefile b/ca/tests/up-down-protocol-samples/Makefile
index 10ee791a..10ee791a 100644
--- a/rpkid/tests/up-down-protocol-samples/Makefile
+++ b/ca/tests/up-down-protocol-samples/Makefile
diff --git a/rpkid/tests/up-down-protocol-samples/error_response.xml b/ca/tests/up-down-protocol-samples/error_response.xml
index 83af6649..83af6649 100644
--- a/rpkid/tests/up-down-protocol-samples/error_response.xml
+++ b/ca/tests/up-down-protocol-samples/error_response.xml
diff --git a/rpkid/tests/up-down-protocol-samples/issue1.xml b/ca/tests/up-down-protocol-samples/issue1.xml
index 4b8366f9..4b8366f9 100644
--- a/rpkid/tests/up-down-protocol-samples/issue1.xml
+++ b/ca/tests/up-down-protocol-samples/issue1.xml
diff --git a/rpkid/tests/up-down-protocol-samples/issue2.xml b/ca/tests/up-down-protocol-samples/issue2.xml
index a991cbcd..a991cbcd 100644
--- a/rpkid/tests/up-down-protocol-samples/issue2.xml
+++ b/ca/tests/up-down-protocol-samples/issue2.xml
diff --git a/rpkid/tests/up-down-protocol-samples/issue_response.xml b/ca/tests/up-down-protocol-samples/issue_response.xml
index 1ee34f62..1ee34f62 100644
--- a/rpkid/tests/up-down-protocol-samples/issue_response.xml
+++ b/ca/tests/up-down-protocol-samples/issue_response.xml
diff --git a/rpkid/tests/up-down-protocol-samples/list.xml b/ca/tests/up-down-protocol-samples/list.xml
index 01a803f3..01a803f3 100644
--- a/rpkid/tests/up-down-protocol-samples/list.xml
+++ b/ca/tests/up-down-protocol-samples/list.xml
diff --git a/rpkid/tests/up-down-protocol-samples/list_response.xml b/ca/tests/up-down-protocol-samples/list_response.xml
index 09634955..09634955 100644
--- a/rpkid/tests/up-down-protocol-samples/list_response.xml
+++ b/ca/tests/up-down-protocol-samples/list_response.xml
diff --git a/rpkid/tests/up-down-protocol-samples/revoke.xml b/ca/tests/up-down-protocol-samples/revoke.xml
index eb4b3efb..eb4b3efb 100644
--- a/rpkid/tests/up-down-protocol-samples/revoke.xml
+++ b/ca/tests/up-down-protocol-samples/revoke.xml
diff --git a/rpkid/tests/up-down-protocol-samples/revoke_response.xml b/ca/tests/up-down-protocol-samples/revoke_response.xml
index 9f4ebacc..9f4ebacc 100644
--- a/rpkid/tests/up-down-protocol-samples/revoke_response.xml
+++ b/ca/tests/up-down-protocol-samples/revoke_response.xml
diff --git a/rpkid/tests/xml-parse-test.py b/ca/tests/xml-parse-test.py
index 42b54695..42b54695 100644
--- a/rpkid/tests/xml-parse-test.py
+++ b/ca/tests/xml-parse-test.py
diff --git a/rpkid/tests/yamlconf.py b/ca/tests/yamlconf.py
index 3c71d3cd..3c71d3cd 100644
--- a/rpkid/tests/yamlconf.py
+++ b/ca/tests/yamlconf.py
diff --git a/rpkid/tests/yamltest-test-all.sh b/ca/tests/yamltest-test-all.sh
index 8daea04e..4bd5c560 100644
--- a/rpkid/tests/yamltest-test-all.sh
+++ b/ca/tests/yamltest-test-all.sh
@@ -43,9 +43,9 @@ do
   do
     sleep 30
     date
-    ../../rcynic/rcynic
-    ../../rcynic/rcynic-text rcynic.xml
-    ../../utils/scan_roas/scan_roas rcynic-data/authenticated
+    ../../rp/rcynic/rcynic
+    ../../rp/rcynic/rcynic-text rcynic.xml
+    ../../rp/utils/scan_roas rcynic-data/authenticated
     date
     echo "$title"
   done
diff --git a/rpkid/tests/yamltest.py b/ca/tests/yamltest.py
index 5eb3bd2f..5eb3bd2f 100644
--- a/rpkid/tests/yamltest.py
+++ b/ca/tests/yamltest.py
diff --git a/rpkid/upgrade-scripts/upgrade-rpkid-to-0.5709.py b/ca/upgrade-scripts/upgrade-rpkid-to-0.5709.py
index aa8e3ec1..aa8e3ec1 100644
--- a/rpkid/upgrade-scripts/upgrade-rpkid-to-0.5709.py
+++ b/ca/upgrade-scripts/upgrade-rpkid-to-0.5709.py
diff --git a/configure b/configure
index 4a512935..f701ab4c 100755
--- a/configure
+++ b/configure
@@ -582,7 +582,7 @@ PACKAGE_STRING='rpkitools 1.0'
 PACKAGE_BUGREPORT=''
 PACKAGE_URL=''
 
-ac_unique_file="rcynic/rcynic.c"
+ac_unique_file="rp/rcynic/rcynic.c"
 # Factoring default headers for most tests.
 ac_includes_default="\
 #include <stdio.h>
@@ -629,7 +629,7 @@ TOP_LEVEL_SUBDIRS
 WSGI_PYTHON_EGG_CACHE_USER
 WSGI_PYTHON_EGG_CACHE_DIR
 SETUP_PY_INSTALL_LAYOUT
-RPKID_INSTALL_TARGETS
+CA_INSTALL_TARGETS
 RTR_ORIGIN_INSTALL_TARGETS
 RCYNIC_INSTALL_TARGETS
 RCYNIC_HTML_DIR
@@ -714,7 +714,7 @@ PATH_SEPARATOR
 SHELL'
 ac_subst_files='RCYNIC_MAKE_RULES
 RTR_ORIGIN_MAKE_RULES
-RPKID_MAKE_RULES'
+CA_MAKE_RULES'
 ac_user_opts='
 enable_option_checking
 with_system_openssl
@@ -4571,28 +4571,28 @@ $as_echo "$enable_target_installation" >&6; }
 # rcynic jail setup is complicated enough that it's simplest to have
 # different rule sets for different platforms.  Icky, but....
 # rpki-rtr isn't as complicated, but has similar issues, same hack.
-# rpkid isn't as complicated either, but same hack.
+# ca isn't as complicated either, but same hack.
 
 case $host_os in
 	darwin*)
-		RCYNIC_MAKE_RULES='rcynic/rules.darwin.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.darwin.mk'
-		RPKID_MAKE_RULES='rpkid/rules.darwin.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.darwin.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.darwin.mk'
+		CA_MAKE_RULES='ca/rules.darwin.mk'
 		;;
 	freebsd*)
-		RCYNIC_MAKE_RULES='rcynic/rules.freebsd.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.freebsd.mk'
-		RPKID_MAKE_RULES='rpkid/rules.freebsd.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.freebsd.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.freebsd.mk'
+		CA_MAKE_RULES='ca/rules.freebsd.mk'
 		;;
 	linux*)
-		RCYNIC_MAKE_RULES='rcynic/rules.linux.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.linux.mk'
-		RPKID_MAKE_RULES='rpkid/rules.linux.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.linux.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.linux.mk'
+		CA_MAKE_RULES='ca/rules.linux.mk'
 		;;
 	*)
-		RCYNIC_MAKE_RULES='rcynic/rules.unknown.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.unknown.mk'
-		RPKID_MAKE_RULES='rpkid/rules.unknown.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.unknown.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.unknown.mk'
+		CA_MAKE_RULES='ca/rules.unknown.mk'
 		;;
 esac
 
@@ -4629,7 +4629,7 @@ esac
 
 RCYNIC_INSTALL_TARGETS='install-always'
 RTR_ORIGIN_INSTALL_TARGETS='install-always'
-RPKID_INSTALL_TARGETS='install-always'
+CA_INSTALL_TARGETS='install-always'
 
 if test $use_rcynic_jail = yes
 then
@@ -4640,7 +4640,7 @@ if test $enable_target_installation = yes
 then
 	RCYNIC_INSTALL_TARGETS="$RCYNIC_INSTALL_TARGETS install-postconf"
 	RTR_ORIGIN_INSTALL_TARGETS="$RTR_ORIGIN_INSTALL_TARGETS install-postconf"
-	RPKID_INSTALL_TARGETS="$RPKID_INSTALL_TARGETS install-postconf"
+	CA_INSTALL_TARGETS="$CA_INSTALL_TARGETS install-postconf"
 fi
 
 
@@ -4990,22 +4990,16 @@ fi
 
 # Figure out which parts of this package we have to build.
 
-			      TOP_LEVEL_SUBDIRS="h"
+			      TOP_LEVEL_SUBDIRS="h schemas"
 test $build_openssl  = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS openssl"
-test $build_rp_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rcynic utils rtr-origin"
-test $build_ca_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rpkid"
+test $build_rp_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rp"
+test $build_ca_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS ca"
 
 
 
-ac_config_files="$ac_config_files Makefile h/Makefile"
+ac_config_files="$ac_config_files Makefile h/Makefile schemas/Makefile"
 
 
-if test "X$RCYNIC_STATIC_RSYNC" != "X"
-then
-	ac_config_files="$ac_config_files rcynic/static-rsync/Makefile"
-
-fi
-
 # OpenSSL has its own build system that bears no relationship to
 # anything but itself, and our use of it is a bit weird, so this is a
 # BFMI (Brute Force and Massive Ignorance) job.
@@ -5062,13 +5056,13 @@ fi
 
 if test $build_rp_tools = yes
 then
-	ac_config_files="$ac_config_files rcynic/Makefile utils/Makefile utils/find_roa/Makefile utils/hashdir/Makefile utils/print_rpki_manifest/Makefile utils/print_roa/Makefile utils/scan_roas/Makefile utils/scan_routercerts/Makefile utils/uri/Makefile rtr-origin/Makefile"
+	ac_config_files="$ac_config_files rp/Makefile rp/rcynic/Makefile rp/rcynic/static-rsync/Makefile rp/utils/Makefile rp/rpki-rtr/Makefile"
 
 fi
 
 if test $build_ca_tools = yes
 then
-	ac_config_files="$ac_config_files rpkid/Makefile rpkid/tests/Makefile"
+	ac_config_files="$ac_config_files ca/Makefile ca/tests/Makefile"
 
 fi
 
@@ -5809,21 +5803,16 @@ do
   case $ac_config_target in
     "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
     "h/Makefile") CONFIG_FILES="$CONFIG_FILES h/Makefile" ;;
-    "rcynic/static-rsync/Makefile") CONFIG_FILES="$CONFIG_FILES rcynic/static-rsync/Makefile" ;;
+    "schemas/Makefile") CONFIG_FILES="$CONFIG_FILES schemas/Makefile" ;;
     "openssl/Makefile") CONFIG_FILES="$CONFIG_FILES openssl/Makefile" ;;
     "openssl/tests/Makefile") CONFIG_FILES="$CONFIG_FILES openssl/tests/Makefile" ;;
-    "rcynic/Makefile") CONFIG_FILES="$CONFIG_FILES rcynic/Makefile" ;;
-    "utils/Makefile") CONFIG_FILES="$CONFIG_FILES utils/Makefile" ;;
-    "utils/find_roa/Makefile") CONFIG_FILES="$CONFIG_FILES utils/find_roa/Makefile" ;;
-    "utils/hashdir/Makefile") CONFIG_FILES="$CONFIG_FILES utils/hashdir/Makefile" ;;
-    "utils/print_rpki_manifest/Makefile") CONFIG_FILES="$CONFIG_FILES utils/print_rpki_manifest/Makefile" ;;
-    "utils/print_roa/Makefile") CONFIG_FILES="$CONFIG_FILES utils/print_roa/Makefile" ;;
-    "utils/scan_roas/Makefile") CONFIG_FILES="$CONFIG_FILES utils/scan_roas/Makefile" ;;
-    "utils/scan_routercerts/Makefile") CONFIG_FILES="$CONFIG_FILES utils/scan_routercerts/Makefile" ;;
-    "utils/uri/Makefile") CONFIG_FILES="$CONFIG_FILES utils/uri/Makefile" ;;
-    "rtr-origin/Makefile") CONFIG_FILES="$CONFIG_FILES rtr-origin/Makefile" ;;
-    "rpkid/Makefile") CONFIG_FILES="$CONFIG_FILES rpkid/Makefile" ;;
-    "rpkid/tests/Makefile") CONFIG_FILES="$CONFIG_FILES rpkid/tests/Makefile" ;;
+    "rp/Makefile") CONFIG_FILES="$CONFIG_FILES rp/Makefile" ;;
+    "rp/rcynic/Makefile") CONFIG_FILES="$CONFIG_FILES rp/rcynic/Makefile" ;;
+    "rp/rcynic/static-rsync/Makefile") CONFIG_FILES="$CONFIG_FILES rp/rcynic/static-rsync/Makefile" ;;
+    "rp/utils/Makefile") CONFIG_FILES="$CONFIG_FILES rp/utils/Makefile" ;;
+    "rp/rpki-rtr/Makefile") CONFIG_FILES="$CONFIG_FILES rp/rpki-rtr/Makefile" ;;
+    "ca/Makefile") CONFIG_FILES="$CONFIG_FILES ca/Makefile" ;;
+    "ca/tests/Makefile") CONFIG_FILES="$CONFIG_FILES ca/tests/Makefile" ;;
 
   *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
   esac
diff --git a/configure.ac b/configure.ac
index 4f4aa244..c8f153d7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -9,7 +9,7 @@ AC_INIT([rpkitools], [1.0])
 
 dnl AC_REVISION([$Revision$])
 
-AC_CONFIG_SRCDIR([rcynic/rcynic.c])
+AC_CONFIG_SRCDIR([rp/rcynic/rcynic.c])
 AC_CONFIG_AUX_DIR([buildtools])
 
 # I'm not sure we should really be using the $host_* variables as we
@@ -383,34 +383,34 @@ AC_MSG_RESULT([$enable_target_installation])
 # rcynic jail setup is complicated enough that it's simplest to have
 # different rule sets for different platforms.  Icky, but....
 # rpki-rtr isn't as complicated, but has similar issues, same hack.
-# rpkid isn't as complicated either, but same hack.
+# ca isn't as complicated either, but same hack.
 
 case $host_os in
 	darwin*)
-		RCYNIC_MAKE_RULES='rcynic/rules.darwin.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.darwin.mk'
-		RPKID_MAKE_RULES='rpkid/rules.darwin.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.darwin.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.darwin.mk'
+		CA_MAKE_RULES='ca/rules.darwin.mk'
 		;;
 	freebsd*)
-		RCYNIC_MAKE_RULES='rcynic/rules.freebsd.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.freebsd.mk'
-		RPKID_MAKE_RULES='rpkid/rules.freebsd.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.freebsd.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.freebsd.mk'
+		CA_MAKE_RULES='ca/rules.freebsd.mk'
 		;;
 	linux*)
-		RCYNIC_MAKE_RULES='rcynic/rules.linux.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.linux.mk'
-		RPKID_MAKE_RULES='rpkid/rules.linux.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.linux.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.linux.mk'
+		CA_MAKE_RULES='ca/rules.linux.mk'
 		;;
 	*)
-		RCYNIC_MAKE_RULES='rcynic/rules.unknown.mk'
-		RTR_ORIGIN_MAKE_RULES='rtr-origin/rules.unknown.mk'
-		RPKID_MAKE_RULES='rpkid/rules.unknown.mk'
+		RCYNIC_MAKE_RULES='rp/rcynic/rules.unknown.mk'
+		RTR_ORIGIN_MAKE_RULES='rp/rpki-rtr/rules.unknown.mk'
+		CA_MAKE_RULES='ca/rules.unknown.mk'
 		;;
 esac
 
 AC_SUBST_FILE(RCYNIC_MAKE_RULES)
 AC_SUBST_FILE(RTR_ORIGIN_MAKE_RULES)
-AC_SUBST_FILE(RPKID_MAKE_RULES)
+AC_SUBST_FILE(CA_MAKE_RULES)
 
 # Where to put HTML files is similarly platform dependent, we have to know.
 # rcynic-cron will skip generating HTML files if it has no place to put them.
@@ -441,7 +441,7 @@ AC_SUBST(RCYNIC_HTML_DIR)
 
 RCYNIC_INSTALL_TARGETS='install-always'
 RTR_ORIGIN_INSTALL_TARGETS='install-always'
-RPKID_INSTALL_TARGETS='install-always'
+CA_INSTALL_TARGETS='install-always'
 
 if test $use_rcynic_jail = yes
 then
@@ -452,12 +452,12 @@ if test $enable_target_installation = yes
 then
 	RCYNIC_INSTALL_TARGETS="$RCYNIC_INSTALL_TARGETS install-postconf"
 	RTR_ORIGIN_INSTALL_TARGETS="$RTR_ORIGIN_INSTALL_TARGETS install-postconf"
-	RPKID_INSTALL_TARGETS="$RPKID_INSTALL_TARGETS install-postconf"
+	CA_INSTALL_TARGETS="$CA_INSTALL_TARGETS install-postconf"
 fi
 
 AC_SUBST(RCYNIC_INSTALL_TARGETS)
 AC_SUBST(RTR_ORIGIN_INSTALL_TARGETS)
-AC_SUBST(RPKID_INSTALL_TARGETS)
+AC_SUBST(CA_INSTALL_TARGETS)
 
 # Now a bunch of checks to figure out what we can do with Python.  If
 # we don't have Python at all, none of the rest of this matters.  If
@@ -752,20 +752,16 @@ fi
 
 # Figure out which parts of this package we have to build.
 
-			      TOP_LEVEL_SUBDIRS="h"
+			      TOP_LEVEL_SUBDIRS="h schemas"
 test $build_openssl  = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS openssl"
-test $build_rp_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rcynic utils rtr-origin"
-test $build_ca_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rpkid"
+test $build_rp_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS rp"
+test $build_ca_tools = yes && TOP_LEVEL_SUBDIRS="$TOP_LEVEL_SUBDIRS ca"
 
 AC_SUBST(TOP_LEVEL_SUBDIRS)
 
 AC_CONFIG_FILES([Makefile
-		 h/Makefile])
-
-if test "X$RCYNIC_STATIC_RSYNC" != "X"
-then
-	AC_CONFIG_FILES([rcynic/static-rsync/Makefile])
-fi
+		 h/Makefile
+		 schemas/Makefile])
 
 # OpenSSL has its own build system that bears no relationship to
 # anything but itself, and our use of it is a bit weird, so this is a
@@ -818,22 +814,17 @@ fi
 
 if test $build_rp_tools = yes
 then
-	AC_CONFIG_FILES([rcynic/Makefile
-			 utils/Makefile
-			 utils/find_roa/Makefile
-			 utils/hashdir/Makefile
-			 utils/print_rpki_manifest/Makefile
-			 utils/print_roa/Makefile
-			 utils/scan_roas/Makefile
-			 utils/scan_routercerts/Makefile
-			 utils/uri/Makefile
-			 rtr-origin/Makefile])
+	AC_CONFIG_FILES([rp/Makefile
+			 rp/rcynic/Makefile
+			 rp/rcynic/static-rsync/Makefile
+			 rp/utils/Makefile
+			 rp/rpki-rtr/Makefile])
 fi
 
 if test $build_ca_tools = yes
 then
-	AC_CONFIG_FILES([rpkid/Makefile
-			 rpkid/tests/Makefile])
+	AC_CONFIG_FILES([ca/Makefile
+			 ca/tests/Makefile])
 fi
 
 if test $build_ca_tools = yes &&
diff --git a/rpkid/doc/pubd-bpki.dot b/doc/pubd-bpki.dot
index 44ad8a90..44ad8a90 100644
--- a/rpkid/doc/pubd-bpki.dot
+++ b/doc/pubd-bpki.dot
diff --git a/rpkid/doc/rpkid-bpki.dot b/doc/rpkid-bpki.dot
index 651591cb..651591cb 100644
--- a/rpkid/doc/rpkid-bpki.dot
+++ b/doc/rpkid-bpki.dot
diff --git a/rpkid/ext/POW.c b/ext/POW.c
index b5d9ccaf..c14e154a 100644
--- a/rpkid/ext/POW.c
+++ b/ext/POW.c
@@ -2655,6 +2655,28 @@ x509_object_set_issuer(x509_object *self, PyObject *args)
   return  NULL;
 }
 
+static char x509_object_get_issuer_hash__doc__[] =
+  "Return the OpenSSL \"name hash\" for this certificate's issuer name.\n"
+  ;
+
+static PyObject *
+x509_object_get_issuer_hash(x509_object *self)
+{
+  ENTERING(x509_object_get_issuer_hash);
+  return Py_BuildValue("k", X509_NAME_hash(X509_get_issuer_name(self->x509)));
+}
+
+static char x509_object_get_subject_hash__doc__[] =
+  "Return the OpenSSL \"name hash\" for this certificate's subject name.\n"
+  ;
+
+static PyObject *
+x509_object_get_subject_hash(x509_object *self)
+{
+  ENTERING(x509_object_get_subject_hash);
+  return Py_BuildValue("k", X509_NAME_hash(X509_get_subject_name(self->x509)));
+}
+
 static char x509_object_get_not_before__doc__[] =
   "Return this certificate's \"notBefore\" value as a datetime.\n"
   ;
@@ -3682,10 +3704,6 @@ x509_object_set_certificate_policies(x509_object *self, PyObject *args)
     return NULL;
 }
 
-/*
- * May want EKU handlers eventually, skip for now.
- */
-
 static char x509_object_pprint__doc__[] =
   "Return a pretty-printed rendition of this certificate.\n"
   ;
@@ -3751,6 +3769,8 @@ static struct PyMethodDef x509_object_methods[] = {
   Define_Method(setCRLDP,               x509_object_set_crldp,                  METH_VARARGS),
   Define_Method(getCertificatePolicies, x509_object_get_certificate_policies,   METH_NOARGS),
   Define_Method(setCertificatePolicies, x509_object_set_certificate_policies,   METH_VARARGS),
+  Define_Method(getIssuerHash,          x509_object_get_issuer_hash,            METH_NOARGS),
+  Define_Method(getSubjectHash,         x509_object_get_subject_hash,           METH_NOARGS),
   Define_Class_Method(pemRead,          x509_object_pem_read,                   METH_VARARGS),
   Define_Class_Method(pemReadFile,      x509_object_pem_read_file,              METH_VARARGS),
   Define_Class_Method(derRead,          x509_object_der_read,                   METH_VARARGS),
@@ -4623,6 +4643,17 @@ crl_object_set_issuer(crl_object *self, PyObject *args)
   return NULL;
 }
 
+static char crl_object_get_issuer_hash__doc__[] =
+  "Return the OpenSSL \"name hash\" for this CRL's issuer name.\n"
+  ;
+
+static PyObject *
+crl_object_get_issuer_hash(crl_object *self)
+{
+  ENTERING(crl_object_get_issuer_hash);
+  return Py_BuildValue("k", X509_NAME_hash(X509_CRL_get_issuer(self->crl)));
+}
+
 /*
  * NB: OpenSSL is confused about the name of this field, probably for
  * backwards compatability with some ancient mistake.  What RFC 5280
@@ -5094,6 +5125,7 @@ static struct PyMethodDef crl_object_methods[] = {
   Define_Method(setAKI,                 crl_object_set_aki,             METH_VARARGS),
   Define_Method(getCRLNumber,           crl_object_get_crl_number,      METH_NOARGS),
   Define_Method(setCRLNumber,           crl_object_set_crl_number,      METH_VARARGS),
+  Define_Method(getIssuerHash,          crl_object_get_issuer_hash,     METH_NOARGS),
   Define_Class_Method(pemRead,          crl_object_pem_read,            METH_VARARGS),
   Define_Class_Method(pemReadFile,      crl_object_pem_read_file,       METH_VARARGS),
   Define_Class_Method(derRead,          crl_object_der_read,            METH_VARARGS),
@@ -8737,10 +8769,6 @@ pkcs10_object_get_extension_oids(pkcs10_object *self)
   return NULL;  
 }
 
-/*
- * May want EKU handlers eventually, skip for now.
- */
-
 static char pkcs10_object_pprint__doc__[] =
   "Return a pretty-printed rendition of this PKCS#10 request.\n"
   ;
diff --git a/scripts/analyze-rcynic-history.py b/potpourri/analyze-rcynic-history.py
index b72d0741..b72d0741 100644
--- a/scripts/analyze-rcynic-history.py
+++ b/potpourri/analyze-rcynic-history.py
diff --git a/scripts/analyze-transition.py b/potpourri/analyze-transition.py
index e2125dfb..e2125dfb 100644
--- a/scripts/analyze-transition.py
+++ b/potpourri/analyze-transition.py
diff --git a/scripts/apnic-to-csv.py b/potpourri/apnic-to-csv.py
index 62293a51..62293a51 100644
--- a/scripts/apnic-to-csv.py
+++ b/potpourri/apnic-to-csv.py
diff --git a/scripts/application-x-rpki-mailcap-handler.sh b/potpourri/application-x-rpki-mailcap-handler.sh
index 891987d9..891987d9 100755
--- a/scripts/application-x-rpki-mailcap-handler.sh
+++ b/potpourri/application-x-rpki-mailcap-handler.sh
diff --git a/scripts/arin-to-csv.py b/potpourri/arin-to-csv.py
index a4e7ffc3..a4e7ffc3 100644
--- a/scripts/arin-to-csv.py
+++ b/potpourri/arin-to-csv.py
diff --git a/scripts/cross_certify.py b/potpourri/cross_certify.py
index fab7743b..fab7743b 100644
--- a/scripts/cross_certify.py
+++ b/potpourri/cross_certify.py
diff --git a/scripts/csvgrep.py b/potpourri/csvgrep.py
index 68bdd259..68bdd259 100644
--- a/scripts/csvgrep.py
+++ b/potpourri/csvgrep.py
diff --git a/scripts/expand-roa-prefixes.py b/potpourri/expand-roa-prefixes.py
index ae34ea0a..ae34ea0a 100644
--- a/scripts/expand-roa-prefixes.py
+++ b/potpourri/expand-roa-prefixes.py
diff --git a/scripts/extract-key.py b/potpourri/extract-key.py
index b85c3d55..b85c3d55 100644
--- a/scripts/extract-key.py
+++ b/potpourri/extract-key.py
diff --git a/scripts/fakerootd.py b/potpourri/fakerootd.py
index 6275a2a9..6275a2a9 100644
--- a/scripts/fakerootd.py
+++ b/potpourri/fakerootd.py
diff --git a/scripts/find-roa-expiration.py b/potpourri/find-roa-expiration.py
index 1401dc42..1401dc42 100644
--- a/scripts/find-roa-expiration.py
+++ b/potpourri/find-roa-expiration.py
diff --git a/scripts/format-application-x-rpki.py b/potpourri/format-application-x-rpki.py
index 184103f9..184103f9 100644
--- a/scripts/format-application-x-rpki.py
+++ b/potpourri/format-application-x-rpki.py
diff --git a/scripts/gc_summary.awk b/potpourri/gc_summary.awk
index b3b1bc6a..b3b1bc6a 100644
--- a/scripts/gc_summary.awk
+++ b/potpourri/gc_summary.awk
diff --git a/scripts/gc_summary.py b/potpourri/gc_summary.py
index 1f6987bf..1f6987bf 100644
--- a/scripts/gc_summary.py
+++ b/potpourri/gc_summary.py
diff --git a/scripts/generate-ripe-root-cert.py b/potpourri/generate-ripe-root-cert.py
index 3407bc51..3407bc51 100644
--- a/scripts/generate-ripe-root-cert.py
+++ b/potpourri/generate-ripe-root-cert.py
diff --git a/scripts/gski.py b/potpourri/gski.py
index 083a59c8..083a59c8 100644
--- a/scripts/gski.py
+++ b/potpourri/gski.py
diff --git a/scripts/guess-roas-from-routeviews.py b/potpourri/guess-roas-from-routeviews.py
index d8fb9c4c..d8fb9c4c 100644
--- a/scripts/guess-roas-from-routeviews.py
+++ b/potpourri/guess-roas-from-routeviews.py
diff --git a/scripts/iana-to-csv.py b/potpourri/iana-to-csv.py
index f803a21e..f803a21e 100644
--- a/scripts/iana-to-csv.py
+++ b/potpourri/iana-to-csv.py
diff --git a/scripts/missing-oids.py b/potpourri/missing-oids.py
index 16316eac..16316eac 100644
--- a/scripts/missing-oids.py
+++ b/potpourri/missing-oids.py
diff --git a/scripts/object-dates.py b/potpourri/object-dates.py
index b99441d6..b99441d6 100644
--- a/scripts/object-dates.py
+++ b/potpourri/object-dates.py
diff --git a/scripts/pcap-to-xml.sh b/potpourri/pcap-to-xml.sh
index 73c30880..73c30880 100644
--- a/scripts/pcap-to-xml.sh
+++ b/potpourri/pcap-to-xml.sh
diff --git a/scripts/print-profile.py b/potpourri/print-profile.py
index 081d2602..081d2602 100644
--- a/scripts/print-profile.py
+++ b/potpourri/print-profile.py
diff --git a/scripts/rcynic-diff.py b/potpourri/rcynic-diff.py
index 327a7b71..327a7b71 100644
--- a/scripts/rcynic-diff.py
+++ b/potpourri/rcynic-diff.py
diff --git a/scripts/rcynic-lta b/potpourri/rcynic-lta
index 4c55db92..4c55db92 100755
--- a/scripts/rcynic-lta
+++ b/potpourri/rcynic-lta
diff --git a/scripts/rcynic-lta.yaml b/potpourri/rcynic-lta.yaml
index ab17a56c..ab17a56c 100644
--- a/scripts/rcynic-lta.yaml
+++ b/potpourri/rcynic-lta.yaml
diff --git a/scripts/repo0-testbed-daily b/potpourri/repo0-testbed-daily
index 576464c4..576464c4 100755
--- a/scripts/repo0-testbed-daily
+++ b/potpourri/repo0-testbed-daily
diff --git a/scripts/repo0-testbed-monthly b/potpourri/repo0-testbed-monthly
index b7ada110..b7ada110 100755
--- a/scripts/repo0-testbed-monthly
+++ b/potpourri/repo0-testbed-monthly
diff --git a/scripts/repo0-testbed-weekly b/potpourri/repo0-testbed-weekly
index 6f1f8ead..6f1f8ead 100755
--- a/scripts/repo0-testbed-weekly
+++ b/potpourri/repo0-testbed-weekly
diff --git a/scripts/ripe-asns-to-csv.py b/potpourri/ripe-asns-to-csv.py
index 50251ce8..50251ce8 100644
--- a/scripts/ripe-asns-to-csv.py
+++ b/potpourri/ripe-asns-to-csv.py
diff --git a/scripts/ripe-prefixes-to-csv.awk b/potpourri/ripe-prefixes-to-csv.awk
index 37327484..37327484 100644
--- a/scripts/ripe-prefixes-to-csv.awk
+++ b/potpourri/ripe-prefixes-to-csv.awk
diff --git a/scripts/ripe-to-csv.awk b/potpourri/ripe-to-csv.awk
index 5325574f..5325574f 100644
--- a/scripts/ripe-to-csv.awk
+++ b/potpourri/ripe-to-csv.awk
diff --git a/scripts/ripe-to-csv.py b/potpourri/ripe-to-csv.py
index b864345b..b864345b 100644
--- a/scripts/ripe-to-csv.py
+++ b/potpourri/ripe-to-csv.py
diff --git a/scripts/roa-to-irr.py b/potpourri/roa-to-irr.py
index 01b2aac8..01b2aac8 100644
--- a/scripts/roa-to-irr.py
+++ b/potpourri/roa-to-irr.py
diff --git a/scripts/rp-sqlite b/potpourri/rp-sqlite
index ee43096d..ee43096d 100755
--- a/scripts/rp-sqlite
+++ b/potpourri/rp-sqlite
diff --git a/scripts/rp-sqlite.yaml b/potpourri/rp-sqlite.yaml
index 4c0a0b8d..4c0a0b8d 100644
--- a/scripts/rp-sqlite.yaml
+++ b/potpourri/rp-sqlite.yaml
diff --git a/potpourri/rpki b/potpourri/rpki
new file mode 120000
index 00000000..8d289d0b
--- /dev/null
+++ b/potpourri/rpki
@@ -0,0 +1 @@
+../rpki
\ No newline at end of file
diff --git a/scripts/rpkidemo b/potpourri/rpkidemo
index fdb4e1bb..fdb4e1bb 100755
--- a/scripts/rpkidemo
+++ b/potpourri/rpkidemo
diff --git a/scripts/rpkidemo.pem b/potpourri/rpkidemo.pem
index f96fdb9e..f96fdb9e 100644
--- a/scripts/rpkidemo.pem
+++ b/potpourri/rpkidemo.pem
diff --git a/rpkid/portal-gui/scripts/rpkigui-flatten-roas.py b/potpourri/rpkigui-flatten-roas.py
index e21c368b..e21c368b 100644
--- a/rpkid/portal-gui/scripts/rpkigui-flatten-roas.py
+++ b/potpourri/rpkigui-flatten-roas.py
diff --git a/rpkid/portal-gui/scripts/rpkigui-reset-demo.py b/potpourri/rpkigui-reset-demo.py
index 0a3a1537..0a3a1537 100644
--- a/rpkid/portal-gui/scripts/rpkigui-reset-demo.py
+++ b/potpourri/rpkigui-reset-demo.py
diff --git a/rpkid/portal-gui/scripts/rpkigui-sync-users.py b/potpourri/rpkigui-sync-users.py
index 9c636e95..9c636e95 100644
--- a/rpkid/portal-gui/scripts/rpkigui-sync-users.py
+++ b/potpourri/rpkigui-sync-users.py
diff --git a/scripts/rrd-rcynic-history.py b/potpourri/rrd-rcynic-history.py
index 8a0d50a8..8a0d50a8 100644
--- a/scripts/rrd-rcynic-history.py
+++ b/potpourri/rrd-rcynic-history.py
diff --git a/scripts/setup-rootd.sh b/potpourri/setup-rootd.sh
index 41a271b8..41a271b8 100644
--- a/scripts/setup-rootd.sh
+++ b/potpourri/setup-rootd.sh
diff --git a/scripts/show-cms-ee-certs.sh b/potpourri/show-cms-ee-certs.sh
index 4f5168c7..4f5168c7 100644
--- a/scripts/show-cms-ee-certs.sh
+++ b/potpourri/show-cms-ee-certs.sh
diff --git a/scripts/show-tracking-data.py b/potpourri/show-tracking-data.py
index 07e0a144..07e0a144 100644
--- a/scripts/show-tracking-data.py
+++ b/potpourri/show-tracking-data.py
diff --git a/scripts/signed-object-dates.py b/potpourri/signed-object-dates.py
index fefd9448..fefd9448 100644
--- a/scripts/signed-object-dates.py
+++ b/potpourri/signed-object-dates.py
diff --git a/scripts/splitbase64.xsl b/potpourri/splitbase64.xsl
index 2b2d2fb1..2b2d2fb1 100644
--- a/scripts/splitbase64.xsl
+++ b/potpourri/splitbase64.xsl
diff --git a/scripts/testbed-rootcert.py b/potpourri/testbed-rootcert.py
index 0716be2f..0716be2f 100644
--- a/scripts/testbed-rootcert.py
+++ b/potpourri/testbed-rootcert.py
diff --git a/scripts/translate-handles.py b/potpourri/translate-handles.py
index 49848277..49848277 100644
--- a/scripts/translate-handles.py
+++ b/potpourri/translate-handles.py
diff --git a/scripts/upgrade-add-ghostbusters.py b/potpourri/upgrade-add-ghostbusters.py
index a8c8a92b..a8c8a92b 100644
--- a/scripts/upgrade-add-ghostbusters.py
+++ b/potpourri/upgrade-add-ghostbusters.py
diff --git a/scripts/verify-bpki.sh b/potpourri/verify-bpki.sh
index 0e36d796..0e36d796 100755
--- a/scripts/verify-bpki.sh
+++ b/potpourri/verify-bpki.sh
diff --git a/scripts/whack-ripe-asns.py b/potpourri/whack-ripe-asns.py
index 9c702271..9c702271 100644
--- a/scripts/whack-ripe-asns.py
+++ b/potpourri/whack-ripe-asns.py
diff --git a/scripts/whack-ripe-prefixes.py b/potpourri/whack-ripe-prefixes.py
index 52ea3f18..52ea3f18 100644
--- a/scripts/whack-ripe-prefixes.py
+++ b/potpourri/whack-ripe-prefixes.py
diff --git a/scripts/x509-dot.py b/potpourri/x509-dot.py
index 42e1543a..42e1543a 100644
--- a/scripts/x509-dot.py
+++ b/potpourri/x509-dot.py
diff --git a/utils/Makefile.in b/rp/Makefile.in
index c89fdff5..2c770a46 100644
--- a/utils/Makefile.in
+++ b/rp/Makefile.in
@@ -1,6 +1,6 @@
 # $Id$
 
-SUBDIRS = uri print_rpki_manifest print_roa hashdir find_roa scan_roas scan_routercerts
+SUBDIRS = rcynic rpki-rtr utils
 
 all clean test distclean install deinstall uninstall::
 	@for i in ${SUBDIRS}; do echo "Making $@ in $$i"; (cd $$i && ${MAKE} $@); done
diff --git a/rcynic/Doxyfile b/rp/rcynic/Doxyfile
index aa183715..aa183715 100644
--- a/rcynic/Doxyfile
+++ b/rp/rcynic/Doxyfile
diff --git a/rcynic/Makefile.in b/rp/rcynic/Makefile.in
index 06f7d9cd..972f1de6 100644
--- a/rcynic/Makefile.in
+++ b/rp/rcynic/Makefile.in
@@ -65,11 +65,11 @@ RPKIRTR_USER		= rpkirtr
 
 SCRIPTS = rcynic-text rcynic-html rcynic-svn validation_status rcynic-cron
 
-all: ${BIN} ${SCRIPTS} ${RCYNIC_STATIC_RSYNC}
+all: ${BIN} ${RCYNIC_STATIC_RSYNC}
 
 clean:
 	if test -r static-rsync/Makefile; then cd static-rsync; ${MAKE} $@; fi
-	rm -f ${BIN} ${OBJS} ${SCRIPTS}
+	rm -f ${BIN} ${OBJS}
 
 ${OBJ}: ${SRC} ${GEN}
 
@@ -80,39 +80,6 @@ ${GEN}: ${SRC}
 	${PYTHON} ${abs_top_srcdir}/buildtools/defstack.py ${SRC} >$@.tmp
 	mv $@.tmp $@
 
-COMPILE_PYTHON = \
-	AC_PYTHON_INTERPRETER='${PYTHON}' \
-	AC_RRDTOOL_BINARY='${RRDTOOL}' \
-	${PYTHON} ${abs_top_srcdir}/buildtools/make-rcynic-script.py <$? >$@; \
-	chmod 755 $@
-
-COMPILE_PYTHON_CRON = \
-	AC_PYTHON_INTERPRETER='${PYTHON}' \
-	AC_RCYNIC_USER='${RCYNIC_USER}' \
-	AC_RCYNIC_DIR='${RCYNIC_DIR}' \
-	AC_bindir='${bindir}' \
-	AC_sbindir='${sbindir}' \
-	AC_sysconfdir='${sysconfdir}' \
-	AC_libexecdir='${libexecdir}' \
-	AC_RCYNIC_HTML_DIR='${RCYNIC_HTML_DIR}' \
-	${PYTHON} ${abs_top_srcdir}/buildtools/make-rcynic-script.py <$? >$@; \
-	chmod 755 $@
-
-rcynic-text: rcynic-text.py
-	${COMPILE_PYTHON}
-
-rcynic-html: rcynic-html.py
-	${COMPILE_PYTHON}
-
-rcynic-svn: rcynic-svn.py
-	${COMPILE_PYTHON}
-
-validation_status: validation_status.py
-	${COMPILE_PYTHON}
-
-rcynic-cron: rcynic-cron.py
-	${COMPILE_PYTHON_CRON}
-
 tags: TAGS
 
 TAGS: ${SRC} ${GEN}
diff --git a/rcynic/README b/rp/rcynic/README
index ecc92ac5..ecc92ac5 100644
--- a/rcynic/README
+++ b/rp/rcynic/README
diff --git a/rcynic/bio_f_linebreak.c b/rp/rcynic/bio_f_linebreak.c
index c2d9fb4d..c2d9fb4d 100644
--- a/rcynic/bio_f_linebreak.c
+++ b/rp/rcynic/bio_f_linebreak.c
diff --git a/rcynic/bio_f_linebreak.h b/rp/rcynic/bio_f_linebreak.h
index b5becfa6..b5becfa6 100644
--- a/rcynic/bio_f_linebreak.h
+++ b/rp/rcynic/bio_f_linebreak.h
diff --git a/rcynic/defstack.h b/rp/rcynic/defstack.h
index 370c8129..370c8129 100644
--- a/rcynic/defstack.h
+++ b/rp/rcynic/defstack.h
diff --git a/rcynic/make-tal.sh b/rp/rcynic/make-tal.sh
index 854a76b9..854a76b9 100755
--- a/rcynic/make-tal.sh
+++ b/rp/rcynic/make-tal.sh
diff --git a/rcynic/rc-scripts/darwin/RCynic b/rp/rcynic/rc-scripts/darwin/RCynic
index d486a3c3..d486a3c3 100755
--- a/rcynic/rc-scripts/darwin/RCynic
+++ b/rp/rcynic/rc-scripts/darwin/RCynic
diff --git a/rcynic/rc-scripts/darwin/StartupParameters.plist b/rp/rcynic/rc-scripts/darwin/StartupParameters.plist
index ca46b676..ca46b676 100644
--- a/rcynic/rc-scripts/darwin/StartupParameters.plist
+++ b/rp/rcynic/rc-scripts/darwin/StartupParameters.plist
diff --git a/rcynic/rc-scripts/freebsd/rc.d.rcynic b/rp/rcynic/rc-scripts/freebsd/rc.d.rcynic
index 9b7aa545..9b7aa545 100755
--- a/rcynic/rc-scripts/freebsd/rc.d.rcynic
+++ b/rp/rcynic/rc-scripts/freebsd/rc.d.rcynic
diff --git a/rcynic/rcynic-cron.py b/rp/rcynic/rcynic-cron
index fbe1ebeb..73368e0d 100644..100755
--- a/rcynic/rcynic-cron.py
+++ b/rp/rcynic/rcynic-cron
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+#
 # $Id$
 # 
 # Copyright (C) 2014  Dragon Research Labs ("DRL")
@@ -37,13 +39,13 @@ def run(*cmd, **kwargs):
   pid = os.fork()
   if pid == 0:
     if chroot_this:
-      os.chdir(ac_rcynic_dir)
+      os.chdir(rpki.autoconf.rcynic_dir)
     elif cwd is not None:
       os.chdir(cwd)
     if we_are_root:
       os.initgroups(pw.pw_name, pw.pw_gid)
     if chroot_this:
-      os.chroot(ac_rcynic_dir)
+      os.chroot(rpki.autoconf.rcynic_dir)
     if we_are_root:
       os.setgid(pw.pw_gid)
       os.setuid(pw.pw_uid)
@@ -71,12 +73,12 @@ if args.chroot and not we_are_root:
   sys.exit("Only root can --chroot")
 
 try:
-  pw = pwd.getpwnam(ac_rcynic_user)
+  pw = pwd.getpwnam(rpki.autoconf.rcynic_user)
 except KeyError:
-  sys.exit("Could not find passwd entry for user %s" % ac_rcynic_user)
+  sys.exit("Could not find passwd entry for user %s" % rpki.autoconf.rcynic_user)
 
 try:
-  lock = os.open(os.path.join(ac_rcynic_dir, "data/lock"), os.O_RDONLY | os.O_CREAT | os.O_NONBLOCK, 0666)
+  lock = os.open(os.path.join(rpki.autoconf.rcynic_dir, "data/lock"), os.O_RDONLY | os.O_CREAT | os.O_NONBLOCK, 0666)
   fcntl.flock(lock, fcntl.LOCK_EX | fcntl.LOCK_NB)
   if we_are_root:
     os.fchown(lock, pw.pw_uid, pw.pw_gid)
@@ -84,23 +86,23 @@ except (IOError, OSError), e:
   if e.errno == errno.EAGAIN:
     sys.exit(0)                         # Another instance of this script is already running, exit silently
   else:
-    sys.exit("Error %r opening lock %r" % (e.strerror, os.path.join(ac_rcynic_dir, "data/lock")))
+    sys.exit("Error %r opening lock %r" % (e.strerror, os.path.join(rpki.autoconf.rcynic_dir, "data/lock")))
 
 if args.chroot:
   run("/bin/rcynic", "-c", "/etc/rcynic.conf", chroot_this = True)
 else:
-  run(os.path.join(ac_bindir, "rcynic"), "-c", os.path.join(ac_sysconfdir, "rcynic.conf"))
+  run(os.path.join(rpki.autoconf.bindir, "rcynic"), "-c", os.path.join(rpki.autoconf.sysconfdir, "rcynic.conf"))
 
-run(os.path.join(ac_bindir, "rtr-origin"),
+run(os.path.join(rpki.autoconf.bindir, "rtr-origin"),
     "--cronjob", 
-    os.path.join(ac_rcynic_dir, "data/authenticated"),
-    cwd = os.path.join(ac_rcynic_dir, "rpki-rtr"))
+    os.path.join(rpki.autoconf.rcynic_dir, "data/authenticated"),
+    cwd = os.path.join(rpki.autoconf.rcynic_dir, "rpki-rtr"))
 
-prog = os.path.join(ac_libexecdir, "rpkigui-rcynic")
+prog = os.path.join(rpki.autoconf.libexecdir, "rpkigui-rcynic")
 if os.path.exists(prog):
   run(prog)
 
-if ac_rcynic_html_dir and os.path.exists(os.path.dirname(ac_rcynic_html_dir)):
-  run(os.path.join(ac_bindir, "rcynic-html"),
-      os.path.join(ac_rcynic_dir, "data/rcynic.xml"),
-      ac_rcynic_html_dir)
+if rpki.autoconf.rcynic_html_dir and os.path.exists(os.path.dirname(rpki.autoconf.rcynic_html_dir)):
+  run(os.path.join(rpki.autoconf.bindir, "rcynic-html"),
+      os.path.join(rpki.autoconf.rcynic_dir, "data/rcynic.xml"),
+      rpki.autoconf.rcynic_html_dir)
diff --git a/rcynic/rcynic-html.py b/rp/rcynic/rcynic-html
index 58e65dde..a7de2291 100644..100755
--- a/rcynic/rcynic-html.py
+++ b/rp/rcynic/rcynic-html
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+#
 # $Id$
 # 
 # Copyright (C) 2013--2014  Dragon Research Labs ("DRL")
@@ -41,7 +43,7 @@ def parse_options():
   global args
 
   try:
-    default_rrdtool_binary = ac_rrdtool_binary
+    default_rrdtool_binary = rpki.autoconf.rrdtool_binary
   except NameError:
     default_rrdtool_binary = "rrdtool"
 
diff --git a/rcynic/rcynic-svn.py b/rp/rcynic/rcynic-svn
index fd0df500..c667ec4a 100644..100755
--- a/rcynic/rcynic-svn.py
+++ b/rp/rcynic/rcynic-svn
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+#
 # $Id$
 #
 # Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
diff --git a/rcynic/rcynic-text.py b/rp/rcynic/rcynic-text
index a8e56dac..c837e88b 100644..100755
--- a/rcynic/rcynic-text.py
+++ b/rp/rcynic/rcynic-text
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+#
 # $Id$
 # 
 # Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
diff --git a/rcynic/rcynic.c b/rp/rcynic/rcynic.c
index dea9c48f..dea9c48f 100644
--- a/rcynic/rcynic.c
+++ b/rp/rcynic/rcynic.c
diff --git a/rcynic/rcynic.xsl b/rp/rcynic/rcynic.xsl
index 487cd2f6..487cd2f6 100644
--- a/rcynic/rcynic.xsl
+++ b/rp/rcynic/rcynic.xsl
diff --git a/rcynic/rpki-torrent.py b/rp/rcynic/rpki-torrent.py
index 9b97f298..cc0798e7 100644
--- a/rcynic/rpki-torrent.py
+++ b/rp/rcynic/rpki-torrent.py
@@ -1,5 +1,5 @@
-#!/usr/local/bin/python
-
+#!/usr/bin/env python
+#
 # $Id$
 #
 # Copyright (C) 2013--2014  Dragon Research Labs ("DRL")
diff --git a/rcynic/rules.darwin.mk b/rp/rcynic/rules.darwin.mk
index d37b0e75..d37b0e75 100644
--- a/rcynic/rules.darwin.mk
+++ b/rp/rcynic/rules.darwin.mk
diff --git a/rcynic/rules.freebsd.mk b/rp/rcynic/rules.freebsd.mk
index 5233386e..5233386e 100644
--- a/rcynic/rules.freebsd.mk
+++ b/rp/rcynic/rules.freebsd.mk
diff --git a/rcynic/rules.linux.mk b/rp/rcynic/rules.linux.mk
index 6a962cef..6a962cef 100644
--- a/rcynic/rules.linux.mk
+++ b/rp/rcynic/rules.linux.mk
diff --git a/rcynic/rules.unknown.mk b/rp/rcynic/rules.unknown.mk
index 6ce3ea18..6ce3ea18 100644
--- a/rcynic/rules.unknown.mk
+++ b/rp/rcynic/rules.unknown.mk
diff --git a/rcynic/sample-rcynic.conf b/rp/rcynic/sample-rcynic.conf
index 6fa49b9c..6fa49b9c 100644
--- a/rcynic/sample-rcynic.conf
+++ b/rp/rcynic/sample-rcynic.conf
diff --git a/rcynic/sample-trust-anchors/README b/rp/rcynic/sample-trust-anchors/README
index 485d0485..485d0485 100644
--- a/rcynic/sample-trust-anchors/README
+++ b/rp/rcynic/sample-trust-anchors/README
diff --git a/rcynic/sample-trust-anchors/afrinic.tal b/rp/rcynic/sample-trust-anchors/afrinic.tal
index 0f202c73..0f202c73 100644
--- a/rcynic/sample-trust-anchors/afrinic.tal
+++ b/rp/rcynic/sample-trust-anchors/afrinic.tal
diff --git a/rcynic/sample-trust-anchors/altca.tal b/rp/rcynic/sample-trust-anchors/altca.tal
index 2dbc7413..2dbc7413 100644
--- a/rcynic/sample-trust-anchors/altca.tal
+++ b/rp/rcynic/sample-trust-anchors/altca.tal
diff --git a/rcynic/sample-trust-anchors/apnic-rpki-root-afrinic-origin.tal b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-afrinic-origin.tal
index d254ec44..d254ec44 100644
--- a/rcynic/sample-trust-anchors/apnic-rpki-root-afrinic-origin.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-afrinic-origin.tal
diff --git a/rcynic/sample-trust-anchors/apnic-rpki-root-arin-origin.tal b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-arin-origin.tal
index b82a136f..b82a136f 100644
--- a/rcynic/sample-trust-anchors/apnic-rpki-root-arin-origin.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-arin-origin.tal
diff --git a/rcynic/sample-trust-anchors/apnic-rpki-root-iana-origin.tal b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-iana-origin.tal
index a4e714c0..a4e714c0 100644
--- a/rcynic/sample-trust-anchors/apnic-rpki-root-iana-origin.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-iana-origin.tal
diff --git a/rcynic/sample-trust-anchors/apnic-rpki-root-lacnic-origin.tal b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-lacnic-origin.tal
index a4d56802..a4d56802 100644
--- a/rcynic/sample-trust-anchors/apnic-rpki-root-lacnic-origin.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-lacnic-origin.tal
diff --git a/rcynic/sample-trust-anchors/apnic-rpki-root-ripe-origin.tal b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-ripe-origin.tal
index d64df3ae..d64df3ae 100644
--- a/rcynic/sample-trust-anchors/apnic-rpki-root-ripe-origin.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-rpki-root-ripe-origin.tal
diff --git a/rcynic/sample-trust-anchors/apnic-testbed.tal b/rp/rcynic/sample-trust-anchors/apnic-testbed.tal
index f87a3bf3..f87a3bf3 100644
--- a/rcynic/sample-trust-anchors/apnic-testbed.tal
+++ b/rp/rcynic/sample-trust-anchors/apnic-testbed.tal
diff --git a/rcynic/sample-trust-anchors/bbn-testbed.tal.disabled b/rp/rcynic/sample-trust-anchors/bbn-testbed.tal.disabled
index 21302ea5..21302ea5 100644
--- a/rcynic/sample-trust-anchors/bbn-testbed.tal.disabled
+++ b/rp/rcynic/sample-trust-anchors/bbn-testbed.tal.disabled
diff --git a/rcynic/sample-trust-anchors/lacnic.tal b/rp/rcynic/sample-trust-anchors/lacnic.tal
index 29220d37..29220d37 100644
--- a/rcynic/sample-trust-anchors/lacnic.tal
+++ b/rp/rcynic/sample-trust-anchors/lacnic.tal
diff --git a/rcynic/sample-trust-anchors/ripe-ncc-root.tal b/rp/rcynic/sample-trust-anchors/ripe-ncc-root.tal
index ebdb9f45..ebdb9f45 100644
--- a/rcynic/sample-trust-anchors/ripe-ncc-root.tal
+++ b/rp/rcynic/sample-trust-anchors/ripe-ncc-root.tal
diff --git a/rcynic/sample-trust-anchors/ripe-pilot.tal b/rp/rcynic/sample-trust-anchors/ripe-pilot.tal
index 971128e0..971128e0 100644
--- a/rcynic/sample-trust-anchors/ripe-pilot.tal
+++ b/rp/rcynic/sample-trust-anchors/ripe-pilot.tal
diff --git a/rcynic/sample-trust-anchors/rpki.net-testbed.tal b/rp/rcynic/sample-trust-anchors/rpki.net-testbed.tal
index 1e466300..1e466300 100644
--- a/rcynic/sample-trust-anchors/rpki.net-testbed.tal
+++ b/rp/rcynic/sample-trust-anchors/rpki.net-testbed.tal
diff --git a/rcynic/sample-trust-anchors/testbed-apnicrpki.tal.disabled b/rp/rcynic/sample-trust-anchors/testbed-apnicrpki.tal.disabled
index ae16a302..ae16a302 100644
--- a/rcynic/sample-trust-anchors/testbed-apnicrpki.tal.disabled
+++ b/rp/rcynic/sample-trust-anchors/testbed-apnicrpki.tal.disabled
diff --git a/rcynic/static-rsync/Makefile.in b/rp/rcynic/static-rsync/Makefile.in
index 8a433c7b..8a433c7b 100644
--- a/rcynic/static-rsync/Makefile.in
+++ b/rp/rcynic/static-rsync/Makefile.in
diff --git a/rcynic/static-rsync/README b/rp/rcynic/static-rsync/README
index 9ff5afa8..9ff5afa8 100644
--- a/rcynic/static-rsync/README
+++ b/rp/rcynic/static-rsync/README
diff --git a/rcynic/static-rsync/patches/patch-CVE-2007-4091 b/rp/rcynic/static-rsync/patches/patch-CVE-2007-4091
index 201af96a..201af96a 100644
--- a/rcynic/static-rsync/patches/patch-CVE-2007-4091
+++ b/rp/rcynic/static-rsync/patches/patch-CVE-2007-4091
diff --git a/rcynic/static-rsync/rsync-2.6.9.tar.gz b/rp/rcynic/static-rsync/rsync-2.6.9.tar.gz
index 6377f639..6377f639 100644
--- a/rcynic/static-rsync/rsync-2.6.9.tar.gz
+++ b/rp/rcynic/static-rsync/rsync-2.6.9.tar.gz
diff --git a/rcynic/validation_status.py b/rp/rcynic/validation_status
index 1f7a704d..1ff17e75 100644..100755
--- a/rcynic/validation_status.py
+++ b/rp/rcynic/validation_status
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+#
 # $Id$
 # 
 # Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
diff --git a/rtr-origin/Makefile.in b/rp/rpki-rtr/Makefile.in
index daa18009..e587305b 100644
--- a/rtr-origin/Makefile.in
+++ b/rp/rpki-rtr/Makefile.in
@@ -1,8 +1,6 @@
 # $Id$
 
-BASE		= rtr-origin
-SRC		= ${BASE}.py
-BIN		= ${BASE}
+BIN		= rtr-origin
 
 INSTALL		= @INSTALL@
 PYTHON		= @PYTHON@
@@ -30,10 +28,8 @@ RPKI_RTR_PORT	= 43779
 SCAN_ROAS	= ${bindir}/scan_roas
 
 
-all: ${BIN}
-
-clean:
-	rm -f ${BIN}
+all clean test::
+	@true
 
 install: all ${RTR_ORIGIN_INSTALL_TARGETS}
 
@@ -48,14 +44,6 @@ distclean: clean
 	rm -rf current sockets *.ax *.ix.*
 	rm -f Makefile
 
-${BIN} : ${SRC}
-	AC_PYTHON_INTERPRETER='${PYTHON}' AC_SCAN_ROAS='${SCAN_ROAS}' \
-	${PYTHON} ${abs_top_srcdir}/buildtools/make-rcynic-script.py <${SRC} >$@
-	chmod a+x $@
-
-test:
-	@true
-
 .FORCE:
 
 # Platform-specific rules below here.
diff --git a/rtr-origin/README b/rp/rpki-rtr/README
index dae53010..dae53010 100644
--- a/rtr-origin/README
+++ b/rp/rpki-rtr/README
diff --git a/rtr-origin/rtr-origin.py b/rp/rpki-rtr/rtr-origin
index f37d2ce0..e1e82ccf 100755
--- a/rtr-origin/rtr-origin.py
+++ b/rp/rpki-rtr/rtr-origin
@@ -2163,7 +2163,7 @@ def bgpdump_server_main(argv):
 # Figure out where the scan_roas utility program is today
 try:
   # Set from autoconf
-  scan_roas = ac_scan_roas
+  scan_roas = rpki.autoconf.scan_roas
 except NameError:
   # Source directory
   scan_roas = os.path.normpath(os.path.join(sys.path[0], "..", "utils",
@@ -2175,7 +2175,7 @@ if not os.path.exists(scan_roas):
 # Same thing for scan_routercerts
 try:
   # Set from autoconf
-  scan_routercerts = ac_scan_routercerts
+  scan_routercerts = rpki.autoconf.scan_routercerts
 except NameError:
   # Source directory
   scan_routercerts = os.path.normpath(os.path.join(sys.path[0], "..", "utils",
diff --git a/rtr-origin/rules.darwin.mk b/rp/rpki-rtr/rules.darwin.mk
index 1230db92..1230db92 100644
--- a/rtr-origin/rules.darwin.mk
+++ b/rp/rpki-rtr/rules.darwin.mk
diff --git a/rtr-origin/rules.freebsd.mk b/rp/rpki-rtr/rules.freebsd.mk
index df99da47..df99da47 100644
--- a/rtr-origin/rules.freebsd.mk
+++ b/rp/rpki-rtr/rules.freebsd.mk
diff --git a/rtr-origin/rules.linux.mk b/rp/rpki-rtr/rules.linux.mk
index 23f90f69..23f90f69 100644
--- a/rtr-origin/rules.linux.mk
+++ b/rp/rpki-rtr/rules.linux.mk
diff --git a/rtr-origin/rules.unknown.mk b/rp/rpki-rtr/rules.unknown.mk
index fb16e93a..fb16e93a 100644
--- a/rtr-origin/rules.unknown.mk
+++ b/rp/rpki-rtr/rules.unknown.mk
diff --git a/rtr-origin/server.sh b/rp/rpki-rtr/server.sh
index 7ccf2f38..7ccf2f38 100755
--- a/rtr-origin/server.sh
+++ b/rp/rpki-rtr/server.sh
diff --git a/rp/rpki-rtr/sshd.conf b/rp/rpki-rtr/sshd.conf
new file mode 100644
index 00000000..df32ca67
--- /dev/null
+++ b/rp/rpki-rtr/sshd.conf
@@ -0,0 +1,23 @@
+# $Id$
+#
+# sshd config file for testing.  Invoke thusly:
+#
+# /usr/sbin/sshd -f $top/rpki-rtr/sshd.conf -d
+
+Port					2222
+Protocol				2
+ListenAddress				127.0.0.1
+ListenAddress				::1
+HostKey					/u/sra/rpki/subvert-rpki.hactrn.net/rpki-rtr/ssh_host_rsa_key
+PermitRootLogin				no
+PubkeyAuthentication			yes
+AuthorizedKeysFile			/u/sra/rpki/subvert-rpki.hactrn.net/rpki-rtr/authorized_keys
+PasswordAuthentication			no
+PermitEmptyPasswords			no
+ChallengeResponseAuthentication		no
+UsePAM					no
+AllowTcpForwarding			no
+X11Forwarding				no
+UseDNS					no
+PidFile					/u/sra/rpki/subvert-rpki.hactrn.net/rpki-rtr/sshd.pid
+Subsystem		rpki-rtr	/u/sra/rpki/subvert-rpki.hactrn.net/rpki-rtr/server.sh
diff --git a/rp/utils/Makefile.in b/rp/utils/Makefile.in
new file mode 100644
index 00000000..137230b4
--- /dev/null
+++ b/rp/utils/Makefile.in
@@ -0,0 +1,82 @@
+# $Id$
+
+CFLAGS		= @CFLAGS@
+LDFLAGS		= @LDFLAGS@
+LIBS		= @LIBS@
+
+INSTALL		= @INSTALL@ -m 555 
+
+prefix		= @prefix@
+exec_prefix	= @exec_prefix@
+datarootdir	= @datarootdir@
+datadir		= @datadir@
+localstatedir	= @localstatedir@
+sharedstatedir	= @sharedstatedir@
+sysconfdir	= @sysconfdir@
+bindir		= @bindir@
+sbindir		= @sbindir@
+libexecdir	= @libexecdir@
+libdir		= @libdir@
+
+abs_top_srcdir	 = @abs_top_srcdir@
+abs_top_builddir = @abs_top_builddir@
+
+BINS		= find_roa hashdir print_rpki_manifest print_roa scan_roas uri
+
+SCRIPTS		= scan_routercerts
+
+all:: ${BINS}
+
+clean::
+	rm -rf ${BINS} *.o *.dSYM
+
+install:: all
+	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
+	${INSTALL} ${BINS} ${SCRIPTS} ${DESTDIR}${bindir}
+
+deinstall uninstall::
+	for i in ${BINS} ${SCRIPTS}; do rm -f ${DESTDIR}${bindir}/$$i; done
+
+distclean:: clean
+	rm -f Makefile
+
+find_roa: find_roa.c
+	${CC} ${CFLAGS} -o $@ find_roa.c ${LDFLAGS} ${LIBS}
+
+hashdir: hashdir.c
+	${CC} ${CFLAGS} -o $@ hashdir.c ${LDFLAGS} ${LIBS}
+
+print_roa: print_roa.c
+	${CC} ${CFLAGS} -o $@ print_roa.c ${LDFLAGS} ${LIBS}
+
+print_rpki_manifest: print_rpki_manifest.c
+	${CC} ${CFLAGS} -o $@ print_rpki_manifest.c ${LDFLAGS} ${LIBS}
+
+scan_roas: scan_roas.c
+	${CC} ${CFLAGS} -o $@ scan_roas.c ${LDFLAGS} ${LIBS}
+
+uri: uri.c
+	${CC} ${CFLAGS} -o $@ uri.c ${LDFLAGS} ${LIBS}
+
+# Tests
+
+RSYNC_AUTH_DIR	= ${abs_top_builddir}/rp/rcynic/rcynic-data/authenticated
+HASHDIR_OUTPUT	= hashed-pem-dir
+TARGET_PREFIXES	= 10.3.0.44 10.2.0.6 10.0.0.0/24
+
+test:: ${BINS} ${SCRIPTS}
+	if test -d ${RSYNC_AUTH_DIR}; \
+	then \
+	    rm -rf ${HASHDIR_OUTPUT} ; \
+	    mkdir  ${HASHDIR_OUTPUT} ; \
+	    ./hashdir  ${RSYNC_AUTH_DIR} ${HASHDIR_OUTPUT}; \
+	    ./find_roa ${RSYNC_AUTH_DIR} ${TARGET_PREFIXES} ; \
+	    date -u +'now:            %Y%m%d%H%M%SZ' || : ; \
+	    find ${RSYNC_AUTH_DIR} -type f -name '*.roa' -print -exec ./print_roa           {} \; ; \
+	    find ${RSYNC_AUTH_DIR} -type f -name '*.mft' -print -exec ./print_rpki_manifest {} \; ; \
+	    ./scan_roas        ${RSYNC_AUTH_DIR} ; \
+	    ./scan_routercerts ${RSYNC_AUTH_DIR} ; \
+	fi
+
+clean::
+	rm -rf ${HASHDIR_OUTPUT}
diff --git a/utils/README b/rp/utils/README
index edbd793b..edbd793b 100644
--- a/utils/README
+++ b/rp/utils/README
diff --git a/utils/uri/dot.awk b/rp/utils/dot.awk
index ca1b490b..ca1b490b 100644
--- a/utils/uri/dot.awk
+++ b/rp/utils/dot.awk
diff --git a/utils/find_roa/find_roa.c b/rp/utils/find_roa.c
index a14242c8..a14242c8 100644
--- a/utils/find_roa/find_roa.c
+++ b/rp/utils/find_roa.c
diff --git a/utils/hashdir/hashdir.c b/rp/utils/hashdir.c
index 1b5b0f46..1b5b0f46 100644
--- a/utils/hashdir/hashdir.c
+++ b/rp/utils/hashdir.c
diff --git a/utils/print_roa/print_roa.c b/rp/utils/print_roa.c
index c88fc092..c88fc092 100644
--- a/utils/print_roa/print_roa.c
+++ b/rp/utils/print_roa.c
diff --git a/utils/print_rpki_manifest/print_rpki_manifest.c b/rp/utils/print_rpki_manifest.c
index f55f9916..f55f9916 100644
--- a/utils/print_rpki_manifest/print_rpki_manifest.c
+++ b/rp/utils/print_rpki_manifest.c
diff --git a/utils/scan_roas/scan_roas.c b/rp/utils/scan_roas.c
index f32e3827..f32e3827 100644
--- a/utils/scan_roas/scan_roas.c
+++ b/rp/utils/scan_roas.c
diff --git a/utils/scan_routercerts/scan_routercerts b/rp/utils/scan_routercerts
index 342fa272..342fa272 100755
--- a/utils/scan_routercerts/scan_routercerts
+++ b/rp/utils/scan_routercerts
diff --git a/utils/print_roa/strip_roa.sh b/rp/utils/strip_roa.sh
index e2dacf86..e2dacf86 100755
--- a/utils/print_roa/strip_roa.sh
+++ b/rp/utils/strip_roa.sh
diff --git a/utils/uri/table.awk b/rp/utils/table.awk
index d8627f67..d8627f67 100644
--- a/utils/uri/table.awk
+++ b/rp/utils/table.awk
diff --git a/utils/find_roa/test_roa.sh b/rp/utils/test_roa.sh
index 43d20898..43d20898 100644
--- a/utils/find_roa/test_roa.sh
+++ b/rp/utils/test_roa.sh
diff --git a/utils/uri/uri.c b/rp/utils/uri.c
index 6353e8e5..6353e8e5 100644
--- a/utils/uri/uri.c
+++ b/rp/utils/uri.c
diff --git a/rpkid/rpki/POW/__init__.py b/rpki/POW/__init__.py
index d3796245..d3796245 100644
--- a/rpkid/rpki/POW/__init__.py
+++ b/rpki/POW/__init__.py
diff --git a/rpkid/rpki/__init__.py b/rpki/__init__.py
index 9e090f63..9e090f63 100644
--- a/rpkid/rpki/__init__.py
+++ b/rpki/__init__.py
diff --git a/rpkid/rpki/adns.py b/rpki/adns.py
index a6a900ed..a6a900ed 100644
--- a/rpkid/rpki/adns.py
+++ b/rpki/adns.py
diff --git a/rpkid/rpki/async.py b/rpki/async.py
index 49f98841..49f98841 100644
--- a/rpkid/rpki/async.py
+++ b/rpki/async.py
diff --git a/rpkid/rpki/cli.py b/rpki/cli.py
index 1930f2b7..1930f2b7 100644
--- a/rpkid/rpki/cli.py
+++ b/rpki/cli.py
diff --git a/rpkid/rpki/config.py b/rpki/config.py
index 9f26664e..9f26664e 100644
--- a/rpkid/rpki/config.py
+++ b/rpki/config.py
diff --git a/rpkid/rpki/csv_utils.py b/rpki/csv_utils.py
index 47caabdb..47caabdb 100644
--- a/rpkid/rpki/csv_utils.py
+++ b/rpki/csv_utils.py
diff --git a/rpkid/rpki/daemonize.py b/rpki/daemonize.py
index 62b4ee4e..62b4ee4e 100644
--- a/rpkid/rpki/daemonize.py
+++ b/rpki/daemonize.py
diff --git a/rpkid/rpki/exceptions.py b/rpki/exceptions.py
index d8d3774e..d8d3774e 100644
--- a/rpkid/rpki/exceptions.py
+++ b/rpki/exceptions.py
diff --git a/rpkid/rpki/gui/__init__.py b/rpki/gui/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/__init__.py
+++ b/rpki/gui/__init__.py
diff --git a/rpkid/rpki/gui/api/__init__.py b/rpki/gui/api/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/api/__init__.py
+++ b/rpki/gui/api/__init__.py
diff --git a/rpkid/rpki/gui/api/urls.py b/rpki/gui/api/urls.py
index 8c9d824c..8c9d824c 100644
--- a/rpkid/rpki/gui/api/urls.py
+++ b/rpki/gui/api/urls.py
diff --git a/rpkid/rpki/gui/app/TODO b/rpki/gui/app/TODO
index b7136397..b7136397 100644
--- a/rpkid/rpki/gui/app/TODO
+++ b/rpki/gui/app/TODO
diff --git a/rpkid/rpki/gui/app/__init__.py b/rpki/gui/app/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/app/__init__.py
+++ b/rpki/gui/app/__init__.py
diff --git a/rpkid/rpki/gui/app/admin.py b/rpki/gui/app/admin.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/app/admin.py
+++ b/rpki/gui/app/admin.py
diff --git a/rpkid/rpki/gui/app/check_expired.py b/rpki/gui/app/check_expired.py
index fcf5ecae..fcf5ecae 100644
--- a/rpkid/rpki/gui/app/check_expired.py
+++ b/rpki/gui/app/check_expired.py
diff --git a/rpkid/rpki/gui/app/forms.py b/rpki/gui/app/forms.py
index 20ce4a07..20ce4a07 100644
--- a/rpkid/rpki/gui/app/forms.py
+++ b/rpki/gui/app/forms.py
diff --git a/rpkid/rpki/gui/app/glue.py b/rpki/gui/app/glue.py
index a9f6441e..a9f6441e 100644
--- a/rpkid/rpki/gui/app/glue.py
+++ b/rpki/gui/app/glue.py
diff --git a/rpkid/rpki/gui/app/migrations/0001_initial.py b/rpki/gui/app/migrations/0001_initial.py
index 80877901..80877901 100644
--- a/rpkid/rpki/gui/app/migrations/0001_initial.py
+++ b/rpki/gui/app/migrations/0001_initial.py
diff --git a/rpkid/rpki/gui/app/migrations/0002_auto__add_field_resourcecert_conf.py b/rpki/gui/app/migrations/0002_auto__add_field_resourcecert_conf.py
index d3326f90..d3326f90 100644
--- a/rpkid/rpki/gui/app/migrations/0002_auto__add_field_resourcecert_conf.py
+++ b/rpki/gui/app/migrations/0002_auto__add_field_resourcecert_conf.py
diff --git a/rpkid/rpki/gui/app/migrations/0003_set_conf_from_parent.py b/rpki/gui/app/migrations/0003_set_conf_from_parent.py
index a90a11cc..a90a11cc 100644
--- a/rpkid/rpki/gui/app/migrations/0003_set_conf_from_parent.py
+++ b/rpki/gui/app/migrations/0003_set_conf_from_parent.py
diff --git a/rpkid/rpki/gui/app/migrations/0004_auto__chg_field_resourcecert_conf.py b/rpki/gui/app/migrations/0004_auto__chg_field_resourcecert_conf.py
index a236ad4a..a236ad4a 100644
--- a/rpkid/rpki/gui/app/migrations/0004_auto__chg_field_resourcecert_conf.py
+++ b/rpki/gui/app/migrations/0004_auto__chg_field_resourcecert_conf.py
diff --git a/rpkid/rpki/gui/app/migrations/0005_auto__chg_field_resourcecert_parent.py b/rpki/gui/app/migrations/0005_auto__chg_field_resourcecert_parent.py
index 11e9c814..11e9c814 100644
--- a/rpkid/rpki/gui/app/migrations/0005_auto__chg_field_resourcecert_parent.py
+++ b/rpki/gui/app/migrations/0005_auto__chg_field_resourcecert_parent.py
diff --git a/rpkid/rpki/gui/app/migrations/0006_add_conf_acl.py b/rpki/gui/app/migrations/0006_add_conf_acl.py
index 88fe8171..88fe8171 100644
--- a/rpkid/rpki/gui/app/migrations/0006_add_conf_acl.py
+++ b/rpki/gui/app/migrations/0006_add_conf_acl.py
diff --git a/rpkid/rpki/gui/app/migrations/0007_default_acls.py b/rpki/gui/app/migrations/0007_default_acls.py
index 40656d0f..40656d0f 100644
--- a/rpkid/rpki/gui/app/migrations/0007_default_acls.py
+++ b/rpki/gui/app/migrations/0007_default_acls.py
diff --git a/rpkid/rpki/gui/app/migrations/0008_add_alerts.py b/rpki/gui/app/migrations/0008_add_alerts.py
index 77af68d2..77af68d2 100644
--- a/rpkid/rpki/gui/app/migrations/0008_add_alerts.py
+++ b/rpki/gui/app/migrations/0008_add_alerts.py
diff --git a/rpkid/rpki/gui/app/migrations/__init__.py b/rpki/gui/app/migrations/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/app/migrations/__init__.py
+++ b/rpki/gui/app/migrations/__init__.py
diff --git a/rpkid/rpki/gui/app/models.py b/rpki/gui/app/models.py
index 7d643fdc..7d643fdc 100644
--- a/rpkid/rpki/gui/app/models.py
+++ b/rpki/gui/app/models.py
diff --git a/rpkid/rpki/gui/app/range_list.py b/rpki/gui/app/range_list.py
index 21fd1f29..21fd1f29 100755
--- a/rpkid/rpki/gui/app/range_list.py
+++ b/rpki/gui/app/range_list.py
diff --git a/rpkid/rpki/gui/app/static/css/bootstrap.min.css b/rpki/gui/app/static/css/bootstrap.min.css
index c10c7f41..c10c7f41 100644
--- a/rpkid/rpki/gui/app/static/css/bootstrap.min.css
+++ b/rpki/gui/app/static/css/bootstrap.min.css
diff --git a/rpkid/rpki/gui/app/static/img/glyphicons-halflings-white.png b/rpki/gui/app/static/img/glyphicons-halflings-white.png
index 3bf6484a..3bf6484a 100644
--- a/rpkid/rpki/gui/app/static/img/glyphicons-halflings-white.png
+++ b/rpki/gui/app/static/img/glyphicons-halflings-white.png
diff --git a/rpkid/rpki/gui/app/static/img/glyphicons-halflings.png b/rpki/gui/app/static/img/glyphicons-halflings.png
index a9969993..a9969993 100644
--- a/rpkid/rpki/gui/app/static/img/glyphicons-halflings.png
+++ b/rpki/gui/app/static/img/glyphicons-halflings.png
diff --git a/rpkid/rpki/gui/app/static/img/sui-riu.ico b/rpki/gui/app/static/img/sui-riu.ico
index 61223e27..61223e27 100644
--- a/rpkid/rpki/gui/app/static/img/sui-riu.ico
+++ b/rpki/gui/app/static/img/sui-riu.ico
diff --git a/rpkid/rpki/gui/app/static/js/bootstrap.min.js b/rpki/gui/app/static/js/bootstrap.min.js
index 95c5ac5e..95c5ac5e 100644
--- a/rpkid/rpki/gui/app/static/js/bootstrap.min.js
+++ b/rpki/gui/app/static/js/bootstrap.min.js
diff --git a/rpkid/rpki/gui/app/static/js/jquery-1.8.3.min.js b/rpki/gui/app/static/js/jquery-1.8.3.min.js
index 83589daa..83589daa 100644
--- a/rpkid/rpki/gui/app/static/js/jquery-1.8.3.min.js
+++ b/rpki/gui/app/static/js/jquery-1.8.3.min.js
diff --git a/rpkid/rpki/gui/app/templates/404.html b/rpki/gui/app/templates/404.html
index 76ef3aee..76ef3aee 100644
--- a/rpkid/rpki/gui/app/templates/404.html
+++ b/rpki/gui/app/templates/404.html
diff --git a/rpkid/rpki/gui/app/templates/500.html b/rpki/gui/app/templates/500.html
index 216fe8ae..216fe8ae 100644
--- a/rpkid/rpki/gui/app/templates/500.html
+++ b/rpki/gui/app/templates/500.html
diff --git a/rpkid/rpki/gui/app/templates/app/alert_confirm_clear.html b/rpki/gui/app/templates/app/alert_confirm_clear.html
index 5d7fcf04..5d7fcf04 100644
--- a/rpkid/rpki/gui/app/templates/app/alert_confirm_clear.html
+++ b/rpki/gui/app/templates/app/alert_confirm_clear.html
diff --git a/rpkid/rpki/gui/app/templates/app/alert_confirm_delete.html b/rpki/gui/app/templates/app/alert_confirm_delete.html
index 78c84917..78c84917 100644
--- a/rpkid/rpki/gui/app/templates/app/alert_confirm_delete.html
+++ b/rpki/gui/app/templates/app/alert_confirm_delete.html
diff --git a/rpkid/rpki/gui/app/templates/app/alert_detail.html b/rpki/gui/app/templates/app/alert_detail.html
index b3a73b7e..b3a73b7e 100644
--- a/rpkid/rpki/gui/app/templates/app/alert_detail.html
+++ b/rpki/gui/app/templates/app/alert_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/alert_list.html b/rpki/gui/app/templates/app/alert_list.html
index dd0530e4..dd0530e4 100644
--- a/rpkid/rpki/gui/app/templates/app/alert_list.html
+++ b/rpki/gui/app/templates/app/alert_list.html
diff --git a/rpkid/rpki/gui/app/templates/app/app_base.html b/rpki/gui/app/templates/app/app_base.html
index 4fb5f731..4fb5f731 100644
--- a/rpkid/rpki/gui/app/templates/app/app_base.html
+++ b/rpki/gui/app/templates/app/app_base.html
diff --git a/rpkid/rpki/gui/app/templates/app/app_confirm_delete.html b/rpki/gui/app/templates/app/app_confirm_delete.html
index 7c35a733..7c35a733 100644
--- a/rpkid/rpki/gui/app/templates/app/app_confirm_delete.html
+++ b/rpki/gui/app/templates/app/app_confirm_delete.html
diff --git a/rpkid/rpki/gui/app/templates/app/app_form.html b/rpki/gui/app/templates/app/app_form.html
index b6ab60a2..b6ab60a2 100644
--- a/rpkid/rpki/gui/app/templates/app/app_form.html
+++ b/rpki/gui/app/templates/app/app_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/bootstrap_form.html b/rpki/gui/app/templates/app/bootstrap_form.html
index c6fd5424..c6fd5424 100644
--- a/rpkid/rpki/gui/app/templates/app/bootstrap_form.html
+++ b/rpki/gui/app/templates/app/bootstrap_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/child_detail.html b/rpki/gui/app/templates/app/child_detail.html
index 8178e179..8178e179 100644
--- a/rpkid/rpki/gui/app/templates/app/child_detail.html
+++ b/rpki/gui/app/templates/app/child_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/client_detail.html b/rpki/gui/app/templates/app/client_detail.html
index 3117e859..3117e859 100644
--- a/rpkid/rpki/gui/app/templates/app/client_detail.html
+++ b/rpki/gui/app/templates/app/client_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/client_list.html b/rpki/gui/app/templates/app/client_list.html
index 12987c53..12987c53 100644
--- a/rpkid/rpki/gui/app/templates/app/client_list.html
+++ b/rpki/gui/app/templates/app/client_list.html
diff --git a/rpkid/rpki/gui/app/templates/app/conf_empty.html b/rpki/gui/app/templates/app/conf_empty.html
index efe06f14..efe06f14 100644
--- a/rpkid/rpki/gui/app/templates/app/conf_empty.html
+++ b/rpki/gui/app/templates/app/conf_empty.html
diff --git a/rpkid/rpki/gui/app/templates/app/conf_list.html b/rpki/gui/app/templates/app/conf_list.html
index dce6d59e..dce6d59e 100644
--- a/rpkid/rpki/gui/app/templates/app/conf_list.html
+++ b/rpki/gui/app/templates/app/conf_list.html
diff --git a/rpkid/rpki/gui/app/templates/app/dashboard.html b/rpki/gui/app/templates/app/dashboard.html
index 65dbb90f..65dbb90f 100644
--- a/rpkid/rpki/gui/app/templates/app/dashboard.html
+++ b/rpki/gui/app/templates/app/dashboard.html
diff --git a/rpkid/rpki/gui/app/templates/app/ghostbuster_confirm_delete.html b/rpki/gui/app/templates/app/ghostbuster_confirm_delete.html
index 76b1d25a..76b1d25a 100644
--- a/rpkid/rpki/gui/app/templates/app/ghostbuster_confirm_delete.html
+++ b/rpki/gui/app/templates/app/ghostbuster_confirm_delete.html
diff --git a/rpkid/rpki/gui/app/templates/app/ghostbusterrequest_detail.html b/rpki/gui/app/templates/app/ghostbusterrequest_detail.html
index 296f0f16..296f0f16 100644
--- a/rpkid/rpki/gui/app/templates/app/ghostbusterrequest_detail.html
+++ b/rpki/gui/app/templates/app/ghostbusterrequest_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/import_resource_form.html b/rpki/gui/app/templates/app/import_resource_form.html
index e446d344..e446d344 100644
--- a/rpkid/rpki/gui/app/templates/app/import_resource_form.html
+++ b/rpki/gui/app/templates/app/import_resource_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/object_confirm_delete.html b/rpki/gui/app/templates/app/object_confirm_delete.html
index c4af9b26..c4af9b26 100644
--- a/rpkid/rpki/gui/app/templates/app/object_confirm_delete.html
+++ b/rpki/gui/app/templates/app/object_confirm_delete.html
diff --git a/rpkid/rpki/gui/app/templates/app/parent_detail.html b/rpki/gui/app/templates/app/parent_detail.html
index 4dd1842f..4dd1842f 100644
--- a/rpkid/rpki/gui/app/templates/app/parent_detail.html
+++ b/rpki/gui/app/templates/app/parent_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/pubclient_list.html b/rpki/gui/app/templates/app/pubclient_list.html
index 1872e005..1872e005 100644
--- a/rpkid/rpki/gui/app/templates/app/pubclient_list.html
+++ b/rpki/gui/app/templates/app/pubclient_list.html
diff --git a/rpkid/rpki/gui/app/templates/app/repository_detail.html b/rpki/gui/app/templates/app/repository_detail.html
index 92a43e54..92a43e54 100644
--- a/rpkid/rpki/gui/app/templates/app/repository_detail.html
+++ b/rpki/gui/app/templates/app/repository_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/resource_holder_list.html b/rpki/gui/app/templates/app/resource_holder_list.html
index 6525e74d..6525e74d 100644
--- a/rpkid/rpki/gui/app/templates/app/resource_holder_list.html
+++ b/rpki/gui/app/templates/app/resource_holder_list.html
diff --git a/rpkid/rpki/gui/app/templates/app/roa_detail.html b/rpki/gui/app/templates/app/roa_detail.html
index ec76579d..ec76579d 100644
--- a/rpkid/rpki/gui/app/templates/app/roa_detail.html
+++ b/rpki/gui/app/templates/app/roa_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_delete.html b/rpki/gui/app/templates/app/roarequest_confirm_delete.html
index 7dc3ec2b..7dc3ec2b 100644
--- a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_delete.html
+++ b/rpki/gui/app/templates/app/roarequest_confirm_delete.html
diff --git a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_form.html b/rpki/gui/app/templates/app/roarequest_confirm_form.html
index 446bb6a4..446bb6a4 100644
--- a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_form.html
+++ b/rpki/gui/app/templates/app/roarequest_confirm_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_multi_form.html b/rpki/gui/app/templates/app/roarequest_confirm_multi_form.html
index 4a06a4aa..4a06a4aa 100644
--- a/rpkid/rpki/gui/app/templates/app/roarequest_confirm_multi_form.html
+++ b/rpki/gui/app/templates/app/roarequest_confirm_multi_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/roarequest_form.html b/rpki/gui/app/templates/app/roarequest_form.html
index 3a29131d..3a29131d 100644
--- a/rpkid/rpki/gui/app/templates/app/roarequest_form.html
+++ b/rpki/gui/app/templates/app/roarequest_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/roarequest_multi_form.html b/rpki/gui/app/templates/app/roarequest_multi_form.html
index 06d07943..06d07943 100644
--- a/rpkid/rpki/gui/app/templates/app/roarequest_multi_form.html
+++ b/rpki/gui/app/templates/app/roarequest_multi_form.html
diff --git a/rpkid/rpki/gui/app/templates/app/route_detail.html b/rpki/gui/app/templates/app/route_detail.html
index 84add4a8..84add4a8 100644
--- a/rpkid/rpki/gui/app/templates/app/route_detail.html
+++ b/rpki/gui/app/templates/app/route_detail.html
diff --git a/rpkid/rpki/gui/app/templates/app/routes_view.html b/rpki/gui/app/templates/app/routes_view.html
index 885f3fa9..885f3fa9 100644
--- a/rpkid/rpki/gui/app/templates/app/routes_view.html
+++ b/rpki/gui/app/templates/app/routes_view.html
diff --git a/rpkid/rpki/gui/app/templates/app/user_list.html b/rpki/gui/app/templates/app/user_list.html
index 1b419ded..1b419ded 100644
--- a/rpkid/rpki/gui/app/templates/app/user_list.html
+++ b/rpki/gui/app/templates/app/user_list.html
diff --git a/rpkid/rpki/gui/app/templates/base.html b/rpki/gui/app/templates/base.html
index 08d0c112..08d0c112 100644
--- a/rpkid/rpki/gui/app/templates/base.html
+++ b/rpki/gui/app/templates/base.html
diff --git a/rpkid/rpki/gui/app/templates/registration/login.html b/rpki/gui/app/templates/registration/login.html
index 18b66b55..18b66b55 100644
--- a/rpkid/rpki/gui/app/templates/registration/login.html
+++ b/rpki/gui/app/templates/registration/login.html
diff --git a/rpkid/rpki/gui/app/templates/registration/password_reset_complete.html b/rpki/gui/app/templates/registration/password_reset_complete.html
index d60c6b09..d60c6b09 100644
--- a/rpkid/rpki/gui/app/templates/registration/password_reset_complete.html
+++ b/rpki/gui/app/templates/registration/password_reset_complete.html
diff --git a/rpkid/rpki/gui/app/templates/registration/password_reset_confirm.html b/rpki/gui/app/templates/registration/password_reset_confirm.html
index a577f12d..a577f12d 100644
--- a/rpkid/rpki/gui/app/templates/registration/password_reset_confirm.html
+++ b/rpki/gui/app/templates/registration/password_reset_confirm.html
diff --git a/rpkid/rpki/gui/app/templates/registration/password_reset_done.html b/rpki/gui/app/templates/registration/password_reset_done.html
index c0584f86..c0584f86 100644
--- a/rpkid/rpki/gui/app/templates/registration/password_reset_done.html
+++ b/rpki/gui/app/templates/registration/password_reset_done.html
diff --git a/rpkid/rpki/gui/app/templates/registration/password_reset_email.html b/rpki/gui/app/templates/registration/password_reset_email.html
index 0c4a5672..0c4a5672 100644
--- a/rpkid/rpki/gui/app/templates/registration/password_reset_email.html
+++ b/rpki/gui/app/templates/registration/password_reset_email.html
diff --git a/rpkid/rpki/gui/app/templates/registration/password_reset_form.html b/rpki/gui/app/templates/registration/password_reset_form.html
index 12f1d624..12f1d624 100644
--- a/rpkid/rpki/gui/app/templates/registration/password_reset_form.html
+++ b/rpki/gui/app/templates/registration/password_reset_form.html
diff --git a/rpkid/rpki/gui/app/templatetags/__init__.py b/rpki/gui/app/templatetags/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/app/templatetags/__init__.py
+++ b/rpki/gui/app/templatetags/__init__.py
diff --git a/rpkid/rpki/gui/app/templatetags/app_extras.py b/rpki/gui/app/templatetags/app_extras.py
index 2bde9bc2..2bde9bc2 100644
--- a/rpkid/rpki/gui/app/templatetags/app_extras.py
+++ b/rpki/gui/app/templatetags/app_extras.py
diff --git a/rpkid/rpki/gui/app/templatetags/bootstrap_pager.py b/rpki/gui/app/templatetags/bootstrap_pager.py
index bae8445a..bae8445a 100644
--- a/rpkid/rpki/gui/app/templatetags/bootstrap_pager.py
+++ b/rpki/gui/app/templatetags/bootstrap_pager.py
diff --git a/rpkid/rpki/gui/app/timestamp.py b/rpki/gui/app/timestamp.py
index 959f2025..959f2025 100644
--- a/rpkid/rpki/gui/app/timestamp.py
+++ b/rpki/gui/app/timestamp.py
diff --git a/rpkid/rpki/gui/app/urls.py b/rpki/gui/app/urls.py
index a86611a7..a86611a7 100644
--- a/rpkid/rpki/gui/app/urls.py
+++ b/rpki/gui/app/urls.py
diff --git a/rpkid/rpki/gui/app/views.py b/rpki/gui/app/views.py
index db4cf0c1..db4cf0c1 100644
--- a/rpkid/rpki/gui/app/views.py
+++ b/rpki/gui/app/views.py
diff --git a/rpkid/rpki/gui/cacheview/__init__.py b/rpki/gui/cacheview/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/cacheview/__init__.py
+++ b/rpki/gui/cacheview/__init__.py
diff --git a/rpkid/rpki/gui/cacheview/forms.py b/rpki/gui/cacheview/forms.py
index 28b8ff24..28b8ff24 100644
--- a/rpkid/rpki/gui/cacheview/forms.py
+++ b/rpki/gui/cacheview/forms.py
diff --git a/rpkid/rpki/gui/cacheview/misc.py b/rpki/gui/cacheview/misc.py
index 9a69645c..9a69645c 100644
--- a/rpkid/rpki/gui/cacheview/misc.py
+++ b/rpki/gui/cacheview/misc.py
diff --git a/rpkid/rpki/gui/cacheview/models.py b/rpki/gui/cacheview/models.py
index c3ee8421..c3ee8421 100644
--- a/rpkid/rpki/gui/cacheview/models.py
+++ b/rpki/gui/cacheview/models.py
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/addressrange_detail.html b/rpki/gui/cacheview/templates/cacheview/addressrange_detail.html
index 76edc1ba..76edc1ba 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/addressrange_detail.html
+++ b/rpki/gui/cacheview/templates/cacheview/addressrange_detail.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/cacheview_base.html b/rpki/gui/cacheview/templates/cacheview/cacheview_base.html
index ec71d740..ec71d740 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/cacheview_base.html
+++ b/rpki/gui/cacheview/templates/cacheview/cacheview_base.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/cert_detail.html b/rpki/gui/cacheview/templates/cacheview/cert_detail.html
index 256e7780..256e7780 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/cert_detail.html
+++ b/rpki/gui/cacheview/templates/cacheview/cert_detail.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/ghostbuster_detail.html b/rpki/gui/cacheview/templates/cacheview/ghostbuster_detail.html
index 4215f757..4215f757 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/ghostbuster_detail.html
+++ b/rpki/gui/cacheview/templates/cacheview/ghostbuster_detail.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/global_summary.html b/rpki/gui/cacheview/templates/cacheview/global_summary.html
index 0dbd0ffc..0dbd0ffc 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/global_summary.html
+++ b/rpki/gui/cacheview/templates/cacheview/global_summary.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/query_result.html b/rpki/gui/cacheview/templates/cacheview/query_result.html
index 0694c531..0694c531 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/query_result.html
+++ b/rpki/gui/cacheview/templates/cacheview/query_result.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/roa_detail.html b/rpki/gui/cacheview/templates/cacheview/roa_detail.html
index 39cc547b..39cc547b 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/roa_detail.html
+++ b/rpki/gui/cacheview/templates/cacheview/roa_detail.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/search_form.html b/rpki/gui/cacheview/templates/cacheview/search_form.html
index 1141615d..1141615d 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/search_form.html
+++ b/rpki/gui/cacheview/templates/cacheview/search_form.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/search_result.html b/rpki/gui/cacheview/templates/cacheview/search_result.html
index 7cbf852e..7cbf852e 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/search_result.html
+++ b/rpki/gui/cacheview/templates/cacheview/search_result.html
diff --git a/rpkid/rpki/gui/cacheview/templates/cacheview/signedobject_detail.html b/rpki/gui/cacheview/templates/cacheview/signedobject_detail.html
index 22ae3d27..22ae3d27 100644
--- a/rpkid/rpki/gui/cacheview/templates/cacheview/signedobject_detail.html
+++ b/rpki/gui/cacheview/templates/cacheview/signedobject_detail.html
diff --git a/rpkid/rpki/gui/cacheview/tests.py b/rpki/gui/cacheview/tests.py
index 2247054b..2247054b 100644
--- a/rpkid/rpki/gui/cacheview/tests.py
+++ b/rpki/gui/cacheview/tests.py
diff --git a/rpkid/rpki/gui/cacheview/urls.py b/rpki/gui/cacheview/urls.py
index cc03a587..cc03a587 100644
--- a/rpkid/rpki/gui/cacheview/urls.py
+++ b/rpki/gui/cacheview/urls.py
diff --git a/rpkid/rpki/gui/cacheview/util.py b/rpki/gui/cacheview/util.py
index 0d3d7ae3..0d3d7ae3 100644
--- a/rpkid/rpki/gui/cacheview/util.py
+++ b/rpki/gui/cacheview/util.py
diff --git a/rpkid/rpki/gui/cacheview/views.py b/rpki/gui/cacheview/views.py
index 94870eb2..94870eb2 100644
--- a/rpkid/rpki/gui/cacheview/views.py
+++ b/rpki/gui/cacheview/views.py
diff --git a/rpkid/rpki/gui/decorators.py b/rpki/gui/decorators.py
index 69d20c46..69d20c46 100644
--- a/rpkid/rpki/gui/decorators.py
+++ b/rpki/gui/decorators.py
diff --git a/rpkid/rpki/gui/default_settings.py b/rpki/gui/default_settings.py
index 3859247c..3859247c 100644
--- a/rpkid/rpki/gui/default_settings.py
+++ b/rpki/gui/default_settings.py
diff --git a/rpkid/rpki/gui/models.py b/rpki/gui/models.py
index 7a684f32..7a684f32 100644
--- a/rpkid/rpki/gui/models.py
+++ b/rpki/gui/models.py
diff --git a/rpkid/rpki/gui/routeview/__init__.py b/rpki/gui/routeview/__init__.py
index e69de29b..e69de29b 100644
--- a/rpkid/rpki/gui/routeview/__init__.py
+++ b/rpki/gui/routeview/__init__.py
diff --git a/rpkid/rpki/gui/routeview/api.py b/rpki/gui/routeview/api.py
index cf699c9a..cf699c9a 100644
--- a/rpkid/rpki/gui/routeview/api.py
+++ b/rpki/gui/routeview/api.py
diff --git a/rpkid/rpki/gui/routeview/models.py b/rpki/gui/routeview/models.py
index 052860c4..052860c4 100644
--- a/rpkid/rpki/gui/routeview/models.py
+++ b/rpki/gui/routeview/models.py
diff --git a/rpkid/rpki/gui/routeview/util.py b/rpki/gui/routeview/util.py
index 7884224c..7884224c 100644
--- a/rpkid/rpki/gui/routeview/util.py
+++ b/rpki/gui/routeview/util.py
diff --git a/rpkid/rpki/gui/script_util.py b/rpki/gui/script_util.py
index c3a864fd..c3a864fd 100644
--- a/rpkid/rpki/gui/script_util.py
+++ b/rpki/gui/script_util.py
diff --git a/rpkid/rpki/gui/urls.py b/rpki/gui/urls.py
index 955092f5..955092f5 100644
--- a/rpkid/rpki/gui/urls.py
+++ b/rpki/gui/urls.py
diff --git a/rpkid/rpki/gui/views.py b/rpki/gui/views.py
index 404d6c7e..404d6c7e 100644
--- a/rpkid/rpki/gui/views.py
+++ b/rpki/gui/views.py
diff --git a/rpkid/rpki/http.py b/rpki/http.py
index 3c541f26..3c541f26 100644
--- a/rpkid/rpki/http.py
+++ b/rpki/http.py
diff --git a/rpkid/rpki/ipaddrs.py b/rpki/ipaddrs.py
index c1855302..c1855302 100644
--- a/rpkid/rpki/ipaddrs.py
+++ b/rpki/ipaddrs.py
diff --git a/rpkid/rpki/irdb/__init__.py b/rpki/irdb/__init__.py
index cc83387e..cc83387e 100644
--- a/rpkid/rpki/irdb/__init__.py
+++ b/rpki/irdb/__init__.py
diff --git a/rpkid/rpki/irdb/models.py b/rpki/irdb/models.py
index 1ad9b4e3..1ad9b4e3 100644
--- a/rpkid/rpki/irdb/models.py
+++ b/rpki/irdb/models.py
diff --git a/rpkid/rpki/irdb/router.py b/rpki/irdb/router.py
index 1f27d0c9..1f27d0c9 100644
--- a/rpkid/rpki/irdb/router.py
+++ b/rpki/irdb/router.py
diff --git a/rpkid/rpki/irdb/zookeeper.py b/rpki/irdb/zookeeper.py
index f99dc9f0..f99dc9f0 100644
--- a/rpkid/rpki/irdb/zookeeper.py
+++ b/rpki/irdb/zookeeper.py
diff --git a/rpkid/rpki/irdbd.py b/rpki/irdbd.py
index 41739dc4..41739dc4 100644
--- a/rpkid/rpki/irdbd.py
+++ b/rpki/irdbd.py
diff --git a/rpkid/rpki/left_right.py b/rpki/left_right.py
index 2d46cdfa..2d46cdfa 100644
--- a/rpkid/rpki/left_right.py
+++ b/rpki/left_right.py
diff --git a/rpkid/rpki/log.py b/rpki/log.py
index c605331a..c605331a 100644
--- a/rpkid/rpki/log.py
+++ b/rpki/log.py
diff --git a/rpkid/rpki/myrpki.py b/rpki/myrpki.py
index c5c7990f..c5c7990f 100644
--- a/rpkid/rpki/myrpki.py
+++ b/rpki/myrpki.py
diff --git a/rpkid/rpki/mysql_import.py b/rpki/mysql_import.py
index 88d30357..88d30357 100644
--- a/rpkid/rpki/mysql_import.py
+++ b/rpki/mysql_import.py
diff --git a/rpkid/rpki/oids.py b/rpki/oids.py
index a97df6a7..a97df6a7 100644
--- a/rpkid/rpki/oids.py
+++ b/rpki/oids.py
diff --git a/rpkid/rpki/old_irdbd.py b/rpki/old_irdbd.py
index 41060344..41060344 100644
--- a/rpkid/rpki/old_irdbd.py
+++ b/rpki/old_irdbd.py
diff --git a/rpkid/rpki/pubd.py b/rpki/pubd.py
index 31f22ed4..31f22ed4 100644
--- a/rpkid/rpki/pubd.py
+++ b/rpki/pubd.py
diff --git a/rpkid/rpki/publication.py b/rpki/publication.py
index 2462ae39..2462ae39 100644
--- a/rpkid/rpki/publication.py
+++ b/rpki/publication.py
diff --git a/rpkid/rpki/rcynic.py b/rpki/rcynic.py
index 73394fb8..73394fb8 100644
--- a/rpkid/rpki/rcynic.py
+++ b/rpki/rcynic.py
diff --git a/rpkid/rpki/relaxng.py b/rpki/relaxng.py
index 0d8c0d64..3dcf3d4f 100644
--- a/rpkid/rpki/relaxng.py
+++ b/rpki/relaxng.py
@@ -6,7 +6,7 @@ import lxml.etree
 ## Parsed RelaxNG left_right schema
 left_right = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: left-right-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: left-right-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for RPKI left-right protocol.
   
@@ -1095,277 +1095,379 @@ left_right = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" en
 -->
 '''))
 
-## @var up_down
-## Parsed RelaxNG up_down schema
-up_down = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
+## @var myrpki
+## Parsed RelaxNG myrpki schema
+myrpki = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: up-down-schema.rnc 5753 2014-04-05 19:24:26Z sra $
-  
-  RelaxNG schema for the up-down protocol, extracted from RFC 6492.
+  $Id: myrpki.rnc 5757 2014-04-05 22:42:12Z sra $
   
-  Copyright (c) 2012 IETF Trust and the persons identified as authors
-  of the code.  All rights reserved.
+  RelaxNG schema for MyRPKI XML messages.
   
-  Redistribution and use in source and binary forms, with or without
-  modification, are permitted provided that the following conditions
-  are met:
+  This message protocol is on its way out, as we're in the process of
+  moving on from the user interface model that produced it, but even
+  after we finish replacing it we'll still need the schema for a while
+  to validate old messages when upgrading.
   
-  * Redistributions of source code must retain the above copyright
-    notice, this list of conditions and the following disclaimer.
+  libxml2 (including xmllint) only groks the XML syntax of RelaxNG, so
+  run the compact syntax through trang to get XML syntax.
   
-  * Redistributions in binary form must reproduce the above copyright
-    notice, this list of conditions and the following disclaimer in
-    the documentation and/or other materials provided with the
-    distribution.
+  Copyright (C) 2009-2011  Internet Systems Consortium ("ISC")
   
-  * Neither the name of Internet Society, IETF or IETF Trust, nor the
-    names of specific contributors, may be used to endorse or promote
-    products derived from this software without specific prior written
-    permission.
+  Permission to use, copy, modify, and distribute this software for any
+  purpose with or without fee is hereby granted, provided that the above
+  copyright notice and this permission notice appear in all copies.
   
-  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-  "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-  LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
-  FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
-  COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
-  INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
-  BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-  LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-  CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
-  ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
-  POSSIBILITY OF SUCH DAMAGE.
+  THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+  REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+  AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+  INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+  LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+  OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+  PERFORMANCE OF THIS SOFTWARE.
 -->
-<grammar ns="http://www.apnic.net/specs/rescerts/up-down/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
-  <define name="resource_set_as">
-    <data type="string">
+<grammar ns="http://www.hactrn.net/uris/rpki/myrpki/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
+  <define name="version">
+    <value>2</value>
+  </define>
+  <define name="base64">
+    <data type="base64Binary">
       <param name="maxLength">512000</param>
-      <param name="pattern">[\-,0-9]*</param>
     </data>
   </define>
-  <define name="resource_set_ip4">
+  <define name="object_handle">
     <data type="string">
-      <param name="maxLength">512000</param>
-      <param name="pattern">[\-,/.0-9]*</param>
+      <param name="maxLength">255</param>
+      <param name="pattern">[\-_A-Za-z0-9]+</param>
     </data>
   </define>
-  <define name="resource_set_ip6">
+  <define name="pubd_handle">
     <data type="string">
-      <param name="maxLength">512000</param>
-      <param name="pattern">[\-,/:0-9a-fA-F]*</param>
+      <param name="maxLength">255</param>
+      <param name="pattern">[\-_A-Za-z0-9/]+</param>
     </data>
   </define>
-  <define name="class_name">
-    <data type="token">
-      <param name="minLength">1</param>
-      <param name="maxLength">1024</param>
+  <define name="uri">
+    <data type="anyURI">
+      <param name="maxLength">4096</param>
     </data>
   </define>
-  <define name="ski">
-    <data type="token">
-      <param name="minLength">27</param>
-      <param name="maxLength">1024</param>
-    </data>
+  <define name="asn">
+    <data type="positiveInteger"/>
   </define>
-  <define name="label">
-    <data type="token">
-      <param name="minLength">1</param>
-      <param name="maxLength">1024</param>
+  <define name="asn_list">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9]+</param>
     </data>
   </define>
-  <define name="cert_url">
+  <define name="ipv4_list">
     <data type="string">
-      <param name="minLength">10</param>
-      <param name="maxLength">4096</param>
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9/.]+</param>
     </data>
   </define>
-  <define name="base64_binary">
-    <data type="base64Binary">
-      <param name="minLength">4</param>
+  <define name="ipv6_list">
+    <data type="string">
       <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9/:a-fA-F]+</param>
     </data>
   </define>
-  <start>
-    <element name="message">
-      <attribute name="version">
-        <data type="positiveInteger">
-          <param name="maxInclusive">1</param>
-        </data>
-      </attribute>
-      <attribute name="sender">
-        <ref name="label"/>
-      </attribute>
-      <attribute name="recipient">
-        <ref name="label"/>
-      </attribute>
-      <ref name="payload"/>
-    </element>
-  </start>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>list</value>
-    </attribute>
-    <ref name="list_request"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>list_response</value>
-    </attribute>
-    <ref name="list_response"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>issue</value>
-    </attribute>
-    <ref name="issue_request"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>issue_response</value>
-    </attribute>
-    <ref name="issue_response"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>revoke</value>
-    </attribute>
-    <ref name="revoke_request"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>revoke_response</value>
-    </attribute>
-    <ref name="revoke_response"/>
-  </define>
-  <define name="payload" combine="choice">
-    <attribute name="type">
-      <value>error_response</value>
-    </attribute>
-    <ref name="error_response"/>
-  </define>
-  <define name="list_request">
-    <empty/>
-  </define>
-  <define name="list_response">
-    <zeroOrMore>
-      <ref name="class"/>
-    </zeroOrMore>
+  <define name="timestamp">
+    <data type="dateTime">
+      <param name="pattern">.*Z</param>
+    </data>
   </define>
-  <define name="class">
-    <element name="class">
-      <attribute name="class_name">
-        <ref name="class_name"/>
-      </attribute>
-      <attribute name="cert_url">
-        <ref name="cert_url"/>
-      </attribute>
-      <attribute name="resource_set_as">
-        <ref name="resource_set_as"/>
-      </attribute>
-      <attribute name="resource_set_ipv4">
-        <ref name="resource_set_ip4"/>
-      </attribute>
-      <attribute name="resource_set_ipv6">
-        <ref name="resource_set_ip6"/>
+  <!--
+    Message formate used between configure_resources and
+    configure_daemons.
+  -->
+  <start combine="choice">
+    <element name="myrpki">
+      <attribute name="version">
+        <ref name="version"/>
       </attribute>
-      <attribute name="resource_set_notafter">
-        <data type="dateTime"/>
+      <attribute name="handle">
+        <ref name="object_handle"/>
       </attribute>
       <optional>
-        <attribute name="suggested_sia_head">
-          <data type="anyURI">
-            <param name="maxLength">1024</param>
-            <param name="pattern">rsync://.+</param>
-          </data>
+        <attribute name="service_uri">
+          <ref name="uri"/>
         </attribute>
       </optional>
       <zeroOrMore>
-        <element name="certificate">
-          <attribute name="cert_url">
-            <ref name="cert_url"/>
+        <element name="roa_request">
+          <attribute name="asn">
+            <ref name="asn"/>
+          </attribute>
+          <attribute name="v4">
+            <ref name="ipv4_list"/>
+          </attribute>
+          <attribute name="v6">
+            <ref name="ipv6_list"/>
+          </attribute>
+        </element>
+      </zeroOrMore>
+      <zeroOrMore>
+        <element name="child">
+          <attribute name="handle">
+            <ref name="object_handle"/>
+          </attribute>
+          <attribute name="valid_until">
+            <ref name="timestamp"/>
           </attribute>
           <optional>
-            <attribute name="req_resource_set_as">
-              <ref name="resource_set_as"/>
+            <attribute name="asns">
+              <ref name="asn_list"/>
             </attribute>
           </optional>
           <optional>
-            <attribute name="req_resource_set_ipv4">
-              <ref name="resource_set_ip4"/>
+            <attribute name="v4">
+              <ref name="ipv4_list"/>
             </attribute>
           </optional>
           <optional>
-            <attribute name="req_resource_set_ipv6">
-              <ref name="resource_set_ip6"/>
+            <attribute name="v6">
+              <ref name="ipv6_list"/>
             </attribute>
           </optional>
-          <ref name="base64_binary"/>
+          <optional>
+            <element name="bpki_certificate">
+              <ref name="base64"/>
+            </element>
+          </optional>
         </element>
       </zeroOrMore>
-      <element name="issuer">
-        <ref name="base64_binary"/>
+      <zeroOrMore>
+        <element name="parent">
+          <attribute name="handle">
+            <ref name="object_handle"/>
+          </attribute>
+          <optional>
+            <attribute name="service_uri">
+              <ref name="uri"/>
+            </attribute>
+          </optional>
+          <optional>
+            <attribute name="myhandle">
+              <ref name="object_handle"/>
+            </attribute>
+          </optional>
+          <optional>
+            <attribute name="sia_base">
+              <ref name="uri"/>
+            </attribute>
+          </optional>
+          <optional>
+            <element name="bpki_cms_certificate">
+              <ref name="base64"/>
+            </element>
+          </optional>
+        </element>
+      </zeroOrMore>
+      <zeroOrMore>
+        <element name="repository">
+          <attribute name="handle">
+            <ref name="object_handle"/>
+          </attribute>
+          <optional>
+            <attribute name="service_uri">
+              <ref name="uri"/>
+            </attribute>
+          </optional>
+          <optional>
+            <element name="bpki_certificate">
+              <ref name="base64"/>
+            </element>
+          </optional>
+        </element>
+      </zeroOrMore>
+      <optional>
+        <element name="bpki_ca_certificate">
+          <ref name="base64"/>
+        </element>
+      </optional>
+      <optional>
+        <element name="bpki_crl">
+          <ref name="base64"/>
+        </element>
+      </optional>
+      <optional>
+        <element name="bpki_bsc_certificate">
+          <ref name="base64"/>
+        </element>
+      </optional>
+      <optional>
+        <element name="bpki_bsc_pkcs10">
+          <ref name="base64"/>
+        </element>
+      </optional>
+    </element>
+  </start>
+  <!-- Format of an identity.xml file. -->
+  <start combine="choice">
+    <element name="identity">
+      <attribute name="version">
+        <ref name="version"/>
+      </attribute>
+      <attribute name="handle">
+        <ref name="object_handle"/>
+      </attribute>
+      <element name="bpki_ta">
+        <ref name="base64"/>
       </element>
     </element>
-  </define>
-  <define name="issue_request">
-    <element name="request">
-      <attribute name="class_name">
-        <ref name="class_name"/>
+  </start>
+  <!--
+    Format of <authorization/> element used in referrals.  The Base64
+    text is a <referral/> (q. v.) element signed with CMS.
+  -->
+  <define name="authorization">
+    <element name="authorization">
+      <attribute name="referrer">
+        <ref name="pubd_handle"/>
       </attribute>
+      <ref name="base64"/>
+    </element>
+  </define>
+  <!-- Format of <contact_info/> element used in referrals. -->
+  <define name="contact_info">
+    <element name="contact_info">
       <optional>
-        <attribute name="req_resource_set_as">
-          <ref name="resource_set_as"/>
+        <attribute name="uri">
+          <ref name="uri"/>
         </attribute>
       </optional>
+      <data type="string"/>
+    </element>
+  </define>
+  <!-- Variant payload portion of a <repository/> element. -->
+  <define name="repository_payload">
+    <choice>
+      <attribute name="type">
+        <value>none</value>
+      </attribute>
+      <attribute name="type">
+        <value>offer</value>
+      </attribute>
+      <group>
+        <attribute name="type">
+          <value>referral</value>
+        </attribute>
+        <ref name="authorization"/>
+        <ref name="contact_info"/>
+      </group>
+    </choice>
+  </define>
+  <!-- <parent/> element (response from configure_child). -->
+  <start combine="choice">
+    <element name="parent">
+      <attribute name="version">
+        <ref name="version"/>
+      </attribute>
       <optional>
-        <attribute name="req_resource_set_ipv4">
-          <ref name="resource_set_ip4"/>
+        <attribute name="valid_until">
+          <ref name="timestamp"/>
         </attribute>
       </optional>
       <optional>
-        <attribute name="req_resource_set_ipv6">
-          <ref name="resource_set_ip6"/>
+        <attribute name="service_uri">
+          <ref name="uri"/>
         </attribute>
       </optional>
-      <ref name="base64_binary"/>
-    </element>
-  </define>
-  <define name="issue_response">
-    <ref name="class"/>
-  </define>
-  <define name="revoke_request">
-    <ref name="revocation"/>
-  </define>
-  <define name="revoke_response">
-    <ref name="revocation"/>
-  </define>
-  <define name="revocation">
-    <element name="key">
-      <attribute name="class_name">
-        <ref name="class_name"/>
+      <attribute name="child_handle">
+        <ref name="object_handle"/>
       </attribute>
-      <attribute name="ski">
-        <ref name="ski"/>
+      <attribute name="parent_handle">
+        <ref name="object_handle"/>
       </attribute>
+      <element name="bpki_resource_ta">
+        <ref name="base64"/>
+      </element>
+      <element name="bpki_child_ta">
+        <ref name="base64"/>
+      </element>
+      <optional>
+        <element name="repository">
+          <ref name="repository_payload"/>
+        </element>
+      </optional>
     </element>
-  </define>
-  <define name="error_response">
-    <element name="status">
-      <data type="positiveInteger">
-        <param name="maxInclusive">9999</param>
-      </data>
+  </start>
+  <!--
+    <repository/> element, types offer and referral
+    (input to configure_publication_client).
+  -->
+  <start combine="choice">
+    <element name="repository">
+      <attribute name="version">
+        <ref name="version"/>
+      </attribute>
+      <attribute name="handle">
+        <ref name="object_handle"/>
+      </attribute>
+      <attribute name="parent_handle">
+        <ref name="object_handle"/>
+      </attribute>
+      <ref name="repository_payload"/>
+      <element name="bpki_client_ta">
+        <ref name="base64"/>
+      </element>
     </element>
-    <zeroOrMore>
-      <element name="description">
-        <attribute name="xml:lang">
-          <data type="language"/>
-        </attribute>
-        <data type="string">
-          <param name="maxLength">1024</param>
-        </data>
+  </start>
+  <!--
+    <repository/> element, confirmation type (output of
+    configure_publication_client).
+  -->
+  <start combine="choice">
+    <element name="repository">
+      <attribute name="version">
+        <ref name="version"/>
+      </attribute>
+      <attribute name="type">
+        <value>confirmed</value>
+      </attribute>
+      <attribute name="parent_handle">
+        <ref name="object_handle"/>
+      </attribute>
+      <attribute name="client_handle">
+        <ref name="pubd_handle"/>
+      </attribute>
+      <attribute name="service_uri">
+        <ref name="uri"/>
+      </attribute>
+      <attribute name="sia_base">
+        <ref name="uri"/>
+      </attribute>
+      <element name="bpki_server_ta">
+        <ref name="base64"/>
       </element>
-    </zeroOrMore>
-  </define>
+      <element name="bpki_client_ta">
+        <ref name="base64"/>
+      </element>
+      <optional>
+        <ref name="authorization"/>
+      </optional>
+      <optional>
+        <ref name="contact_info"/>
+      </optional>
+    </element>
+  </start>
+  <!--
+    <referral/> element.  This is the entirety of a separate message
+    which is signed with CMS then included ase the Base64 content of an
+    <authorization/> element in the main message.
+  -->
+  <start combine="choice">
+    <element name="referral">
+      <attribute name="version">
+        <ref name="version"/>
+      </attribute>
+      <attribute name="authorized_sia_base">
+        <ref name="uri"/>
+      </attribute>
+      <ref name="base64"/>
+    </element>
+  </start>
 </grammar>
 <!--
   Local Variables:
@@ -1380,7 +1482,7 @@ up_down = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encod
 ## Parsed RelaxNG publication schema
 publication = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: publication-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: publication-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for RPKI publication protocol.
   
@@ -1954,394 +2056,11 @@ publication = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" e
 -->
 '''))
 
-## @var myrpki
-## Parsed RelaxNG myrpki schema
-myrpki = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
-<!--
-  $Id: myrpki.rnc 5753 2014-04-05 19:24:26Z sra $
-  
-  RelaxNG schema for MyRPKI XML messages.
-  
-  This message protocol is on its way out, as we're in the process of
-  moving on from the user interface model that produced it, but even
-  after we finish replacing it we'll still need the schema for a while
-  to validate old messages when upgrading.
-  
-  libxml2 (including xmllint) only groks the XML syntax of RelaxNG, so
-  run the compact syntax through trang to get XML syntax.
-  
-  Copyright (C) 2009-2011  Internet Systems Consortium ("ISC")
-  
-  Permission to use, copy, modify, and distribute this software for any
-  purpose with or without fee is hereby granted, provided that the above
-  copyright notice and this permission notice appear in all copies.
-  
-  THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
-  REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-  AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
-  INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-  LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
-  OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-  PERFORMANCE OF THIS SOFTWARE.
--->
-<grammar ns="http://www.hactrn.net/uris/rpki/myrpki/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
-  <define name="version">
-    <value>2</value>
-  </define>
-  <define name="base64">
-    <data type="base64Binary">
-      <param name="maxLength">512000</param>
-    </data>
-  </define>
-  <define name="object_handle">
-    <data type="string">
-      <param name="maxLength">255</param>
-      <param name="pattern">[\-_A-Za-z0-9]+</param>
-    </data>
-  </define>
-  <define name="pubd_handle">
-    <data type="string">
-      <param name="maxLength">255</param>
-      <param name="pattern">[\-_A-Za-z0-9/]+</param>
-    </data>
-  </define>
-  <define name="uri">
-    <data type="anyURI">
-      <param name="maxLength">4096</param>
-    </data>
-  </define>
-  <define name="asn">
-    <data type="positiveInteger"/>
-  </define>
-  <define name="asn_list">
-    <data type="string">
-      <param name="maxLength">512000</param>
-      <param name="pattern">[\-,0-9]+</param>
-    </data>
-  </define>
-  <define name="ipv4_list">
-    <data type="string">
-      <param name="maxLength">512000</param>
-      <param name="pattern">[\-,0-9/.]+</param>
-    </data>
-  </define>
-  <define name="ipv6_list">
-    <data type="string">
-      <param name="maxLength">512000</param>
-      <param name="pattern">[\-,0-9/:a-fA-F]+</param>
-    </data>
-  </define>
-  <define name="timestamp">
-    <data type="dateTime">
-      <param name="pattern">.*Z</param>
-    </data>
-  </define>
-  <!--
-    Message formate used between configure_resources and
-    configure_daemons.
-  -->
-  <start combine="choice">
-    <element name="myrpki">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <attribute name="handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <optional>
-        <attribute name="service_uri">
-          <ref name="uri"/>
-        </attribute>
-      </optional>
-      <zeroOrMore>
-        <element name="roa_request">
-          <attribute name="asn">
-            <ref name="asn"/>
-          </attribute>
-          <attribute name="v4">
-            <ref name="ipv4_list"/>
-          </attribute>
-          <attribute name="v6">
-            <ref name="ipv6_list"/>
-          </attribute>
-        </element>
-      </zeroOrMore>
-      <zeroOrMore>
-        <element name="child">
-          <attribute name="handle">
-            <ref name="object_handle"/>
-          </attribute>
-          <attribute name="valid_until">
-            <ref name="timestamp"/>
-          </attribute>
-          <optional>
-            <attribute name="asns">
-              <ref name="asn_list"/>
-            </attribute>
-          </optional>
-          <optional>
-            <attribute name="v4">
-              <ref name="ipv4_list"/>
-            </attribute>
-          </optional>
-          <optional>
-            <attribute name="v6">
-              <ref name="ipv6_list"/>
-            </attribute>
-          </optional>
-          <optional>
-            <element name="bpki_certificate">
-              <ref name="base64"/>
-            </element>
-          </optional>
-        </element>
-      </zeroOrMore>
-      <zeroOrMore>
-        <element name="parent">
-          <attribute name="handle">
-            <ref name="object_handle"/>
-          </attribute>
-          <optional>
-            <attribute name="service_uri">
-              <ref name="uri"/>
-            </attribute>
-          </optional>
-          <optional>
-            <attribute name="myhandle">
-              <ref name="object_handle"/>
-            </attribute>
-          </optional>
-          <optional>
-            <attribute name="sia_base">
-              <ref name="uri"/>
-            </attribute>
-          </optional>
-          <optional>
-            <element name="bpki_cms_certificate">
-              <ref name="base64"/>
-            </element>
-          </optional>
-        </element>
-      </zeroOrMore>
-      <zeroOrMore>
-        <element name="repository">
-          <attribute name="handle">
-            <ref name="object_handle"/>
-          </attribute>
-          <optional>
-            <attribute name="service_uri">
-              <ref name="uri"/>
-            </attribute>
-          </optional>
-          <optional>
-            <element name="bpki_certificate">
-              <ref name="base64"/>
-            </element>
-          </optional>
-        </element>
-      </zeroOrMore>
-      <optional>
-        <element name="bpki_ca_certificate">
-          <ref name="base64"/>
-        </element>
-      </optional>
-      <optional>
-        <element name="bpki_crl">
-          <ref name="base64"/>
-        </element>
-      </optional>
-      <optional>
-        <element name="bpki_bsc_certificate">
-          <ref name="base64"/>
-        </element>
-      </optional>
-      <optional>
-        <element name="bpki_bsc_pkcs10">
-          <ref name="base64"/>
-        </element>
-      </optional>
-    </element>
-  </start>
-  <!-- Format of an identity.xml file. -->
-  <start combine="choice">
-    <element name="identity">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <attribute name="handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <element name="bpki_ta">
-        <ref name="base64"/>
-      </element>
-    </element>
-  </start>
-  <!--
-    Format of <authorization/> element used in referrals.  The Base64
-    text is a <referral/> (q. v.) element signed with CMS.
-  -->
-  <define name="authorization">
-    <element name="authorization">
-      <attribute name="referrer">
-        <ref name="pubd_handle"/>
-      </attribute>
-      <ref name="base64"/>
-    </element>
-  </define>
-  <!-- Format of <contact_info/> element used in referrals. -->
-  <define name="contact_info">
-    <element name="contact_info">
-      <optional>
-        <attribute name="uri">
-          <ref name="uri"/>
-        </attribute>
-      </optional>
-      <data type="string"/>
-    </element>
-  </define>
-  <!-- Variant payload portion of a <repository/> element. -->
-  <define name="repository_payload">
-    <choice>
-      <attribute name="type">
-        <value>none</value>
-      </attribute>
-      <attribute name="type">
-        <value>offer</value>
-      </attribute>
-      <group>
-        <attribute name="type">
-          <value>referral</value>
-        </attribute>
-        <ref name="authorization"/>
-        <ref name="contact_info"/>
-      </group>
-    </choice>
-  </define>
-  <!-- <parent/> element (response from configure_child). -->
-  <start combine="choice">
-    <element name="parent">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <optional>
-        <attribute name="valid_until">
-          <ref name="timestamp"/>
-        </attribute>
-      </optional>
-      <optional>
-        <attribute name="service_uri">
-          <ref name="uri"/>
-        </attribute>
-      </optional>
-      <attribute name="child_handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <attribute name="parent_handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <element name="bpki_resource_ta">
-        <ref name="base64"/>
-      </element>
-      <element name="bpki_child_ta">
-        <ref name="base64"/>
-      </element>
-      <optional>
-        <element name="repository">
-          <ref name="repository_payload"/>
-        </element>
-      </optional>
-    </element>
-  </start>
-  <!--
-    <repository/> element, types offer and referral
-    (input to configure_publication_client).
-  -->
-  <start combine="choice">
-    <element name="repository">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <attribute name="handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <attribute name="parent_handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <ref name="repository_payload"/>
-      <element name="bpki_client_ta">
-        <ref name="base64"/>
-      </element>
-    </element>
-  </start>
-  <!--
-    <repository/> element, confirmation type (output of
-    configure_publication_client).
-  -->
-  <start combine="choice">
-    <element name="repository">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <attribute name="type">
-        <value>confirmed</value>
-      </attribute>
-      <attribute name="parent_handle">
-        <ref name="object_handle"/>
-      </attribute>
-      <attribute name="client_handle">
-        <ref name="pubd_handle"/>
-      </attribute>
-      <attribute name="service_uri">
-        <ref name="uri"/>
-      </attribute>
-      <attribute name="sia_base">
-        <ref name="uri"/>
-      </attribute>
-      <element name="bpki_server_ta">
-        <ref name="base64"/>
-      </element>
-      <element name="bpki_client_ta">
-        <ref name="base64"/>
-      </element>
-      <optional>
-        <ref name="authorization"/>
-      </optional>
-      <optional>
-        <ref name="contact_info"/>
-      </optional>
-    </element>
-  </start>
-  <!--
-    <referral/> element.  This is the entirety of a separate message
-    which is signed with CMS then included ase the Base64 content of an
-    <authorization/> element in the main message.
-  -->
-  <start combine="choice">
-    <element name="referral">
-      <attribute name="version">
-        <ref name="version"/>
-      </attribute>
-      <attribute name="authorized_sia_base">
-        <ref name="uri"/>
-      </attribute>
-      <ref name="base64"/>
-    </element>
-  </start>
-</grammar>
-<!--
-  Local Variables:
-  indent-tabs-mode: nil
-  comment-start: "# "
-  comment-start-skip: "#[ \t]*"
-  End:
--->
-'''))
-
 ## @var router_certificate
 ## Parsed RelaxNG router_certificate schema
 router_certificate = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: router-certificate-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: router-certificate-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for BGPSEC router certificate interchange format.
   
@@ -2439,3 +2158,284 @@ router_certificate = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version=
 -->
 '''))
 
+## @var up_down
+## Parsed RelaxNG up_down schema
+up_down = lxml.etree.RelaxNG(lxml.etree.fromstring(r'''<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  $Id: up-down-schema.rnc 5757 2014-04-05 22:42:12Z sra $
+  
+  RelaxNG schema for the up-down protocol, extracted from RFC 6492.
+  
+  Copyright (c) 2012 IETF Trust and the persons identified as authors
+  of the code.  All rights reserved.
+  
+  Redistribution and use in source and binary forms, with or without
+  modification, are permitted provided that the following conditions
+  are met:
+  
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in
+    the documentation and/or other materials provided with the
+    distribution.
+  
+  * Neither the name of Internet Society, IETF or IETF Trust, nor the
+    names of specific contributors, may be used to endorse or promote
+    products derived from this software without specific prior written
+    permission.
+  
+  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+  "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+  LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+  FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+  COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+  INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+  BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+  LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+  CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
+  ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+  POSSIBILITY OF SUCH DAMAGE.
+-->
+<grammar ns="http://www.apnic.net/specs/rescerts/up-down/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
+  <define name="resource_set_as">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9]*</param>
+    </data>
+  </define>
+  <define name="resource_set_ip4">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,/.0-9]*</param>
+    </data>
+  </define>
+  <define name="resource_set_ip6">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,/:0-9a-fA-F]*</param>
+    </data>
+  </define>
+  <define name="class_name">
+    <data type="token">
+      <param name="minLength">1</param>
+      <param name="maxLength">1024</param>
+    </data>
+  </define>
+  <define name="ski">
+    <data type="token">
+      <param name="minLength">27</param>
+      <param name="maxLength">1024</param>
+    </data>
+  </define>
+  <define name="label">
+    <data type="token">
+      <param name="minLength">1</param>
+      <param name="maxLength">1024</param>
+    </data>
+  </define>
+  <define name="cert_url">
+    <data type="string">
+      <param name="minLength">10</param>
+      <param name="maxLength">4096</param>
+    </data>
+  </define>
+  <define name="base64_binary">
+    <data type="base64Binary">
+      <param name="minLength">4</param>
+      <param name="maxLength">512000</param>
+    </data>
+  </define>
+  <start>
+    <element name="message">
+      <attribute name="version">
+        <data type="positiveInteger">
+          <param name="maxInclusive">1</param>
+        </data>
+      </attribute>
+      <attribute name="sender">
+        <ref name="label"/>
+      </attribute>
+      <attribute name="recipient">
+        <ref name="label"/>
+      </attribute>
+      <ref name="payload"/>
+    </element>
+  </start>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>list</value>
+    </attribute>
+    <ref name="list_request"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>list_response</value>
+    </attribute>
+    <ref name="list_response"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>issue</value>
+    </attribute>
+    <ref name="issue_request"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>issue_response</value>
+    </attribute>
+    <ref name="issue_response"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>revoke</value>
+    </attribute>
+    <ref name="revoke_request"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>revoke_response</value>
+    </attribute>
+    <ref name="revoke_response"/>
+  </define>
+  <define name="payload" combine="choice">
+    <attribute name="type">
+      <value>error_response</value>
+    </attribute>
+    <ref name="error_response"/>
+  </define>
+  <define name="list_request">
+    <empty/>
+  </define>
+  <define name="list_response">
+    <zeroOrMore>
+      <ref name="class"/>
+    </zeroOrMore>
+  </define>
+  <define name="class">
+    <element name="class">
+      <attribute name="class_name">
+        <ref name="class_name"/>
+      </attribute>
+      <attribute name="cert_url">
+        <ref name="cert_url"/>
+      </attribute>
+      <attribute name="resource_set_as">
+        <ref name="resource_set_as"/>
+      </attribute>
+      <attribute name="resource_set_ipv4">
+        <ref name="resource_set_ip4"/>
+      </attribute>
+      <attribute name="resource_set_ipv6">
+        <ref name="resource_set_ip6"/>
+      </attribute>
+      <attribute name="resource_set_notafter">
+        <data type="dateTime"/>
+      </attribute>
+      <optional>
+        <attribute name="suggested_sia_head">
+          <data type="anyURI">
+            <param name="maxLength">1024</param>
+            <param name="pattern">rsync://.+</param>
+          </data>
+        </attribute>
+      </optional>
+      <zeroOrMore>
+        <element name="certificate">
+          <attribute name="cert_url">
+            <ref name="cert_url"/>
+          </attribute>
+          <optional>
+            <attribute name="req_resource_set_as">
+              <ref name="resource_set_as"/>
+            </attribute>
+          </optional>
+          <optional>
+            <attribute name="req_resource_set_ipv4">
+              <ref name="resource_set_ip4"/>
+            </attribute>
+          </optional>
+          <optional>
+            <attribute name="req_resource_set_ipv6">
+              <ref name="resource_set_ip6"/>
+            </attribute>
+          </optional>
+          <ref name="base64_binary"/>
+        </element>
+      </zeroOrMore>
+      <element name="issuer">
+        <ref name="base64_binary"/>
+      </element>
+    </element>
+  </define>
+  <define name="issue_request">
+    <element name="request">
+      <attribute name="class_name">
+        <ref name="class_name"/>
+      </attribute>
+      <optional>
+        <attribute name="req_resource_set_as">
+          <ref name="resource_set_as"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="req_resource_set_ipv4">
+          <ref name="resource_set_ip4"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="req_resource_set_ipv6">
+          <ref name="resource_set_ip6"/>
+        </attribute>
+      </optional>
+      <ref name="base64_binary"/>
+    </element>
+  </define>
+  <define name="issue_response">
+    <ref name="class"/>
+  </define>
+  <define name="revoke_request">
+    <ref name="revocation"/>
+  </define>
+  <define name="revoke_response">
+    <ref name="revocation"/>
+  </define>
+  <define name="revocation">
+    <element name="key">
+      <attribute name="class_name">
+        <ref name="class_name"/>
+      </attribute>
+      <attribute name="ski">
+        <ref name="ski"/>
+      </attribute>
+    </element>
+  </define>
+  <define name="error_response">
+    <element name="status">
+      <data type="positiveInteger">
+        <param name="maxInclusive">9999</param>
+      </data>
+    </element>
+    <zeroOrMore>
+      <element name="description">
+        <attribute name="xml:lang">
+          <data type="language"/>
+        </attribute>
+        <data type="string">
+          <param name="maxLength">1024</param>
+        </data>
+      </element>
+    </zeroOrMore>
+  </define>
+</grammar>
+<!--
+  Local Variables:
+  indent-tabs-mode: nil
+  comment-start: "# "
+  comment-start-skip: "#[ \t]*"
+  End:
+-->
+'''))
+
diff --git a/rpkid/rpki/resource_set.py b/rpki/resource_set.py
index 2ec19cab..2ec19cab 100644
--- a/rpkid/rpki/resource_set.py
+++ b/rpki/resource_set.py
diff --git a/rpkid/rpki/rootd.py b/rpki/rootd.py
index 43e84873..43e84873 100644
--- a/rpkid/rpki/rootd.py
+++ b/rpki/rootd.py
diff --git a/rpkid/rpki/rpkic.py b/rpki/rpkic.py
index d5339f5b..d5339f5b 100644
--- a/rpkid/rpki/rpkic.py
+++ b/rpki/rpkic.py
diff --git a/rpkid/rpki/rpkid.py b/rpki/rpkid.py
index d6163bee..d6163bee 100644
--- a/rpkid/rpki/rpkid.py
+++ b/rpki/rpkid.py
diff --git a/rpkid/rpki/rpkid_tasks.py b/rpki/rpkid_tasks.py
index 04e1c0df..04e1c0df 100644
--- a/rpkid/rpki/rpkid_tasks.py
+++ b/rpki/rpkid_tasks.py
diff --git a/rpkid/rpki/sql.py b/rpki/sql.py
index c753278c..c753278c 100644
--- a/rpkid/rpki/sql.py
+++ b/rpki/sql.py
diff --git a/rpkid/rpki/sql_schemas.py b/rpki/sql_schemas.py
index e57c7a7f..0ac6016e 100644
--- a/rpkid/rpki/sql_schemas.py
+++ b/rpki/sql_schemas.py
@@ -2,7 +2,7 @@
 
 ## @var rpkid
 ## SQL schema rpkid
-rpkid = '''-- $Id: rpkid.sql 5753 2014-04-05 19:24:26Z sra $
+rpkid = '''-- $Id: rpkid.sql 5757 2014-04-05 22:42:12Z sra $
 
 -- Copyright (C) 2009--2011  Internet Systems Consortium ("ISC")
 --
@@ -256,7 +256,7 @@ CREATE TABLE ee_cert (
 
 ## @var pubd
 ## SQL schema pubd
-pubd = '''-- $Id: pubd.sql 3465 2010-10-07 00:59:39Z sra $
+pubd = '''-- $Id: pubd.sql 5757 2014-04-05 22:42:12Z sra $
 
 -- Copyright (C) 2009--2010  Internet Systems Consortium ("ISC")
 --
diff --git a/rpkid/rpki/sundial.py b/rpki/sundial.py
index 0825d61b..0825d61b 100644
--- a/rpkid/rpki/sundial.py
+++ b/rpki/sundial.py
diff --git a/rpkid/rpki/up_down.py b/rpki/up_down.py
index d2ad85d3..d2ad85d3 100644
--- a/rpkid/rpki/up_down.py
+++ b/rpki/up_down.py
diff --git a/rpkid/rpki/x509.py b/rpki/x509.py
index fb1a5a2b..fb1a5a2b 100644
--- a/rpkid/rpki/x509.py
+++ b/rpki/x509.py
diff --git a/rpkid/rpki/xml_utils.py b/rpki/xml_utils.py
index f254fd11..f254fd11 100644
--- a/rpkid/rpki/xml_utils.py
+++ b/rpki/xml_utils.py
diff --git a/rpkid/doc/README b/rpkid/doc/README
deleted file mode 100644
index 33902d7e..00000000
--- a/rpkid/doc/README
+++ /dev/null
@@ -1,16 +0,0 @@
-$Id$
-
-Internals documentation for the RPKI CA tools.
-
-Once upon a time this included the hand-written documentation for the
-CA tools, but that is now part of the overall package documentation.
-What's left here is just what Doxygen generates from the source code
-and a few Graphviz diagrams.
-
-At the moment the control for the stuff generated here is still
-../Makefile, that may change at some point.
-
-We no longer generate the documentation here automatically, as it's
-kind of large and we're not sure anybody else cares about it, so if
-you want this manual you'll have to install Doxygen and build it
-yourself.
diff --git a/rpkid/doc/mainpage.py b/rpkid/doc/mainpage.py
deleted file mode 100644
index 4570547b..00000000
--- a/rpkid/doc/mainpage.py
+++ /dev/null
@@ -1,71 +0,0 @@
-## @file
-# @details
-# Doxygen documentation source, expressed as Python comments to make Doxygen happy.
-#
-# $Id$
-#
-# Copyright (C) 2009--2012  Internet Systems Consortium ("ISC")
-#
-# Permission to use, copy, modify, and distribute this software for any
-# purpose with or without fee is hereby granted, provided that the above
-# copyright notice and this permission notice appear in all copies.
-#
-# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
-# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-# AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
-# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
-# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-# PERFORMANCE OF THIS SOFTWARE.
-#
-# Portions copyright (C) 2007--2008  American Registry for Internet Numbers ("ARIN")
-#
-# Permission to use, copy, modify, and distribute this software for any
-# purpose with or without fee is hereby granted, provided that the above
-# copyright notice and this permission notice appear in all copies.
-#
-# THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH
-# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-# AND FITNESS.  IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT,
-# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
-# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-# PERFORMANCE OF THIS SOFTWARE.
-
-## @mainpage RPKI Engine Reference Manual
-#
-# This collection of Python modules implements an RPKI CA engine.
-#
-# See http://trac.rpki.net/ for the RPKI tools package documentation.
-#
-# The documentation you're reading is generated automatically by
-# Doxygen from comments and documentation in
-# <a href="http://trac.rpki.net/browser/trunk">the code</a>.
-#
-# At one point this manual also included documentation for the CA
-# tools, but that has been integrated into the overall package
-# documentation.  This manual is now just the CA tools internals.
-
-## @page sql-schemas SQL database schemas
-#
-# @li @subpage rpkid-sql "rpkid database schema"
-# @li @subpage pubd-sql  "pubd database schema"
-
-## @page rpkid-sql rpkid SQL schema
-#
-# @image html  rpkid.png "Diagram of rpkid.sql"
-# @image latex rpkid.eps "Diagram of rpkid.sql" height=\textheight
-#
-# @verbinclude rpkid.sql
-
-## @page pubd-sql pubd SQL Schema
-#
-# @image html  pubd.png "Diagram of pubd.sql"
-# @image latex pubd.eps "Diagram of pubd.sql" width=\textwidth
-#
-# @verbinclude pubd.sql
-
-# Local Variables:
-# mode:python
-# compile-command: "cd ../.. && ./config.status && cd rpkid && make docs"
-# End:
diff --git a/rtr-origin/sshd.conf b/rtr-origin/sshd.conf
deleted file mode 100644
index 0124fc4c..00000000
--- a/rtr-origin/sshd.conf
+++ /dev/null
@@ -1,23 +0,0 @@
-# $Id$
-#
-# sshd config file for testing.  Invoke thusly:
-#
-# /usr/sbin/sshd -f /u/sra/rpki/subvert-rpki.hactrn.net/rtr-origin/sshd.conf -d
-
-Port					2222
-Protocol				2
-ListenAddress				127.0.0.1
-ListenAddress				::1
-HostKey					/u/sra/rpki/subvert-rpki.hactrn.net/rtr-origin/ssh_host_rsa_key
-PermitRootLogin				no
-PubkeyAuthentication			yes
-AuthorizedKeysFile			/u/sra/rpki/subvert-rpki.hactrn.net/rtr-origin/authorized_keys
-PasswordAuthentication			no
-PermitEmptyPasswords			no
-ChallengeResponseAuthentication		no
-UsePAM					no
-AllowTcpForwarding			no
-X11Forwarding				no
-UseDNS					no
-PidFile					/u/sra/rpki/subvert-rpki.hactrn.net/rtr-origin/sshd.pid
-Subsystem		rpki-rtr	/u/sra/rpki/subvert-rpki.hactrn.net/rtr-origin/server.sh
diff --git a/schemas/Makefile.in b/schemas/Makefile.in
new file mode 100644
index 00000000..80ba3b17
--- /dev/null
+++ b/schemas/Makefile.in
@@ -0,0 +1,69 @@
+# $Id$
+
+PYTHON		= @PYTHON@
+TRANG		= @TRANG@
+
+CFLAGS		= @CFLAGS@
+LDFLAGS		= @LDFLAGS@ @POW_LDFLAGS@
+LIBS		= @LIBS@
+
+INSTALL		= @INSTALL@ -m 555 
+
+prefix		= @prefix@
+exec_prefix	= @exec_prefix@
+datarootdir	= @datarootdir@
+datadir		= @datadir@
+localstatedir	= @localstatedir@
+sharedstatedir	= @sharedstatedir@
+sysconfdir	= @sysconfdir@
+bindir		= @bindir@
+sbindir		= @sbindir@
+libexecdir	= @libexecdir@
+sysconfdir	= @sysconfdir@
+
+abs_builddir	= @abs_builddir@
+abs_top_srcdir	= @abs_top_srcdir@
+abs_top_builddir= @abs_top_builddir@
+srcdir          = @srcdir@
+
+all:: ${abs_top_srcdir}/rpki/relaxng.py ${abs_top_srcdir}/rpki/sql_schemas.py
+
+install clean test distclean deinstall uninstall::
+	@true
+
+distclean::
+	rm -f Makefile
+
+RNGS =  relaxng/left-right-schema.rng		\
+	relaxng/up-down-schema.rng		\
+	relaxng/publication-schema.rng		\
+	relaxng/myrpki.rng			\
+	relaxng/router-certificate-schema.rng
+
+SQLS =	sql/rpkid.sql sql/pubd.sql
+
+${abs_top_srcdir}/rpki/relaxng.py: ${abs_top_srcdir}/buildtools/make-relaxng.py ${RNGS}
+	cd relaxng; ${PYTHON} ${abs_top_srcdir}/buildtools/make-relaxng.py *.rng >$@.tmp
+	mv $@.tmp $@
+
+${abs_top_srcdir}/rpki/sql_schemas.py: ${abs_top_srcdir}/buildtools/make-sql-schemas.py ${SQLS}
+	cd sql; ${PYTHON} ${abs_top_srcdir}/buildtools/make-sql-schemas.py >$@.tmp
+	mv $@.tmp $@
+
+relaxng/left-right-schema.rng: relaxng/left-right-schema.rnc
+	${TRANG} relaxng/left-right-schema.rnc relaxng/left-right-schema.rng
+
+relaxng/up-down-schema.rng: relaxng/up-down-schema.rnc
+	${TRANG} relaxng/up-down-schema.rnc relaxng/up-down-schema.rng
+
+relaxng/publication-schema.rng: relaxng/publication-schema.rnc
+	${TRANG} relaxng/publication-schema.rnc relaxng/publication-schema.rng
+
+relaxng/myrpki.rng: relaxng/myrpki.rnc
+	${TRANG} relaxng/myrpki.rnc relaxng/myrpki.rng
+
+relaxng/router-certificate-schema.rng: relaxng/router-certificate-schema.rnc
+	${TRANG} relaxng/router-certificate-schema.rnc relaxng/router-certificate-schema.rng
+
+dont-run-trang:
+	touch relaxng/*.rng
diff --git a/rpkid/left-right-schema.rnc b/schemas/relaxng/left-right-schema.rnc
index b46adeb5..b46adeb5 100644
--- a/rpkid/left-right-schema.rnc
+++ b/schemas/relaxng/left-right-schema.rnc
diff --git a/rpkid/left-right-schema.rng b/schemas/relaxng/left-right-schema.rng
index 6c3d2f1a..f153f0b6 100644
--- a/rpkid/left-right-schema.rng
+++ b/schemas/relaxng/left-right-schema.rng
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: left-right-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: left-right-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for RPKI left-right protocol.
   
diff --git a/rpkid/myrpki.rnc b/schemas/relaxng/myrpki.rnc
index 156ab0d5..156ab0d5 100644
--- a/rpkid/myrpki.rnc
+++ b/schemas/relaxng/myrpki.rnc
diff --git a/rpkid/myrpki.rng b/schemas/relaxng/myrpki.rng
index 07b8beb3..8c7473eb 100644
--- a/rpkid/myrpki.rng
+++ b/schemas/relaxng/myrpki.rng
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: myrpki.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: myrpki.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for MyRPKI XML messages.
   
diff --git a/rpkid/publication-schema.rnc b/schemas/relaxng/publication-schema.rnc
index 4353ae80..4353ae80 100644
--- a/rpkid/publication-schema.rnc
+++ b/schemas/relaxng/publication-schema.rnc
diff --git a/rpkid/publication-schema.rng b/schemas/relaxng/publication-schema.rng
index 63fb6ea5..7c74698f 100644
--- a/rpkid/publication-schema.rng
+++ b/schemas/relaxng/publication-schema.rng
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: publication-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: publication-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for RPKI publication protocol.
   
diff --git a/rpkid/router-certificate-schema.rnc b/schemas/relaxng/router-certificate-schema.rnc
index 8cc325ce..8cc325ce 100644
--- a/rpkid/router-certificate-schema.rnc
+++ b/schemas/relaxng/router-certificate-schema.rnc
diff --git a/rpkid/router-certificate-schema.rng b/schemas/relaxng/router-certificate-schema.rng
index d8be9eda..90b50107 100644
--- a/rpkid/router-certificate-schema.rng
+++ b/schemas/relaxng/router-certificate-schema.rng
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: router-certificate-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: router-certificate-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for BGPSEC router certificate interchange format.
   
diff --git a/rpkid/up-down-schema.rnc b/schemas/relaxng/up-down-schema.rnc
index a603b8fe..a603b8fe 100644
--- a/rpkid/up-down-schema.rnc
+++ b/schemas/relaxng/up-down-schema.rnc
diff --git a/rpkid/up-down-schema.rng b/schemas/relaxng/up-down-schema.rng
index 5368fa65..89235b7e 100644
--- a/rpkid/up-down-schema.rng
+++ b/schemas/relaxng/up-down-schema.rng
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  $Id: up-down-schema.rnc 5753 2014-04-05 19:24:26Z sra $
+  $Id: up-down-schema.rnc 5757 2014-04-05 22:42:12Z sra $
   
   RelaxNG schema for the up-down protocol, extracted from RFC 6492.
   
diff --git a/rpkid/pubd.sql b/schemas/sql/pubd.sql
index 3a58ec00..3a58ec00 100644
--- a/rpkid/pubd.sql
+++ b/schemas/sql/pubd.sql
diff --git a/rpkid/rpkid.sql b/schemas/sql/rpkid.sql
index a7e3dc0a..a7e3dc0a 100644
--- a/rpkid/rpkid.sql
+++ b/schemas/sql/rpkid.sql
diff --git a/scripts/rpki b/scripts/rpki
deleted file mode 120000
index 168548eb..00000000
--- a/scripts/rpki
+++ /dev/null
@@ -1 +0,0 @@
-../rpkid/rpki
\ No newline at end of file
diff --git a/rpkid/setup.py b/setup.py
index 653d2d31..f370e5aa 100644
--- a/rpkid/setup.py
+++ b/setup.py
@@ -62,27 +62,27 @@ setup(name              = "rpkitoolkit",
                            "rpki.gui.cacheview" :
                              ["templates/*/*.html"]},
       scripts           = [(autoconf.sbindir,
-                            ["rpkic",
-                             "rpki-confgen",
-                             "rpki-start-servers",
-                             "rpki-sql-backup",
-                             "rpki-sql-setup",
-                             "portal-gui/scripts/rpki-manage",
-                             "portal-gui/scripts/rpkigui-query-routes",
-                             "irbe_cli"]),
+                            ["ca/rpkic",
+                             "ca/rpki-confgen",
+                             "ca/rpki-start-servers",
+                             "ca/rpki-sql-backup",
+                             "ca/rpki-sql-setup",
+                             "ca/rpki-manage",
+                             "ca/rpkigui-query-routes",
+                             "ca/irbe_cli"]),
                            (autoconf.libexecdir,
-                            ["irdbd",
-                             "pubd",
-                             "rootd",
-                             "rpkid",
-                             "portal-gui/scripts/rpkigui-import-routes",
-                             "portal-gui/scripts/rpkigui-check-expired",
-                             "portal-gui/scripts/rpkigui-rcynic",
-                             "portal-gui/scripts/rpkigui-apache-conf-gen"])],
+                            ["ca/irdbd",
+                             "ca/pubd",
+                             "ca/rootd",
+                             "ca/rpkid",
+                             "ca/rpkigui-import-routes",
+                             "ca/rpkigui-check-expired",
+                             "ca/rpkigui-rcynic",
+                             "ca/rpkigui-apache-conf-gen"])],
       data_files        = [(autoconf.sysconfdir  + "/rpki",
-                            ["rpki-confgen.xml"]),
+                            ["ca/rpki-confgen.xml"]),
                            (autoconf.datarootdir + "/rpki/wsgi",
-                            ["portal-gui/rpki.wsgi"]),
+                            ["ca/rpki.wsgi"]),
                            (autoconf.datarootdir + "/rpki/media/css",
                             glob("rpki/gui/app/static/css/*")),
                            (autoconf.datarootdir + "/rpki/media/js",
@@ -90,4 +90,4 @@ setup(name              = "rpkitoolkit",
                            (autoconf.datarootdir + "/rpki/media/img",
                             glob("rpki/gui/app/static/img/*")),
                            (autoconf.datarootdir + "/rpki/upgrade-scripts",
-                            glob("upgrade-scripts/*"))])
+                            glob("ca/upgrade-scripts/*"))])
diff --git a/rpkid/setup_extensions.py b/setup_extensions.py
index 12b123aa..12b123aa 100644
--- a/rpkid/setup_extensions.py
+++ b/setup_extensions.py
diff --git a/utils/find_roa/Makefile.in b/utils/find_roa/Makefile.in
deleted file mode 100644
index 36c68e01..00000000
--- a/utils/find_roa/Makefile.in
+++ /dev/null
@@ -1,56 +0,0 @@
-# $Id$
-
-NAME = find_roa
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean:
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-
-ROA_DIR = ${abs_top_builddir}/rcynic/rcynic-data/authenticated
-
-TEST_ARGS = ${ROA_DIR} 10.3.0.44 10.2.0.6 10.0.0.0/24
-
-test: ${BIN}
-#	if test -d ${ROA_DIR}; then ./${BIN} ${TEST_ARGS} ; else :; fi
-	if test -d ${ROA_DIR}; then sh ./test_roa.sh ${TEST_ARGS} ; else :; fi
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -rf hashed-pem-dir
-	rm -f Makefile
diff --git a/utils/hashdir/Makefile.in b/utils/hashdir/Makefile.in
deleted file mode 100644
index c0cf448a..00000000
--- a/utils/hashdir/Makefile.in
+++ /dev/null
@@ -1,55 +0,0 @@
-# $Id$
-
-NAME = hashdir
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean::
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-INPUT  = ${abs_top_builddir}/rcynic/rcynic-data/authenticated
-OUTPUT = hashed-pem-dir
-
-test: ${BIN}
-	if test -d ${INPUT}; then rm -rf ${OUTPUT} && mkdir ${OUTPUT} && ./hashdir ${INPUT} ${OUTPUT}; else :; fi
-
-clean::
-	rm -rf ${OUTPUT}
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -f Makefile
diff --git a/utils/print_roa/Makefile.in b/utils/print_roa/Makefile.in
deleted file mode 100644
index 5999b351..00000000
--- a/utils/print_roa/Makefile.in
+++ /dev/null
@@ -1,52 +0,0 @@
-# $Id$
-
-NAME = print_roa
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean:
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-ROA_DIR = ${abs_top_builddir}/rpkid/tests/smoketest.dir/publication
-
-test: all
-	-date -u +'now:            %Y%m%d%H%M%SZ'
-	if test -d ${ROA_DIR}; then find ${ROA_DIR} -type f -name '*.roa' -print -exec ./${BIN} {} \; ; else :; fi
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -f Makefile
diff --git a/utils/print_rpki_manifest/Makefile.in b/utils/print_rpki_manifest/Makefile.in
deleted file mode 100644
index 22f1b16b..00000000
--- a/utils/print_rpki_manifest/Makefile.in
+++ /dev/null
@@ -1,52 +0,0 @@
-# $Id$
-
-NAME = print_rpki_manifest
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean:
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-MANIFEST_DIR = ${abs_top_builddir}/rpkid/tests/smoketest.dir/publication
-
-test: all
-	-date -u +'now:            %Y%m%d%H%M%SZ'
-	if test -d ${MANIFEST_DIR}; then find ${MANIFEST_DIR} -type f -name '*.mnf' -print -exec ./${BIN} {} \; ; else :; fi
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -f Makefile
diff --git a/utils/scan_roas/Makefile.in b/utils/scan_roas/Makefile.in
deleted file mode 100644
index 7707969c..00000000
--- a/utils/scan_roas/Makefile.in
+++ /dev/null
@@ -1,52 +0,0 @@
-# $Id$
-
-NAME = scan_roas
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean:
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-ROA_DIR = ${abs_top_builddir}/rpkid/tests/smoketest.dir/publication
-
-test: all
-	-date -u +'now:            %Y%m%d%H%M%SZ'
-	if test -d ${ROA_DIR}; then  ./${BIN} ${ROA_DIR} ; else :; fi
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -f Makefile
diff --git a/utils/scan_routercerts/Makefile.in b/utils/scan_routercerts/Makefile.in
deleted file mode 100644
index 715d1325..00000000
--- a/utils/scan_routercerts/Makefile.in
+++ /dev/null
@@ -1,41 +0,0 @@
-# $Id$
-
-NAME = scan_routercerts
-
-BIN = ${NAME}
-
-INSTALL		= @INSTALL@ -m 555 
-
-prefix		= @prefix@
-exec_prefix	= @exec_prefix@
-datarootdir	= @datarootdir@
-datadir		= @datadir@
-localstatedir	= @localstatedir@
-sharedstatedir	= @sharedstatedir@
-sysconfdir	= @sysconfdir@
-bindir		= @bindir@
-sbindir		= @sbindir@
-libexecdir	= @libexecdir@
-libdir		= @libdir@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all clean:
-	@true
-
-ROUTERCERT_DIR = ${abs_top_builddir}/rpkid/tests/smoketest.dir/publication
-
-test: all
-	-date -u +'now:            %Y%m%d%H%M%SZ'
-	if test -d ${ROUTERCERT_DIR}; then ./${BIN} ; else :; fi
-
-install: all
-	if test -d ${DESTDIR}${bindir} ; then :; else ${INSTALL} -d ${DESTDIR}${bindir}; fi
-	${INSTALL} ${BIN} ${DESTDIR}${bindir}
-
-deinstall uninstall:
-	rm -f ${DESTDIR}${bindir}/${BIN}
-
-distclean: clean
-	rm -f Makefile
diff --git a/utils/uri/Makefile.in b/utils/uri/Makefile.in
deleted file mode 100644
index fc545060..00000000
--- a/utils/uri/Makefile.in
+++ /dev/null
@@ -1,31 +0,0 @@
-# $Id$
-
-NAME = uri
-
-BIN = ${NAME}
-SRC = ${NAME}.c
-OBJ = ${NAME}.o
-
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
-LIBS = @LIBS@
-
-abs_top_srcdir	 = @abs_top_srcdir@
-abs_top_builddir = @abs_top_builddir@
-
-all: ${BIN}
-
-clean:
-	rm -rf ${BIN} ${OBJ} ${BIN}.dSYM
-
-${BIN}: ${SRC}
-	${CC} ${CFLAGS} -o $@ ${SRC} ${LDFLAGS} ${LIBS}
-
-test:
-	@true
-
-install deinstall uninstall:
-	@true
-
-distclean: clean
-	rm -f Makefile