RPKI Engine Reference Manual

This collection of Python modules implements a prototype of the RPKI Engine. This is a work in progress.

See http://subvert-rpki.hactrn.net/ for code and design documents.

The RPKI Engine is an implementation of the production-side tools for generating certificates, CRLs, and ROAs. The relying party tools are a separate (and much simpler) package.

The Subversion repository for the entire project is available for (read-only) anonymous access at http://subvert-rpki.hactrn.net/.

The documentation you're reading is generated automatically by Doxygen from comments and documentation in the code.

Besides the automatically-generated code documentation, this manual also includes documentation of the overall package:

• Overview of the tools

• Installation instructions

• Configuration instructions

• MySQL setup instructions

• The myrpki tool

• A description of the left-right protocol

• A description of the publication protocol

• A description of the BPKI model used to secure the up-down, left-right, and publication protocols

• A description of the several SQL database schemas

This work was funded from 2006 through 2008 by ARIN, in collaboration with the other Regional Internet Registries. Current work is funded by DHS.