RPKI Engine Reference Manual

1.0

This collection of Python modules implements a prototype of the RPKI Engine. This is a work in progress.

See http://viewvc.hactrn.net/subvert-rpki.hactrn.net/ for code, design documents, a text mirror of portions of APNIC's Wiki, etc.

The RPKI Engine is an implementation of the production-side tools for generating certificates, CRLs, and ROAs. The relying party tools are a separate (and much simpler) package.

The Subversion repository for the entire project is available for (read-only) anonymous access at http://subvert-rpki.hactrn.net/.

The documentation you're reading is generated automatically by Doxygen from comments and documentation in the code.

Besides the automatically-generated code documentation, this manual also includes documentation of the overall package:

• The installation instructions
• The operation instructions
• A description of the left-right protocol
• A description of the publication protocol
• A description of the BPKI model used to secure the up-down, left-right, and publication protocols
• A description of the several SQL database schemas
• Some suggestions for further reading

This work was funded from 2006 through 2008 by ARIN, in collaboration with the other Regional Internet Registries. Current work is funded by DHS.