Skip to content
Dragon Research Labs RPKI toolkit
Python C Shell HTML Makefile M4 Other
Branch: master
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information.
buildtools subprocess raises OSError when git isn't installed (eg, in pbuilder e… Jul 28, 2016
ca Clean up old code which has been obsolete for years. Aug 26, 2018
doc try to get the sucker to push Oct 20, 2017
ext More copyright notices, what fun. May 7, 2016
h OpenSSL 1.1 compatability, part 1. Apr 8, 2016
openssl Update to OpenSSL 1.0.2j. Oct 10, 2016
potpourri New script to install an RPKI root key salvaged from an old rootd May 25, 2016
rp [apnic-deprecated-tas] remove deprecated apnic trust anchors Jan 9, 2018
rpki Typo (os.pat.join -> os.path.join). Dec 13, 2018
schemas/relaxng Oops, TeX-style "--" numeric ranges in copyright comments are bad fit May 7, 2016
.gitignore ARIN now allows download of their TAL without NDA, so include it. Jan 14, 2017 Step one of adding internal support for RPKI roots to rpkid: split Apr 23, 2016
configure Runtime version dependency for Tornado is 4.2 or higher. Apr 6, 2016 Runtime version dependency for Tornado is 4.2 or higher. Apr 6, 2016 add initial migration for the routeview app. Jul 19, 2016 "Any programmer who fails to comply with the standard naming, formatt… Oct 26, 2015

Dragon Research Labs RPKI Toolkit

This is the "" toolkit developed and maintained primarily by Dragon Research Labs. It's had several other names over the years ("DRL RPKI toolkit", "ISC RPKI toolkit", etc), but it's the same toolkit under the same BSD-style license, now moved to GitHub.


There's a pile of documentation salvaged from the old wiki in the doc/ subdirectory: see the README in that directory for details.

Be warned that the existing documentation is for the "old-trunk" branch, which is not what you want to be using these days (among other reasons, because "old-trunk" depends on obsolete third party packages which are no longer supported by their respective authors). We will update the documentation for the current "master" branch as time and other work permits.


All commits to this repository on or after 2016-08-07 should be GPG-signed.

Binary packages

QuickStart guides for RP and CA on Ubuntu Xenial are here

Setup on other Ubuntu and Debian releases is similar, other than the APT URLs (below).

Binary packages for several Ubuntu and Debian releases are available from

The source packaging scripts for FreeBSD are a bit stale, someday we'll fix that.


From 2006 through 2008, this work was funded by ARIN.

From 2009 through 2016, this work was funded by DHS.

Special thanks to Michael Elkins, who wrote the web GUI and generally served as a second brain and second set of eyeballs on a long list of thorny technical problems.

You can’t perform that action at this time.