The CURE RPKI toolkit is a collection of RPKI related tooling to support offensive research into RPKI software security and deployments. The toolkit consists of multiple different repositories that implement different functionality for security research, including a fuzzer, an RPKI publication library and an ASN.1 parsing library.
Warning
All tools are offered on a best-effort basis. As part of active research, tools may break unexpectedly and are not intended for production systems.
| Repository | Description |
|---|---|
cure_asn1 |
Fast, efficient ASN.1 parsing and encoding library, optimized for fuzzing speed |
cure_coverage |
Continuous coverage sampling library for instrumented binaries |
cure_pp |
RPKI publication library for creating repositories and signing objects - temporarily unavailable pending vulnerability disclosure |
cure_web |
Graphical ASN.1 editor built on cure_asn1 |
cat |
Coverage-guided fuzzer for RPKI relying party implementations — temporarily unavailable pending vulnerability disclosure |
CURE has contributed to peer-reviewed research at top security venues:
- [S&P 2026] Batch me if you can: Coverage-guided RPKI Fuzzing at Scale — Not yet published
- [NDSS 2026] Pruning the Tree: Rethinking RPKI Architecture From The Ground Up
- [CCS 2025] Stopping Production Testing: A Graphical RPKI Test-Suite
- [CCS 2025] Poster: We must talk about RPKI Repositories
- [NDSS 2024] The CURE To Vulnerabilities in RPKI Validation
- [CCS 2024] Poster: From Fort to Foe: The Threat of RCE in RPKI
CURE was developed with support from:
- German Federal Ministry of Education and Research
- Hessen State Ministry for Higher Education, Research and Arts
- German National Research Center for Applied Cybersecurity (ATHENE)
- Deutsche Forschungsgemeinschaft (DFG, German Research Foundation)
All CURE projects are released under the GNU General Public License v3.0. See LICENSE for details.
Made with ❤️ for RPKI