http://en.wikipedia.org/wiki/Radioisotope_thermoelectric_generator#Safety wrote:
<<A radioisotope thermoelectric generator (RTG, RITEG) is an electrical generator which obtains its power from radioactive decay. In such a device, the heat released by the decay of a suitable radioactive material is converted into electricity by the Seebeck effect using an array of thermocouples. RTGs can be considered as a type of battery and have been used as power sources in satellites, space probes and unmanned remote facilities, such as a series of lighthouses built by the former Soviet Union inside the Arctic Circle. RTGs are usually the most desirable power source for unmanned or unmaintained situations needing a few hundred watts or less of power for durations too long for fuel cells, batteries and generators to provide economically, and in places where solar cells are not viable.
RTGs may pose a minimal risk of radioactive contamination: if the container holding the fuel leaks, the radioactive material may contaminate the environment.
For spacecraft, the main concern is that if an accident were to occur during launch or a subsequent passage of a spacecraft close to Earth, harmful material could be released into the atmosphere; and their use in spacecraft and elsewhere has attracted controversy. However, this event is not considered likely with current RTG cask designs. For instance, the environmental impact study for the Cassini-Huygens probe launched in 1997 estimated the probability of contamination accidents at various stages in the mission. The probability of an accident occurring which caused radioactive release from one or more of its 3 RTGs (or from its 129 radioisotope heater units) during the first 3.5 minutes following launch was estimated at 1 in 1,400; the chances of a release later in the ascent into orbit were 1 in 476; after that the likelihood of an accidental release fell off sharply to less than 1 in a million. If an accident which had the potential to cause contamination occurred during the launch phases (such as the spacecraft failing to reach orbit), the probability of contamination actually being caused by the RTGs was estimated at about 1 in 10. In any event, the launch was successful and Cassini-Huygens reached Saturn.
The plutonium 238 used in these RTGs has a half-life of 87.74 years, in contrast to the 24,110 year half-life of plutonium 239 used in nuclear weapons and reactors. A consequence of the shorter half life is that plutonium 238 is about 275 times more radioactive than plutonium 239 (i.e. 17.3 Ci/g compared to 0.063 Ci/g). For instance, 3.6 kg of plutonium 238 undergoes the same number of radioactive decays per second as 1 tonne of plutonium 239. Since the morbidity of the two isotopes in terms of absorbed radioactivity is almost exactly the same, plutonium 238 is around 275 times more toxic by weight than plutonium 239.
The alpha radiation emitted by either isotope will not penetrate the skin, but it can irradiate internal organs if plutonium is inhaled or ingested. Particularly at risk is the skeleton, the surface of which is likely to absorb the isotope, and the liver, where the isotope will collect and become concentrated.
There have been six known accidents involving RTG-powered spacecraft. The first one was a launch failure on 21 April 1964 in which the U.S. Transit-5BN-3 navigation satellite failed to achieve orbit and burnt up on re-entry north of Madagascar. Its 17,000 Ci (630 TBq) plutonium metal fuel was injected into the atmosphere over the Southern Hemisphere where it burnt up, and traces of plutonium 238 were detected in the area a few months later. The second was the Nimbus B-1 weather satellite whose launch vehicle was deliberately destroyed shortly after launch on 21 May 1968 because of erratic trajectory. Launched from the Vandenberg Air Force Base, its SNAP-19 RTG containing relatively inert plutonium dioxide was recovered intact from the seabed in the Santa Barbara Channel five months later and no environmental contamination was detected.
Two more were failures of Soviet Cosmos missions containing RTG-powered lunar rovers in 1969, both of which released radioactivity as they burnt up. There were also five failures involving Soviet or Russian spacecraft which were carrying nuclear reactors rather than RTGs between 1973 and 1993 (see RORSAT).
The failure of the Apollo 13 mission in April 1970 meant that the Lunar Module reentered the atmosphere carrying an RTG and burnt up over Fiji. It carried a SNAP-27 RTG containing 44,500 curies (1,650 TBq) of plutonium dioxide which survived reentry into the Earth's atmosphere intact, as it was designed to do, the trajectory being arranged so that it would plunge into 6-9 kilometers of water in the Tonga trench in the Pacific Ocean. The absence of plutonium 238 contamination in atmospheric and seawater sampling confirmed the assumption that the cask is intact on the seabed. The cask is expected to contain the fuel for at least 10 half-lives (i.e. 870 years). The US Department of Energy has conducted seawater tests and determined that the graphite casing, which was designed to withstand reentry, is stable and no release of plutonium should occur. Subsequent investigations have found no increase in the natural background radiation in the area. The Apollo 13 accident represents an extreme scenario due to the high re-entry velocities of the craft returning from cislunar space. This accident has served to validate the design of later-generation RTGs as highly safe.
To minimize the risk of the radioactive material being released, the fuel is stored in individual modular units with their own heat shielding. They are surrounded by a layer of iridium metal and encased in high-strength graphite blocks. These two materials are corrosion and heat-resistant. Surrounding the graphite blocks is an aeroshell, designed to protect the entire assembly against the heat of reentering the earth's atmosphere. The plutonium fuel is also stored in a ceramic form that is heat-resistant, minimising the risk of vaporization and aerosolization. The ceramic is also highly insoluble.
The most recent accident involving a spacecraft RTG was the failure of the Russian Mars 96 probe launch on 16 November 1996. The two RTGs onboard carried in total 200 g of plutonium and are assumed to have survived reentry (as they were designed to do). They are thought to now lie somewhere in a northeast-southwest running oval 320 km long by 80 km wide which is centred 32 km east of Iquique, Chile.
Many Beta-M RTGs produced by the Soviet Union to power lighthouses and beacons have become orphaned sources of radiation. Several of these units have been illegally dismantled for scrap metal resulting in the complete exposure of the Sr-90 source, fallen into the ocean, or have defective shielding due to poor design or physical damage. The US Department of Defense cooperative threat reduction program has expressed concern that material from the Beta-M RTGs can be used by terrorists to construct a dirty bomb.>>