All about RPKI

Is BGP safe yet?

 https://isbgpsafeyet.com/

BGP | Datasets | Networks

"Is BGP safe yet?" is an effort by Cloudflare to track the deployment of RPKI filtering accross different ISPs. They provide a tester on the website with which each user can test if the current ISP is filtering RPKI invalid announcements. The website includes a list of networks and if and how they use RPKI (signing and/or filtering).

More details for this project can be found in Cloudflare's blog or on the GitHub project.


NIST RPKI Monitor

 https://rpki-monitor.antd.nist.gov/

BGP | Datasets

The NIST RPKI Monitor shows different statistics about RPKI adoption and about the validation status. It shows the number of validating prefixes, their history, the autonomous systems with the most VALID and INVALID prefixes and how validation changes over time.


ROV Deployment Monitor

 https://rov.rpki.net/

BGP | Datasets | Networks

The Route Origin Validation (ROV) Deployment Monitor measures how many AS have deployed ROV. It uses PEERING for BGP annoucements and uses BGP monitors to see in which ASs the wrong announcements are filtered. A blogpost at APNIC describes it in more detail.


RPKI Browsers

Datasets | Networks | Tools

These websites allow you to browser the valid RPKI announcements. They show which address ranges are covered by RPKI and who the issuing authority is.


RPKI Tester

 https://www.ripe.net/s/rpki-test

Networks | Tools

Website, which tests, if your provider filters invalid announcements using RPKI.


Ziggy: the RPKI Wayback Machine

 https://github.com/NLnetLabs/ziggy

Networks | Tools

Ziggy is a tool to inspect the RPKI ecosystem at arbitrary points in the past. It is developed by NlNetLabs. More details abouut the ziggy tool can be found in the announcement blogpost.