Is BGP Safe Yet? No. Test Your ISP

BGP governs global internet routing but remains vulnerable to hijacking and disruptions. Implementing the RPKI certification system is the essential step for ISPs to ensure a secure and stable connection.
Border Gateway Protocol (BGP) is the postal service of the Internet. It’s responsible for looking at all of the available paths that data could travel and picking the best route.
Unfortunately, it isn’t secure, and there have been some major Internet disruptions as a result. But fortunately there is a way to make it secure.
ISPs and other major Internet players (Sprint and others) would need to implement a certification system, called RPKI.
| Name | Type | Details | Status | ASN | |---|---|---|---|---| | Lumen | transit | signed + filtering | safe | 3356 | | Arelion (formerly Telia) | transit | signed + filtering | safe | 1299 | | Cogent | transit | signed + filtering | safe | 174 | | NTT | transit | signed + filtering | safe | 2914 | | Sparkle | transit | signed + filtering | safe | 6762 | | Hurricane Electric | transit | signed + filtering | safe | 6939 | | GTT | transit | signed + filtering | safe | 3257 | | TATA | transit | signed + filtering | safe | 6453 | | Zayo | transit | signed + filtering | safe | 6461 | | PCCW | transit | signed + filtering | safe | 3491 | | Vodafone | transit | signed + filtering | safe | 1273 | | RETN | transit | partially signed + filtering | safe | 9002 | | Orange | transit | signed + filtering | safe | 5511 | | Telstra International | transit | signed + filtering | safe | 4637 | | Telefonica/Telxius | transit | signed + filtering | safe | 12956 | | Comcast | ISP | signed + filtering | safe | 7922 | | AT&T | ISP | signed + filtering | safe | 7018 | | Verizon | ISP | signed + filtering | safe | 701 | | Liberty Global | transit | signed + filtering | safe | 6830 | | Deutsche Telekom | ISP | signed + filtering | safe | 3320 | | KPN | transit | signed + filtering | safe | 286 | | Vocus Communications | transit | signed + filtering | safe | 4826 | | Core-Backbone | transit | signed + filtering | safe | 33891 | | Swisscom | ISP | signed + filtering | safe | 3303 | | Cox Communications | ISP | signed + filtering | safe | 22773 | | G8 | transit | signed + filtering | safe | 28329 | | Telstra | transit | signed + filtering | safe | 1221 | | Inter.link | transit | signed + filtering | safe | 5405 | | Orange Polska | ISP | signed + filtering | safe | 5617 | | T-Mobile | transit | partially signed + filtering | safe | 1239 | | Digi Romania | ISP | signed + filtering | safe | 8708 | | GEANT | ISP | signed + filtering | safe | 20965 | | Telekom Malaysia Berhad | ISP | signed + filtering | safe | 4788 | | FPT Telecom | ISP | signed + filtering | safe | 18403 | | Cloudflare | cloud | signed + filtering | safe | 13335 | | Microsoft | cloud | signed + filtering | safe | 8075 | | Amazon | cloud | signed + filtering | safe | 16509 | | Netflix | cloud | signed + filtering | safe | 2906 |
Source: Hacker News












