cloudflare/isbgpsafeyet.com

ISPs manually blocking routes to https://invalid.rpki.cloudflare.com instead of implementing RPKI

Closed this issue · 3 comments

Bad routes should be rotated frequently to mitigate ISPs attempting to cover this up. A&A are doing this already.

lspgn commented

Looks like TekSavvy (CA) does it too. They blackholed the packets going to the IPs (not even rejecting the route).

lspgn commented

AS4760 Netvigator Hong Kong may have dropped the prefix too.

lspgn commented

MyRepublic is likely hijacking the prefix and null route it per RIPE Atlas probes

Screen Shot 2020-04-22 at 3 54 20 PM