Following this thread closely. We run a small WISP in Croatia and our upstream is in Germany. If filtering starts early we need to know.
Can someone confirm: does the mandate require filtering at IX only, or also on private peering and transit? The announcement text is unclear to me.
The announcement says "at all IXes" explicitly. Private peering and transit are not mandated. But in practice, the big German carriers already filter on transit where they can. It's cheaper to run one policy everywhere than to maintain exceptions.
If your upstream is a tier-1 with a global RPKI policy, you are filtered already or soon will be, IX mandate or not.
Which networks? I need names to check if my prefixes are affected. RIPE stats show adoption but not who is actually filtering.
Also, is there a public list of ASNs that drop RPKI invalids? I found bgp.tools has some data but it seems incomplete.
No authoritative list. Cloudflare publishes their policy. NTT and GTT have blog posts about theirs. The rest you infer from route collector data or ask directly.
For your own prefixes, use https://rpki.cloudflare.com and the RIPE RPKI dashboard. If both say valid and you still see issues, it's likely a path problem or an unannounced filter, not RPKI.
I keep a spreadsheet of upstreams and their known policies. Happy to share template if anyone wants.
