BGPKIT

@bgpkit

Open-source #BGP data processing toolkit. Built with ❤️ by @heymingwei @bgpkit@infosec.exchange

San Diego, CA bgpkit.com Joined September 2021

1 Following 1.4K Followers 365 Posts

Latest posts 5

Pinned post

BGPKIT @bgpkit Jul 11

🚀 bgpkit-parser 0.18.0 released: improved raw BGP attribute data preservation, better RIS Live raw message parsing support, and typed parsers for four more recent RFCs.

bgpkit.com/blog/bgpkit-pa…

bgpkit.com bgpkit-parser 0.18.0 Release - BGPKIT bgpkit-parser 0.18.0 preserves more raw BGP wire data, parses RIS Live raw messages, and adds typed parsers for AIGP, SFP, BFD Discriminator, BGP Prefix-SID, and BIER attributes.

BGPKIT @bgpkit 6d

AS402425 and AS198474 announced 13 /24s of Chinese carrier space, then appeared in AS paths above carrier origins: 1,294 prefixes on August 1, last sampled October 14. Reconstructed from public MRT data: buff.ly/RiTw1CA

bgpkit.com A 2026 BGP Hijack Campaign Against Chinese ISPs: Forged Origins, Then Forged Paths - BGPKIT Thirteen /24s taken from China Mobile, China Unicom and China Telecom space in June, then four months of forged AS paths that left the origin untouched. Reconstructed from public MRT archives, with a...

BGPKIT @bgpkit Oct 24

One BGP UPDATE message can withdraw 1,133 prefixes, where overall average is 2.87. We read a week of public MRT updates (20.8B route entries) to see how routers actually batch their routes before sending to collectors. #BGP buff.ly/3Yay4zN

bgpkit.com One message, a thousand withdrawals - BGPKIT Seven days of public BGP update files, 20.8 billion route entries in 7.25 billion messages, and the two shapes hiding inside the average of 2.87 prefixes per UPDATE.

BGPKIT @bgpkit Sep 10

bgpkit-parser v0.22.0 is out: --format text output, --hex record dumps, RIS Live link-local next hops no longer drop UPDATEs, scope-resolved BGP-LS next hops. Breaking: MSRV 1.88, Announcement::next_hop is a String.
buff.ly/jxl8S8T

github.com Release v0.22.0 · bgpkit/bgpkit-parser Breaking changes MSRV raised to Rust 1.88 (#338): rust-version in Cargo.toml is now 1.88.0. The idna_adapter dev-dependency pin is removed as it is no longer needed. Announcement::next_hop is now ...

BGPKIT @bgpkit Sep 1

We've taken a closer look at this event. Detailed report available in this blog post.
bgpkit.com/blog/virtualiz…

Doug Madory (also on Bluesky) Verified account @DougMadory Aug 31

Taking a look at this BGP hijack of 162.55.80.0/24 that targeted Virtualizor in recent days.

Hijackers forged the origin to make the route RPKI-valid:

... 6204 62390 24940 (hijack AS path)
... 24940 (legit AS path)

View quoted post on X