BGPKIT - Open-Source BGP Data Toolkit - BGPKIT

Step 1

Discover files (Broker)

Select a time window, collectors, and dump type to get deterministic URLs.

ts_start / ts_end → URL list

Step 2

Parse data (Parser)

Stream parse MRT/BGP/BMP and apply filters early to reduce CPU and output.

BgpElem iterator + filters

Step 3

Investigate (Monocle)

Use a single CLI for search, parse, inspect, and RPKI validation with local caching.

inspect / search / rpki

use bgpkit_broker::BgpkitBroker;
use bgpkit_parser::BgpkitParser;

// Find UPDATE files within a time window, then parse them.
// Broker timestamps accept RFC3339, unix, or pure dates.
let broker = BgpkitBroker::new()
    .ts_start("2024-01-01T00:00:00Z")
    .ts_end("2024-01-01T01:00:00Z")
    .data_type("updates");

// Parse each matching file and print elements originated from AS13335.
for item in broker.into_iter().take(3) {
    let parser = BgpkitParser::new(&item.url)
        .unwrap()
        .add_filter("origin_asn", "13335").unwrap();

    for elem in parser {
        println!("{}", elem);
    }
}

import bgpkit

# Parse an MRT file with filters (remote URL)
parser = bgpkit.Parser(
    url="https://spaces.bgpkit.org/parser/update-example",
    filters={"peer_ips": "185.1.8.65, 2001:7f8:73:0:3:fa4:0:1"},
)

count = 0
for elem in parser:
  count += 1
  print(elem)

assert count == 4227

# Install (macOS Homebrew)
brew install monocle

# Search for announcements for a prefix during a time window
monocle search -t 2024-01-01T00:00:00Z -T 2024-01-01T00:01:00Z   -c rrc00 -p 1.1.1.0/24 -m a

# Parse a single (remote) MRT file with filters
monocle parse https://data.ris.ripe.net/rrc00/2024.01/updates.20240101.0000.gz   -p 1.1.1.0/24 -m a | head -5

# Unified AS / prefix inspection
monocle inspect 13335
monocle inspect 1.1.1.0/24

# RPKI validation (prefix + ASN)
monocle rpki validate 1.1.1.0/24 13335

# Help
monocle --help

Multiple Formats

Supports MRT, BGP, BMP messages. Handles both local and remote files with automatic decompression.

Powerful Filtering

Built-in filter system for prefix, ASN, peer, time range, and AS path filtering.

Real-time Streaming

Support for real-time data streams including RIS-Live and BMP/OpenBMP messages.

Real-time Indexing

BGP data files are indexed in near real-time with less than 2 minutes delay.

Multiple Data Sources

Indexes data from RouteViews and RIPE RIS with 70+ collectors and 1000+ full-feed peers.

Self-hostable

Deploy your own broker instance with Docker or CLI for custom data sources and privacy.

All-in-One Tool

Parse, search, analyze - everything you need for BGP data investigation in one command.

RPKI Integration

Built-in RPKI validation, ROA parsing, and prefix origin validation using Cloudflare's validator.

Rich Utilities

Time conversion, country lookups, AS information, and IP address details - all built-in.