Welcome to ...
# # ##### #### ##### ## #
## # # # # # # # # #
# # # # # # # ##### # # # #
# # # ##### # # # ###### #
# ## # # # # # # # #
# # # # #### # # # ######
This system monitors and validates the experimental NRO TAL, see
https://labs.apnic.net/nro-ta/ for more information.
Every few minutes a validation run is launched to analyse over time how
theimposition of constraints based on the 'delegated-nro-latest' files
impact emission of VRPs.
System maintainer: Job Snijders
This archive can be accessed via:
rsync: rsync://nro-tal.rpkiviews.org/data/
HTTPS: https://nro-tal.rpkiviews.org/data/ (today)
Latest unique VRP count: 213767 (... should be 690095?)
latest stdout+stderr log:
# TZ=Etc/UTC rpki-client -cm -t /etc/rpki/nro.tal
May 02 03:12:11 rpki-client: rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: RFC 3779 resource not subset of parent's resources
May 02 03:12:12 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer: RFC 3779 resource not subset of parent's resources
May 02 03:12:12 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer: RFC 3779 resource not subset of parent's resources
May 02 03:12:14 rpki-client: .rrdp/F7EF354526A351ADC35929CDBB4916D9B23091DB047D79B72E1608CF8109E1F6/rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft: seqnum gap detected #4583 -> #4585
May 02 03:12:14 rpki-client: .rrdp/F7EF354526A351ADC35929CDBB4916D9B23091DB047D79B72E1608CF8109E1F6/rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft: seqnum gap detected #45FF -> #4601
May 02 03:12:14 rpki-client: .rrdp/F7EF354526A351ADC35929CDBB4916D9B23091DB047D79B72E1608CF8109E1F6/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft: seqnum gap detected #485D -> #485F
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/FAE9132EBEE311EFA8C67594762E951A.roa: certificate is not yet valid
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/9870DA98AD8511EFAF5F92BE762E951A.roa: certificate is not yet valid
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/C932EC9CFCAB11EEA50FB13D017001B1.roa: certificate has expired
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/23D4257A20FB11F0900F649ADAE4EC9C.roa: certificate is not yet valid
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/DB465DA6B4E311EFA8F972A4762E951A.roa: certificate is not yet valid
May 02 03:12:15 rpki-client: rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/9F17036CB4E311EFA49155A2762E951A.roa: certificate is not yet valid
May 02 03:12:18 rpki-client: rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/06392D96808111EFACB35A67762E951A.roa: certificate is not yet valid
May 02 03:12:23 rpki-client: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml (192.41.192.213): connect: Connection refused
May 02 03:12:23 rpki-client: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml (2001:dc2:1000:8000::2): connect: No route to host
May 02 03:12:23 rpki-client: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml: load from network failed, fallback to rsync
May 02 03:12:25 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer: RFC 3779 resource not subset of parent's resources
May 02 03:12:25 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer: RFC 3779 resource not subset of parent's resources
May 02 03:12:28 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer: RFC 3779 resource not subset of parent's resources
May 02 03:13:26 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft: seqnum gap detected #010D0C9F4328584073A832C154FB8630A43BFE28 -> #010D0C9F4328584073A832C154FB8630A43BFE2A
May 02 03:13:29 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft: seqnum gap detected #010D0C9F432858483B9826A0AA28F3646066A540 -> #010D0C9F432858483B9826A0AA28F3646066A542
May 02 03:13:50 rpki-client: repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer: RFC 3779 resource not subset of parent's resources
May 02 03:15:06 rpki-client: rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/BFA2750976CA07F56A68976B0F01EB862F17C3B3.mft: CRL has expired
May 02 03:15:06 rpki-client: rpki-rps.arin.net/repository/8a848ade8baa579c018c63046aa94533/0/A2110BBC490FA9C5E85F6218D333DCDC5E34811D.mft: CRL has expired
May 02 03:15:08 rpki-client: rpki-rps.arin.net/repository/8a848ade7fb71aa9017fdd9c5dd324c7/0/EB1DD8AA3E2B6864E06379C751DBFFFCC6418350.mft: CRL has expired
May 02 03:15:08 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.mft: CRL has expired
May 02 03:15:09 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/73A8BD732D93790878D7033EC4558AFD0D11F932.mft: CRL has expired
May 02 03:15:09 rpki-client: rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft: CRL has expired
May 02 03:15:09 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer: certificate has expired
May 02 03:15:09 rpki-client: https://oto.wakuwaku.ne.jp/pki/oshirase.xml (160.251.207.65): connect: Connection refused
May 02 03:15:09 rpki-client: https://oto.wakuwaku.ne.jp/pki/oshirase.xml: load from network failed, fallback to rsync
May 02 03:15:09 rpki-client: .rrdp/AE7E883914AEA910AA26082A41E22569CA16F89824801AC3F94722413AD91697/rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft: seqnum gap detected #E8CF -> #E8D4
May 02 03:15:09 openrsync: warning: connect refused: 160.251.207.65, oto.wakuwaku.ne.jp
May 02 03:15:09 openrsync: error: cannot connect to host: oto.wakuwaku.ne.jp
May 02 03:15:09 rpki-client: rsync rsync://oto.wakuwaku.ne.jp/pki failed
May 02 03:15:09 rpki-client: .rsync/oto.wakuwaku.ne.jp/pki: load from network failed, fallback to cache
May 02 03:15:09 rpki-client: https://repo.kagl.me/rpki/notification.xml: notification file not modified since Wed 30 Apr 2025 10:14:59 +0000
May 02 03:15:11 rpki-client: oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft: no valid manifest available
May 02 03:15:11 rpki-client: repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft: CRL has expired
May 02 03:15:14 rpki-client: cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer: certificate has expired
May 02 03:15:14 rpki-client: rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/5/C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2.mft: no valid manifest available
May 02 03:15:14 rpki-client: rpki.miralium.net: no address associated with name
May 02 03:15:14 rpki-client: https://rpki.miralium.net/rrdp/notification.xml: load from network failed, fallback to rsync
May 02 03:15:14 openrsync: error: getaddrinfo: rpki.miralium.net: no address associated with name
May 02 03:15:14 rpki-client: rsync rsync://rpki.miralium.net/repo failed
May 02 03:15:14 rpki-client: .rsync/rpki.miralium.net/repo: load from network failed, fallback to cache
May 02 03:15:14 rpki-client: rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.mft: no valid manifest available
May 02 03:15:15 rpki-client: https://subrepo.wildtky.com/rrdp/notification.xml: notification file not modified since Thu 24 Apr 2025 14:16:39 +0000
May 02 03:15:15 rpki-client: subrepo.wildtky.com/repo/SubCAJan2025/0/A0D77953B7619F183E3407CF1E95764F0A641BDD.mft: CRL has expired
May 02 03:15:29 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml (23.156.104.131): connect timeout
May 02 03:15:29 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml: load from network failed, fallback to rsync
May 02 03:15:44 openrsync: warning: connect timeout: 23.156.104.131, krill.ca-bc-01.ssmidge.xyz
May 02 03:15:44 openrsync: error: cannot connect to host: krill.ca-bc-01.ssmidge.xyz
May 02 03:15:44 rpki-client: rsync rsync://krill.ca-bc-01.ssmidge.xyz/repo failed
May 02 03:15:44 rpki-client: .rsync/krill.ca-bc-01.ssmidge.xyz/repo: load from network failed, fallback to cache
May 02 03:15:44 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft: no valid manifest available
May 02 03:15:44 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft: no valid manifest available
May 02 03:16:00 Processing time 238 seconds (111 seconds user, 113 seconds system)
May 02 03:16:00 Skiplist entries: 0
May 02 03:16:00 Route Origin Authorizations: 186396 (7 failed parse, 0 invalid)
May 02 03:16:00 AS Provider Attestations: 14 (0 failed parse, 0 invalid)
May 02 03:16:00 BGPsec Router Certificates: 0
May 02 03:16:00 Certificates: 8171 (9 invalid, 13 non-functional)
May 02 03:16:00 Trust Anchor Locators: 1 (0 invalid)
May 02 03:16:00 Manifests: 8162 (13 failed parse, 6 seqnum gaps)
May 02 03:16:00 Certificate revocation lists: 8149
May 02 03:16:00 Ghostbuster records: 0
May 02 03:16:00 Trust Anchor Keys: 0
May 02 03:16:00 Repositories: 53
May 02 03:16:00 New files moved into validated cache: 920
May 02 03:16:00 Cleanup: removed 14 files, 1189 directories
May 02 03:16:00 Repository cleanup: kept 204695 and removed 6816 superfluous files
May 02 03:16:00 VRP Entries: 225203 (213767 unique)
May 02 03:16:00 VAP Entries: 14 (14 unique, 0 overflowed)
May 02 03:16:00 VSP Entries: 0 (0 unique)