Welcome to ...
# # ##### #### ##### ## #
## # # # # # # # # #
# # # # # # # ##### # # # #
# # # ##### # # # ###### #
# ## # # # # # # # #
# # # # #### # # # ######
This system monitors and validates the experimental NRO TAL, see
https://labs.apnic.net/nro-ta/ for more information.
Every few minutes a validation run is launched to analyse over time how
theimposition of constraints based on the 'delegated-nro-latest' files
impact emission of VRPs.
System maintainer: Job Snijders
This archive can be accessed via:
rsync: rsync://nro-tal.rpkiviews.org/data/
HTTPS: https://nro-tal.rpkiviews.org/data/ (today)
Latest unique VRP count: 259798 (... should be 780087?)
latest stdout+stderr log:
# TZ=Etc/UTC rpki-client -cm -t /etc/rpki/nro.tal
Dec 06 01:57:11 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer: RFC 3779 resource not subset of parent's resources
Dec 06 01:57:11 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer: RFC 3779 resource not subset of parent's resources
Dec 06 01:57:14 rpki-client: rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: RFC 3779 resource not subset of parent's resources
Dec 06 01:57:14 rpki-client: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml: notification file not modified since Tue 02 Dec 2025 08:57:33 +0000
Dec 06 01:57:17 rpki-client: rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/FAE9132EBEE311EFA8C67594762E951A.roa: certificate is not yet valid
Dec 06 01:57:17 rpki-client: rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/06392D96808111EFACB35A67762E951A.roa: certificate is not yet valid
Dec 06 01:57:18 rpki-client: rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/92399C0CCFB511F0886853A2DAE4EC9C.roa: certificate is not yet valid
Dec 06 01:57:18 rpki-client: rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/DBC979D8CFB411F0BD144F9CDAE4EC9C.roa: certificate is not yet valid
Dec 06 01:57:20 rpki-client: rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/D58D35F0CFB411F08C034B9CDAE4EC9C.roa: certificate is not yet valid
Dec 06 01:57:20 rpki-client: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9E32E1A910811F0B7F8F2B7DAE4EC9C.roa: certificate has expired
Dec 06 01:57:21 rpki-client: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A59FCAD0B16711F081B7E6D2DAE4EC9C.roa: certificate revoked
Dec 06 01:57:22 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft: seqnum gap detected #010D0C9F43285846D048F337CBBB4BE0D492F1B0 -> #010D0C9F43285846D048F337CBBB4BE0D492F1B2
Dec 06 01:57:23 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft: seqnum gap detected #010D0C9F4328584073A835947EC0A64109D517FB -> #010D0C9F4328584073A835947EC0A64109D517FD
Dec 06 01:57:26 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer: RFC 3779 resource not subset of parent's resources
Dec 06 01:57:40 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft: seqnum gap detected #010D0C9F432858474714BFB4E60C762DE243A760 -> #010D0C9F432858474714BFB4E60C762DE243A762
Dec 06 02:01:16 rpki-client: rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft: CRL has expired
Dec 06 02:01:16 rpki-client: rpki-rps.arin.net/repository/8a848ade8baa579c018c63046aa94533/0/A2110BBC490FA9C5E85F6218D333DCDC5E34811D.mft: CRL has expired
Dec 06 02:01:20 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (23.140.52.8): connect timeout
Dec 06 02:01:20 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (2602:f633:0:30::10): connect: No route to host
Dec 06 02:01:20 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml: load from network failed, fallback to rsync
Dec 06 02:01:32 rpki-client: https://rpki.avsisp.com/rrdp/notification.xml (31.57.56.5): TLS handshake: certificate verification failed: certificate has expired
Dec 06 02:01:32 rpki-client: https://rpki.avsisp.com/rrdp/notification.xml: load from network failed, fallback to rsync
Dec 06 02:01:35 openrsync: warning: connect timeout: 23.140.52.8, rpki-repo.canops.org
Dec 06 02:01:35 openrsync: warning: connect refused: 2602:f633:0:30::10, rpki-repo.canops.org
Dec 06 02:01:35 openrsync: error: cannot connect to host: rpki-repo.canops.org
Dec 06 02:01:35 rpki-client: rsync rsync://rpki-repo.canops.org/repo failed
Dec 06 02:01:35 rpki-client: .rsync/rpki-repo.canops.org/repo: load from network failed, fallback to cache
Dec 06 02:01:53 rpki-client: https://rpki.leitecastro.com/notification.xml (23.147.168.5): connect timeout
Dec 06 02:01:53 rpki-client: https://rpki.leitecastro.com/notification.xml (2602:faa5:130::5): connect: No route to host
Dec 06 02:01:53 rpki-client: https://rpki.leitecastro.com/notification.xml: load from network failed, fallback to rsync
Dec 06 02:02:10 openrsync: warning: connect timeout: 23.147.168.5, rpki.leitecastro.com
Dec 06 02:02:10 openrsync: warning: connect refused: 2602:faa5:130::5, rpki.leitecastro.com
Dec 06 02:02:10 openrsync: error: cannot connect to host: rpki.leitecastro.com
Dec 06 02:02:10 rpki-client: rsync rsync://rpki.leitecastro.com/repo failed
Dec 06 02:02:10 rpki-client: .rsync/rpki.leitecastro.com/repo: load from network failed, fallback to cache
Dec 06 02:02:55 rpki-client: https://repo.kagl.me/rpki/notification.xml: notification file not modified since Thu 04 Dec 2025 08:00:28 +0000
Dec 06 02:02:56 rpki-client: rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.mft: CRL has expired
Dec 06 02:02:56 rpki-client: rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/BFA2750976CA07F56A68976B0F01EB862F17C3B3.mft: CRL has expired
Dec 06 02:02:56 rpki-client: krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer: certificate has expired
Dec 06 02:02:56 rpki-client: rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/1/2AAC42AB07A1BF97E63560510DCB7B28CE11B9EC.mft: no valid manifest available
Dec 06 02:02:56 rpki-client: repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer: RFC 3779 resource not subset of parent's resources
Dec 06 02:02:56 rpki-client: rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft: CRL has expired
Dec 06 02:02:56 rpki-client: rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft: CRL has expired
Dec 06 02:02:56 rpki-client: rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft: CRL has expired
Dec 06 02:02:57 rpki-client: .rrdp/9CE612B2ADF6208E47677FDAA15E3B53B99E7EF3BB8DB4515719C10CE0589657/rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft: seqnum gap detected #496E -> #4976
Dec 06 02:02:57 rpki-client: rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft: no valid manifest available
Dec 06 02:02:57 rpki-client: rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft: CRL has expired
Dec 06 02:02:57 rpki-client: rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft: CRL has expired
Dec 06 02:02:58 rpki-client: .rrdp/0FFFC93A2D580B4C16221C2F33E2D863CE8768BC69083C762CC62A53E4EB800F/rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft: seqnum gap detected #6541 -> #6555
Dec 06 02:02:59 rpki-client: rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft: no valid manifest available
Dec 06 02:02:59 rpki-client: rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/7DF55DC7DAC41CA7453595CB9A79AB7FE6C83531.mft: CRL has expired
Dec 06 02:02:59 rpki-client: .rrdp/AE7E883914AEA910AA26082A41E22569CA16F89824801AC3F94722413AD91697/rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft: seqnum gap detected #012F09 -> #012F0D
Dec 06 02:02:59 rpki-client: repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft: CRL has expired
Dec 06 02:02:59 rpki-client: rpki-rps.arin.net/repository/8a848ade7fb71aa9017fdd9c5dd324c7/0/EB1DD8AA3E2B6864E06379C751DBFFFCC6418350.mft: CRL has expired
Dec 06 02:02:59 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml (170.39.49.51): connect: Connection refused
Dec 06 02:02:59 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml: load from network failed, fallback to rsync
Dec 06 02:03:00 rpki-client: cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer: certificate has expired
Dec 06 02:03:00 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer: certificate has expired
Dec 06 02:03:14 openrsync: warning: connect timeout: 170.39.49.51, krill.ca-bc-01.ssmidge.xyz
Dec 06 02:03:14 openrsync: error: cannot connect to host: krill.ca-bc-01.ssmidge.xyz
Dec 06 02:03:14 rpki-client: rsync rsync://krill.ca-bc-01.ssmidge.xyz/repo failed
Dec 06 02:03:14 rpki-client: .rsync/krill.ca-bc-01.ssmidge.xyz/repo: load from network failed, fallback to cache
Dec 06 02:03:14 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft: unable to get certificate CRL
Dec 06 02:03:14 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft: no valid manifest available
Dec 06 02:03:37 Processing time 393 seconds (223 seconds user, 467 seconds system)
Dec 06 02:03:37 Skiplist entries: 0
Dec 06 02:03:37 CCR manifest state hash: UqxELbYQZQn2V+gKRhKD4fOoCodv3hYZ4PaSgx621ak=
Dec 06 02:03:37 CCR ROA payloads hash: YITtpudpQjU/MVM0+vMEvVOQgrynzaLAdvkbmHxSkLw=
Dec 06 02:03:37 CCR ASPA payloads hash: tmwAoZ2kHyQMsN3q4PQPlrI4Y4SkzuvTPxGJ/o2yR+o=
Dec 06 02:03:37 Route Origin Authorizations: 216875 (7 failed parse, 0 invalid)
Dec 06 02:03:37 AS Provider Attestations: 26 (0 failed parse, 0 invalid)
Dec 06 02:03:37 BGPsec Router Certificates: 0
Dec 06 02:03:37 Certificates: 9445 (8 invalid, 17 non-functional)
Dec 06 02:03:37 Trust Anchor Locators: 1 (0 invalid)
Dec 06 02:03:37 Manifests: 9437 (17 failed parse, 6 seqnum gaps)
Dec 06 02:03:37 Certificate revocation lists: 9420
Dec 06 02:03:37 Ghostbuster records: 0
Dec 06 02:03:37 Trust Anchor Keys: 0
Dec 06 02:03:37 Repositories: 57
Dec 06 02:03:37 New files moved into validated cache: 1268
Dec 06 02:03:37 Cleanup: removed 34 files, 679 directories
Dec 06 02:03:37 Repository cleanup: kept 251729 and removed 26 superfluous files
Dec 06 02:03:37 VRP Entries: 264511 (259798 unique)
Dec 06 02:03:37 VAP Entries: 26 (26 unique, 0 overflowed)
Dec 06 02:03:37 VSP Entries: 0 (0 unique)