Welcome to ...
# # ##### #### ##### ## #
## # # # # # # # # #
# # # # # # # ##### # # # #
# # # ##### # # # ###### #
# ## # # # # # # # #
# # # # #### # # # ######
This system monitors and validates the experimental NRO TAL, see
https://labs.apnic.net/nro-ta/ for more information.
Every few minutes a validation run is launched to analyse over time how
the imposition of constraints based on the 'delegated-nro-latest' files
impact emission of VRPs.
System maintainer: Job Snijders
This archive can be accessed via:
rsync: rsync://nro-tal.rpkiviews.org/data/
HTTPS: https://nro-tal.rpkiviews.org/data/ (today)
Latest unique VRP count: 276212 (... should be 840248?)
latest stdout+stderr log:
# TZ=Etc/UTC rpki-client -cm -t /etc/rpki/nro.tal
Apr 18 08:45:11 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer: RFC 3779 resource not subset of parent's resources
Apr 18 08:45:11 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer: RFC 3779 resource not subset of parent's resources
Apr 18 08:45:24 rpki-client: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E50E15A1D2411F198E34EB6DAE4EC9C.roa: certificate has expired
Apr 18 08:45:25 rpki-client: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AB035B41D2211F1943973A9DAE4EC9C.roa: certificate has expired
Apr 18 08:45:26 rpki-client: rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: RFC 3779 resource not subset of parent's resources
Apr 18 08:45:32 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer: RFC 3779 resource not subset of parent's resources
Apr 18 08:45:39 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft: seqnum gap detected #010D0C9F43285849C65E6FF5914A5466344A8867 -> #010D0C9F43285849C65E6FF5914A5466344A8869
Apr 18 08:49:36 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (23.140.52.8): connect: Connection refused
Apr 18 08:49:36 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (2602:f633:0:30::10): connect: No route to host
Apr 18 08:49:36 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 18 08:49:36 openrsync: warning: connect refused: 23.140.52.8, rpki-repo.canops.org
Apr 18 08:49:36 openrsync: warning: connect refused: 2602:f633:0:30::10, rpki-repo.canops.org
Apr 18 08:49:36 openrsync: error: cannot connect to host: rpki-repo.canops.org
Apr 18 08:49:36 rpki-client: rsync rsync://rpki-repo.canops.org/repo failed
Apr 18 08:49:36 rpki-client: .rsync/rpki-repo.canops.org/repo: load from network failed, fallback to cache
Apr 18 08:49:40 rpki-client: https://rrdp.rp.ki/notification.xml (44.222.21.1): connect: Connection refused
Apr 18 08:49:40 rpki-client: https://rrdp.rp.ki/notification.xml (2600:1f18:13eb:bc00:dd1f:445e:e92d:8911): connect: No route to host
Apr 18 08:49:40 rpki-client: https://rrdp.rp.ki/notification.xml: load from network failed, fallback to rsync
Apr 18 08:49:43 rpki-client: https://rpki.pudu.be/rrdp/notification.xml (64.187.208.51): TLS handshake: certificate verification failed: certificate has expired
Apr 18 08:49:43 rpki-client: https://rpki.pudu.be/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 18 08:49:46 rpki-client: https://repodepot.wildtky.com/rrdp/notification.xml (23.180.200.225): connect timeout
Apr 18 08:49:48 rpki-client: https://repodepot.wildtky.com/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 18 08:50:03 openrsync: warning: connect timeout: 23.180.200.225, repodepot.wildtky.com
Apr 18 08:50:03 openrsync: error: cannot connect to host: repodepot.wildtky.com
Apr 18 08:50:03 rpki-client: rsync rsync://repodepot.wildtky.com/repo failed
Apr 18 08:50:03 rpki-client: .rsync/repodepot.wildtky.com/repo: load from network failed, fallback to cache
Apr 18 08:50:35 rpki-client: https://repo.kagl.me/rpki/notification.xml (104.37.40.237): connect timeout
Apr 18 08:50:35 rpki-client: https://repo.kagl.me/rpki/notification.xml: load from network failed, fallback to rsync
Apr 18 08:50:36 rpki-client: https://rpki.leitecastro.com/notification.xml (23.147.168.5): connect timeout
Apr 18 08:50:36 rpki-client: https://rpki.leitecastro.com/notification.xml (2602:faa5:130::5): connect: No route to host
Apr 18 08:50:36 rpki-client: https://rpki.leitecastro.com/notification.xml: load from network failed, fallback to rsync
Apr 18 08:50:50 openrsync: warning: connect timeout: 104.37.40.237, repo.kagl.me
Apr 18 08:50:50 openrsync: error: cannot connect to host: repo.kagl.me
Apr 18 08:50:50 rpki-client: rsync rsync://repo.kagl.me/rpki failed
Apr 18 08:50:50 rpki-client: .rsync/repo.kagl.me/rpki: load from network failed, fallback to cache
Apr 18 08:50:52 rpki-client: repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer: RFC 3779 resource not subset of parent's resources
Apr 18 08:50:53 openrsync: warning: connect timeout: 23.147.168.5, rpki.leitecastro.com
Apr 18 08:50:53 openrsync: warning: connect refused: 2602:faa5:130::5, rpki.leitecastro.com
Apr 18 08:50:53 openrsync: error: cannot connect to host: rpki.leitecastro.com
Apr 18 08:50:53 rpki-client: rsync rsync://rpki.leitecastro.com/repo failed
Apr 18 08:50:53 rpki-client: .rsync/rpki.leitecastro.com/repo: load from network failed, fallback to cache
Apr 18 08:52:32 rpki-client: rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft: CRL has expired
Apr 18 08:52:32 rpki-client: rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/1/2AAC42AB07A1BF97E63560510DCB7B28CE11B9EC.mft: no valid manifest available
Apr 18 08:52:32 rpki-client: rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft: CRL has expired
Apr 18 08:52:32 rpki-client: rpki-rps.arin.net/repository/8a848ade8baa579c018c63046aa94533/0/A2110BBC490FA9C5E85F6218D333DCDC5E34811D.mft: CRL has expired
Apr 18 08:52:32 rpki-client: rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.mft: CRL has expired
Apr 18 08:52:33 rpki-client: rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft: no valid manifest available
Apr 18 08:52:33 rpki-client: rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/7DF55DC7DAC41CA7453595CB9A79AB7FE6C83531.mft: CRL has expired
Apr 18 08:52:33 rpki-client: repodepot.wildtky.com/repo/TkyCA-Aug2025/0/0B6ED7CB025EBCB8EF80249C0945D3B411B12961.mft: no valid manifest available
Apr 18 08:52:33 rpki-client: rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft: unable to get certificate CRL
Apr 18 08:52:33 rpki-client: rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft: CRL has expired
Apr 18 08:52:33 rpki-client: rpki-client: .rrdp/AE7E883914AEA910AA26082A41E22569CA16F89824801AC3F94722413AD91697/rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft: seqnum gap detected #015A8E -> #015A91
Apr 18 08:52:33 rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft: CRL has expired
Apr 18 08:52:33 rpki-client: .rrdp/578363498B9B82561B5363A019C78F882685E2124A61654CCAC1DC7030CD570E/krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft: seqnum gap detected #0880 -> #0882
Apr 18 08:52:33 rpki-client: .rrdp/B9455114E9FE21E4EDA2F4693C91715418A217E09D74E4EC727E834877FA4173/rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft: seqnum gap detected #0BB5 -> #0BB7
Apr 18 08:52:33 rpki-client: repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft: no valid manifest available
Apr 18 08:52:33 rpki-client: rpki-rps.arin.net/repository/8a848ade7fb71aa9017fdd9c5dd324c7/0/EB1DD8AA3E2B6864E06379C751DBFFFCC6418350.mft: CRL has expired
Apr 18 08:52:33 rpki-client: rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft: no valid manifest available
Apr 18 08:52:35 rpki-client: rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft: CRL has expired
Apr 18 08:52:35 rpki-client: rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/BFA2750976CA07F56A68976B0F01EB862F17C3B3.mft: CRL has expired
Apr 18 08:52:36 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml (170.39.49.51): connect: Connection refused
Apr 18 08:52:36 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 18 08:52:36 rpki-client: krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer: certificate has expired
Apr 18 08:52:37 rpki-client: cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer: certificate has expired
Apr 18 08:52:47 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer: certificate has expired
Apr 18 08:52:50 rpki-client: .rrdp/578363498B9B82561B5363A019C78F882685E2124A61654CCAC1DC7030CD570E/krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.mft: seqnum gap detected #0882 -> #0884
Apr 18 08:52:51 openrsync: warning: connect timeout: 170.39.49.51, krill.ca-bc-01.ssmidge.xyz
Apr 18 08:52:51 openrsync: error: cannot connect to host: krill.ca-bc-01.ssmidge.xyz
Apr 18 08:52:51 rpki-client: rsync rsync://krill.ca-bc-01.ssmidge.xyz/repo failed
Apr 18 08:52:51 rpki-client: .rsync/krill.ca-bc-01.ssmidge.xyz/repo: load from network failed, fallback to cache
Apr 18 08:52:51 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft: no valid manifest available
Apr 18 08:52:51 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft: no valid manifest available
Apr 18 08:53:20 Processing time 495 seconds (345 seconds user, 537 seconds system)
Apr 18 08:53:20 Skiplist entries: 0
Apr 18 08:53:20 CCR manifest state hash: +54kSJOT+T9KalFHB2okc+QaD1//14HccaBSKdn2pyE=
Apr 18 08:53:20 CCR ROA payloads hash: CDJkExXqvI5xFyVMCBbnSxExNWF8aaab3AG1iQTEguE=
Apr 18 08:53:20 CCR ASPA payloads hash: GzhlYR/SSkEYCD8W+MA0kYUVfkd4vhc3Q1RLMFmjPWU=
Apr 18 08:53:20 Route Origin Authorizations: 226121 (2 failed parse, 0 invalid)
Apr 18 08:53:20 AS Provider Attestations: 337 (0 failed parse, 0 invalid)
Apr 18 08:53:20 BGPsec Router Certificates: 0
Apr 18 08:53:20 Certificates: 10245 (8 invalid, 18 non-functional)
Apr 18 08:53:20 Trust Anchor Locators: 1 (0 invalid)
Apr 18 08:53:20 Manifests: 10237 (18 failed parse, 5 seqnum gaps)
Apr 18 08:53:20 Certificate revocation lists: 10219
Apr 18 08:53:20 Trust Anchor Keys: 0
Apr 18 08:53:20 Repositories: 56
Apr 18 08:53:20 New files moved into validated cache: 414
Apr 18 08:53:20 Cleanup: removed 17 files, 270 directories
Apr 18 08:53:20 Repository cleanup: kept 262565 and removed 84 superfluous files
Apr 18 08:53:20 VRP Entries: 280799 (276212 unique)
Apr 18 08:53:20 VAP Entries: 337 (337 unique, 0 overflowed)
Apr 18 08:53:20 VSP Entries: 0 (0 unique)