Welcome to ...
# # ##### #### ##### ## #
## # # # # # # # # #
# # # # # # # ##### # # # #
# # # ##### # # # ###### #
# ## # # # # # # # #
# # # # #### # # # ######
This system monitors and validates the experimental NRO TAL, see
https://labs.apnic.net/nro-ta/ for more information.
Every few minutes a validation run is launched to analyse over time how
the imposition of constraints based on the 'delegated-nro-latest' files
impact emission of VRPs.
System maintainer: Job Snijders
This archive can be accessed via:
rsync: rsync://nro-tal.rpkiviews.org/data/
HTTPS: https://nro-tal.rpkiviews.org/data/ (today)
Latest unique VRP count: 271682 (... should be 827342?)
latest stdout+stderr log:
# TZ=Etc/UTC rpki-client -cm -t /etc/rpki/nro.tal
Apr 02 06:45:17 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer: RFC 3779 resource not subset of parent's resources
Apr 02 06:45:17 rpki-client: rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer: RFC 3779 resource not subset of parent's resources
Apr 02 06:45:17 rpki-client: rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: RFC 3779 resource not subset of parent's resources
Apr 02 06:45:24 rpki-client: rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer: RFC 3779 resource not subset of parent's resources
Apr 02 06:45:33 rpki-client: .rrdp/8BD1405242614AED9F13321D266FE3193DB0CA842E0CBFFDA2B3DF05481C331B/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft: seqnum gap detected #010D0C9F4328584073A828504045B43F7D9A4E31 -> #010D0C9F4328584073A828504045B43F7D9A4E33
Apr 02 06:47:24 rpki-client: https://rrdp.rp.ki/notification.xml (44.222.21.1): connect: Connection refused
Apr 02 06:47:24 rpki-client: https://rrdp.rp.ki/notification.xml (2600:1f18:13eb:bc00:dd1f:445e:e92d:8911): connect: No route to host
Apr 02 06:47:24 rpki-client: https://rrdp.rp.ki/notification.xml: load from network failed, fallback to rsync
Apr 02 06:47:39 rpki-client: https://repodepot.wildtky.com/rrdp/notification.xml (23.180.200.225): connect timeout
Apr 02 06:47:39 rpki-client: https://repo.kagl.me/rpki/notification.xml (104.37.40.237): connect timeout
Apr 02 06:47:39 rpki-client: https://repodepot.wildtky.com/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 02 06:47:39 rpki-client: https://repo.kagl.me/rpki/notification.xml: load from network failed, fallback to rsync
Apr 02 06:47:46 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (23.140.52.8): connect: Connection refused
Apr 02 06:47:46 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml (2602:f633:0:30::10): connect: No route to host
Apr 02 06:47:46 rpki-client: https://rpki-repo.canops.org/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 02 06:47:46 openrsync: warning: connect refused: 23.140.52.8, rpki-repo.canops.org
Apr 02 06:47:46 openrsync: warning: connect refused: 2602:f633:0:30::10, rpki-repo.canops.org
Apr 02 06:47:46 openrsync: error: cannot connect to host: rpki-repo.canops.org
Apr 02 06:47:46 rpki-client: rsync rsync://rpki-repo.canops.org/repo failed
Apr 02 06:47:46 rpki-client: .rsync/rpki-repo.canops.org/repo: load from network failed, fallback to cache
Apr 02 06:47:54 openrsync: warning: connect timeout: 104.37.40.237, repo.kagl.me
Apr 02 06:47:54 openrsync: error: cannot connect to host: repo.kagl.me
Apr 02 06:47:54 openrsync: warning: connect timeout: 23.180.200.225, repodepot.wildtky.com
Apr 02 06:47:54 openrsync: error: cannot connect to host: repodepot.wildtky.com
Apr 02 06:47:54 rpki-client: rsync rsync://repo.kagl.me/rpki failed
Apr 02 06:47:54 rpki-client: rsync rsync://repodepot.wildtky.com/repo failed
Apr 02 06:47:54 rpki-client: .rsync/repo.kagl.me/rpki: load from network failed, fallback to cache
Apr 02 06:47:54 rpki-client: .rsync/repodepot.wildtky.com/repo: load from network failed, fallback to cache
Apr 02 06:48:30 rpki-client: https://rpki.leitecastro.com/notification.xml (23.147.168.5): connect timeout
Apr 02 06:48:30 rpki-client: https://rpki.leitecastro.com/notification.xml (2602:faa5:130::5): connect: No route to host
Apr 02 06:48:30 rpki-client: https://rpki.leitecastro.com/notification.xml: load from network failed, fallback to rsync
Apr 02 06:48:45 openrsync: warning: connect timeout: 23.147.168.5, rpki.leitecastro.com
Apr 02 06:48:45 openrsync: warning: connect refused: 2602:faa5:130::5, rpki.leitecastro.com
Apr 02 06:48:45 openrsync: error: cannot connect to host: rpki.leitecastro.com
Apr 02 06:48:45 rpki-client: rsync rsync://rpki.leitecastro.com/repo failed
Apr 02 06:48:45 rpki-client: .rsync/rpki.leitecastro.com/repo: load from network failed, fallback to cache
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/8a848ade7fb71aa9017fdd9c5dd324c7/0/EB1DD8AA3E2B6864E06379C751DBFFFCC6418350.mft: CRL has expired
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft: CRL has expired
Apr 02 06:49:11 rpki-client: repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer: RFC 3779 resource not subset of parent's resources
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/1/2AAC42AB07A1BF97E63560510DCB7B28CE11B9EC.mft: no valid manifest available
Apr 02 06:49:11 rpki-client: .rrdp/AE7E883914AEA910AA26082A41E22569CA16F89824801AC3F94722413AD91697/rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft: seqnum gap detected #015567 -> #01556A
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft: CRL has expired
Apr 02 06:49:11 rpki-client: .rrdp/A9B0B23B3E6C4DD0D66F13D15306B252DCB2A1ACCC2690187C60512C7C42F40A/rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft: seqnum gap detected #01D8C5 -> #01D8C7
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/7DF55DC7DAC41CA7453595CB9A79AB7FE6C83531.mft: CRL has expired
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft: CRL has expired
Apr 02 06:49:11 rpki-client: rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft: no valid manifest available
Apr 02 06:49:11 rpki-client: rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft: unable to get certificate CRL
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft: CRL has expired
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/8a848ade8baa579c018c63046aa94533/0/A2110BBC490FA9C5E85F6218D333DCDC5E34811D.mft: CRL has expired
Apr 02 06:49:11 rpki-client: repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft: no valid manifest available
Apr 02 06:49:11 rpki-client: repodepot.wildtky.com/repo/TkyCA-Aug2025/0/0B6ED7CB025EBCB8EF80249C0945D3B411B12961.mft: no valid manifest available
Apr 02 06:49:11 rpki-client: rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft: CRL has expired
Apr 02 06:49:14 rpki-client: rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/BFA2750976CA07F56A68976B0F01EB862F17C3B3.mft: CRL has expired
Apr 02 06:49:14 rpki-client: rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft: CRL has expired
Apr 02 06:49:14 rpki-client: rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft: CRL has expired
Apr 02 06:49:14 rpki-client: rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft: CRL has expired
Apr 02 06:49:14 rpki-client: rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft: no valid manifest available
Apr 02 06:49:15 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml (170.39.49.51): connect: Connection refused
Apr 02 06:49:15 rpki-client: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml: load from network failed, fallback to rsync
Apr 02 06:49:15 rpki-client: cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer: certificate has expired
Apr 02 06:49:18 rpki-client: rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer: certificate has expired
Apr 02 06:49:18 rpki-client: krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer: certificate has expired
Apr 02 06:49:30 openrsync: warning: connect timeout: 170.39.49.51, krill.ca-bc-01.ssmidge.xyz
Apr 02 06:49:30 openrsync: error: cannot connect to host: krill.ca-bc-01.ssmidge.xyz
Apr 02 06:49:30 rpki-client: rsync rsync://krill.ca-bc-01.ssmidge.xyz/repo failed
Apr 02 06:49:30 rpki-client: .rsync/krill.ca-bc-01.ssmidge.xyz/repo: load from network failed, fallback to cache
Apr 02 06:49:30 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft: no valid manifest available
Apr 02 06:49:30 rpki-client: krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft: no valid manifest available
Apr 02 06:49:54 Processing time 289 seconds (204 seconds user, 300 seconds system)
Apr 02 06:49:54 Skiplist entries: 0
Apr 02 06:49:54 CCR manifest state hash: szkFhw0fEoM3EKJKgRgisxihyxJ4dOwSu6plucwuGSA=
Apr 02 06:49:54 CCR ROA payloads hash: Cn4c+utOboM6304NzHJNimzXTQQrmxuLInla5plT4PY=
Apr 02 06:49:54 CCR ASPA payloads hash: vv6JpX9ip3VKbWw3sTpk9hV79/B4HqNpA+yKAd28f9Q=
Apr 02 06:49:54 Route Origin Authorizations: 222902 (0 failed parse, 0 invalid)
Apr 02 06:49:54 AS Provider Attestations: 297 (0 failed parse, 0 invalid)
Apr 02 06:49:54 BGPsec Router Certificates: 0
Apr 02 06:49:54 Certificates: 10141 (8 invalid, 20 non-functional)
Apr 02 06:49:54 Trust Anchor Locators: 1 (0 invalid)
Apr 02 06:49:54 Manifests: 10133 (20 failed parse, 3 seqnum gaps)
Apr 02 06:49:54 Certificate revocation lists: 10113
Apr 02 06:49:54 Trust Anchor Keys: 0
Apr 02 06:49:54 Repositories: 56
Apr 02 06:49:54 New files moved into validated cache: 535
Apr 02 06:49:54 Cleanup: removed 30 files, 361 directories
Apr 02 06:49:54 Repository cleanup: kept 259297 and removed 65 superfluous files
Apr 02 06:49:54 VRP Entries: 276000 (271682 unique)
Apr 02 06:49:54 VAP Entries: 297 (297 unique, 0 overflowed)
Apr 02 06:49:54 VSP Entries: 0 (0 unique)