- ncc-announce - mailman.ripe.net

[service] Update Regarding RIPE NCC Access: Please Enable Two-Step Verification
by Ivo Dijkhuis 03 Mar '21

03 Mar '21

Dear colleagues, We recently announced that RIPE NCC Access, our single sign-on (SSO) service, had been targeted by a "credential-stuffing" attack. Our investigation has since identified five SSO accounts that we believe were breached. Only one of these accounts is associated with an LIR, but this is inactive and does not hold any IP resources. We have locked all five SSO accounts and notified the account holders. Many of you also suggested potential security improvements. These will be included in a detailed review of RIPE NCC Access. Finally, please help us to keep your accounts secure by enabling two-step verification for your RIPE NCC Access account. You can find instructions on enabling two-step verification at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… In case of any suspicious activity on your account, report it to <security(a)ripe.net>. Regards, Ivo Dijkhuis Senior Information Security Officer, RIPE NCC

1 0

[news] RIPE NCC Member Update: February 2021
by Boris Duval 24 Feb '21

24 Feb '21

Hello RIPE NCC members, Here’s everything you need to know about our services and what’s happening in the RIPE community this month: 1. What We're Doing For You -- LIR Stats -- Attack on RIPE NCC Access - Please Enable Two-Factor Authentication -- Training Courses in March -- Join the RIPE NCC Community Projects Fund Selection Committee 2. Your Technical Update -- Update to the RIPE NCC Certification Practice Statement (CPS) for RPKI -- Tracking RPKI Repository Performance with a RIPE Atlas Measurement -- RIPE Atlas Big Data is Back -- RIPEstat -- RIS -- Service Announcements 3. What's Happening in Our Community? -- RIPE Chair Team Report - January 2021 -- Live Blogging from FOSDEM2021 -- Remote Chaos Experience 2020 -- Instant Messengers for Network Operator Groups -- Outcome of the AFRINIC Audit -- NRO Updates 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Malta -- RIPE NCC Open House: Hosted vs. Delegated RPKI -- RIPE NCC Open House: Internet in Liechtenstein -- RIPE 82 -- RIPE NCC General Meeting -- ENOG 18 1. What We're Doing For You -- LIR Stats Number of LIRs: 23,707 (+83) LIRs with IPv6: 16,129 (+85) IPv4 Addresses Transferred in January: 304,896 (-742,400) -- Attack on RIPE NCC Access - Please Enable Two-Factor Authentication RIPE NCC Access, our single sign-on (SSO) service was recently affected by what appears to be a deliberate ‘credential-stuffing’ attack, which caused some downtime. We mitigated the attack, and we are now taking steps to ensure that our services are better protected against such threats in the future. We would like to ask you to enable two-factor authentication on your RIPE NCC Access account if you have not already done so to ensure that your account is secure: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… If you notice any suspicious activity in your RIPE NCC Access account, please contact us at <security at ripe.net>. -- Training Courses in March Our webinars for the month of March are open for registrations: https://lirportal.ripe.net/training/courses Here's the schedule: RIPE Database Basics Tuesday, 2 March 2021 (09:00-11:00 UTC) Internet Routing Registry Monday, 8 March 2021 (09:00-10:00 UTC) BGP Security: RPKI Wednesday, 10 March 2021 (09:00-11:00 UTC) IPv6 Addressing Plan Thursday, 11 March 2021 (09:00-10:00 UTC) Basic IPv6 Protocol Security Tuesday, 16 March 2021 (09:00-11:00 UTC) BGP Security: IRR and Filtering Thursday, 25 March 2021 (09:00-11:00 UTC) IPv6 Prefix Calculation Tuesday, 30 March 2021 (08:00-09:00 UTC) IPv6 Host Configuration Wednesday, 31 March 2021 (08:00-10:00 UTC) For more information regarding our webinars please visit the following page: https://www.ripe.net/support/training/webinars Interested in something that you can't find on our upcoming course page? Let us know any topics you would like to see in future webinars: https://forms.gle/rhyExMhb7BTCCXyU8 -- Join the RIPE NCC Community Projects Fund Selection Committee There are two open slots on the selection committee. Do you have a keen eye for emerging talents and innovative ideas? Would you like to encourage the development of new projects that help the technical community? If this sounds like you, nominate yourself before 31 March 2021: https://www.ripe.net/participate/forms/apply/ripe-ncc-community-projects-fu… 2. Your Technical Update -- Update to the RIPE NCC Certification Practice Statement (CPS) for RPKI We have updated the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI). The CPS is an update to RIPE-549 and is published as RIPE-75: https://www.ripe.net/publications/docs/ripe-751/ <https://www.ripe.net/publications/docs/ripe-751/> -- Tracking RPKI Repository Performance with a RIPE Atlas Measurement Bundle In this article, Emile Aben and his co-authors show how they used their own measurements to track RPKI Repository Performance: https://labs.ripe.net/Members/emileaben/tracking-rpki-repository-performanc… -- RIPE Atlas Big Data is Back The start of 2021 saw RIPE Atlas users encountering delays in data retrieval and an overall drop in the responsiveness of the system. Now that things are back to normal, we thought we’d take a more detailed look at what happened and the steps we’re taking to prevent it from happening again: https://labs.ripe.net/Members/paul_de_weerd/ripe-atlas-big-data-is-back -- RIPEstat --- RIPEstat's Next UI We are working on RIPEstat’s next UI that will be launched as the official RIPEstat interface at RIPE 82. You take see our progress at : https://beta-ui.stat.ripe.net/launchpad --- RIPEstat RPKI-History Ready for Production After improving the processing pipeline, we removed the "beta" tag from RPKI-History data-call and widget. https://stat.ripe.net/docs/data_api#rpki-history https://stat.ripe.net/widget/rpki-by-as#w.resource=3333 https://stat.ripe.net/widget/rpki-by-country#w.resource=nl https://stat.ripe.net/widget/rpki-by-trust-anchor --- Change of Validator for RIPEstat RPKI-Validation Endpoint Due to the decommissioning of the RIPE NCC RPKI Validator, we are going to move to NLnet Labs Routinator as the backend for RPKI Validation: https://stat.ripe.net/docs/data_api#rpki-validation --- Cloud: Proof of Concept Backends We are currently testing how cloud services can help us to be more agile with provisioning more datasets and hope that users will soon benefit from it. -- RIS We are looking at expanding our multihop capacity by adding an extra route collector in Amsterdam. We are also trying to establish peerings with tier-1 networks that are not peering with RIS yet. -- Service Announcements --- Recent RIPE NCC Access Planned Downtime (2 February 2021): https://www.ripe.net/support/service-announcements/ripe-ncc-access-planned-… RIS-related Data Calls in RIPEstat (3 February 2021): https://www.ripe.net/support/service-announcements/ris-related-data-calls-i… Core Network Maintenance (4 February 2021): https://www.ripe.net/support/service-announcements/core-network-maintenance… Ticketing System Downtime (8 February 2021): https://www.ripe.net/support/service-announcements/ticketing-system-downtim… Whois TEST and RIPE NCC Academy Training Database Downtime (9 February 2021): https://www.ripe.net/support/service-announcements/whois-test-and-ripe-ncc-… Delay Publishing RPKI Object Updates (15 February 2021): https://www.ripe.net/support/service-announcements/delay-publishing-rpki-ob… 3. What's Happening in Our Community? -- RIPE Chair Team Report - January 2021 After a busy start to the year, here's an update from the RIPE Chair looking at the RIPE Chair team's activities so far in 2021 as well as a number of noteworthy community developments: https://labs.ripe.net/Members/mirjam_kuhne/ripe-chair-team-report-january-2… -- Live Blogging from FOSDEM2021 Vesna Manojlovic shares her impressions from FOSDEM, the largest European Free and Open Source Software developers conference: https://labs.ripe.net/Members/becha/live-blogging-from-fosdem2021 -- Remote Chaos Experience 2020 There is a substantial overlap between RIPE and CCC communities. In this post, Vesna Manojlovic highlights her favourite talks from Remote Chaos Experience 2020: https://labs.ripe.net/Members/becha/remote-chaos-experience -- Instant Messengers for Network Operator Groups Alex Semenyaka takes a look at why and how Network Operator Groups (NOGs) in the RIPE NCC service region are turning to Instant Messengers as their first choice for communication: https://labs.ripe.net/Members/alex_semenyaka/instant-messengers-for-network… -- Outcome of the AFRINIC Audit AFRINIC has completed a comprehensive audit of its WHOIS Database following the misappropriation of IPv4 resources that came to light in 2019. A full report on the outcomes of their audit is now available: https://labs.ripe.net/Members/alun_davies/outcome-of-the-afrinic-audit -- NRO Updates --- Call for Public Comments on the 2020 IANA Performance Matrix Summary Report The IANA RC is now launching a public comment period of 30 days, seeking comments and input from the community on the IANA numbering services performance and the 2020 IANA Performance Matrix Summary Report: https://www.nro.net/2020-RIR-IANA-summary-report The IANA RC encourages all members of the Internet number community to review the public IANA Performance Matrix Summary Report. Comments on the IANA service performance should be sent to <iana-performance [at] nro [dot] net>. The public comment period ends on Friday, 5 March 2021 at 23:59 UTC. 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Malta, Wednesday, 10 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE NCC Open House: Hosted vs. Delegated RPKI, Friday, 19 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-ho… -- RIPE NCC Open House: Internet in Liechtenstein, 24 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE 82, 17-21 May 2021 The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, lightning talks and BoFs. You have until 19 March 2021 to submit your presentations proposals at: https://ripe82.ripe.net/submit-topic/cfp/ The meeting plan is available at: https://ripe82.ripe.net/programme/meeting-plan/ -- RIPE NCC General Meeting, 19-21 May 2021: https://www.ripe.net/participate/meetings/gm/next-general-meeting -- ENOG 18, 7-8 June 2021: https://www.enog.org/enog-18/ Thank you for reading till the end. We’ll be back next month with more news! Best regards, Boris Boris Duval Communications Officer RIPE NCC

1 0

Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by Ivo Dijkhuis 18 Feb '21

18 Feb '21

Dear colleagues, Last weekend, RIPE NCC Access, our single sign-on (SSO) service was affected by what appears to be a deliberate ‘credential-stuffing’ attack, which caused some downtime. We mitigated the attack, and we are now taking steps to ensure that our services are better protected against such threats in the future. Our preliminary investigations do not indicate that any SSO accounts have been compromised. If we do find that an account has been affected in the course of our investigations, we will contact the account holder individually to inform them. We would like to ask you to enable two-factor authentication on your RIPE NCC Access account if you have not already done so to ensure that your account is secure. In general, using two-factor authentication across all your accounts can help limit your exposure to such attacks. If you notice any suspicious activity in your RIPE NCC Access account, please contact us immediately at <security(a)ripe.net>. Best regards, Ivo Dijkhuis Senior Information Security Officer, RIPE NCC

1 0

[news] Update to the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI)
by Nathalie Trenaman 04 Feb '21

04 Feb '21

Dear colleagues, We are pleased to announce that we have updated the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI). As a Certificate Authority in RPKI, we are required to publish a CPS. In this document, we describe: - How certificates are issued, managed, and revoked; - How we perform the key management; - The kind of certificates we issue. The CPS is an update to RIPE-549 and is published as RIPE-751: https://www.ripe.net/publications/docs/ripe-751/ <https://www.ripe.net/publications/docs/ripe-751/> The document follows the "Template for a CPS for the RPKI" as defined in RFC7382. Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

[service] Planned Downtime for RIPE NCC Access
by Theodoros Polychniatis 26 Jan '21

26 Jan '21

Dear colleagues, On Tuesday, 2 February at 16:00 (UTC), we plan to make improvements to the resilience of the infrastructure supporting RIPE NCC Access (SSO). We expect around two hours of downtime, provided the migration goes to plan. You will not be able to log in with your RIPE NCC Access account during this period, or perform any actions where the account is required. This includes accessing the LIR Portal, RIPE Database updates, managing RIPE Atlas probes, Certified Professionals exams, etc. This follows a hardware and software upgrade we performed in November 2020. Best regards, Theo -- Theodoros Polychniatis Asst. Manager Software Engineering RIPE NCC

1 0

[news] RIPE NCC Member Update: January 2021
by Boris Duval 26 Jan '21

26 Jan '21

Happy new year, RIPE NCC members! Here’s everything you need to know about our services and what’s happening in the RIPE community this month: 1. What We're Doing For You -- LIR Stats -- RIPE NCC Activity Plan and Budget 2021 -- Training Courses in February -- Contracts Now Sent via Email -- Join the RIPE NCC Community Projects Fund Selection Committee 2. Your Technical Update -- Address Assignment Practices in IPv4 and IPv6 -- Impact of NWI-10 on Country Codes in Delegated Statistics -- Service Announcements 3. What's Happening in Our Community? -- Our First Glance at the Uganda Internet Shutdown 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Iceland -- RIPE NCC Open House: Internet in Turkey -- RIPE 82 -- ENOG 18 1. What We're Doing For You -- LIR Stats Number of LIRs: 23,624 (-170) LIRs with IPv6: 16,044 (-18) IPv4 Addresses Transferred in December: 1,047,296 (+56,576) -- RIPE NCC Activity Plan and Budget 2021 This definitive document has been approved by the RIPE NCC Executive Board with input from our membership. The Activity Plan and Budget outlines the work we will undertake in the coming year and the associated costs for each activity: https://www.ripe.net/publications/docs/ripe-750/ -- Training Courses in February Our webinars for the month of February are open for registrations: https://lirportal.ripe.net/training/courses Here’s the schedule: IPv6 Associated Protocols Security 4 February 2021 (09:00-11:00 UTC ) Resource Public Key Infrastructure (RPKI) Webinar 9 February 2021 (09:00-10:00 UTC) Using RIPE Atlas 11 February 2021 (09:00-11:00 UTC) IPv6 Security Myths, Filtering and Tips 18 February 2021 (09:00-11:00 UTC) LIRs and the Internet Ecosystems 23 February 2021 (09:00-11:00 UTC) IPv6 in the RIPE Database 25 February 2021 (09:00-10:00 UTC) Interested in something that you can't find on our course overview page? Let us know any topics you would like to see in future webinars: https://forms.gle/rhyExMhb7BTCCXyU8 -- Contracts Now Sent via Email We now send all contracts via email instead of postal mail. This is good news for new membership applications and members that need to re-sign their SSA/LAA due to a change in business structure. -- Join the RIPE NCC Community Projects Fund Selection Committee There are two open slots on the selection committee. Do you have a keen eye for emerging talents and innovative ideas? Would you like to encourage the development of new projects that help the technical community? If that sounds like you, be sure to nominate yourself before 31 March 2021: https://www.ripe.net/participate/forms/apply/ripe-ncc-community-projects-fu… 2. Your Technical Update -- Address Assignment Practices in IPv4 and IPv6 In this article, Stephen Strowes and his co-authors share some observations on current IPv4 and IPv6 assignment practices: https://labs.ripe.net/Members/stephen_strowes/address-assignment-practices-… -- Impact of NWI-10 on Country Codes in Delegated Statistics Rene Wilhelm and Stefania Fokaeos quantify the changes to the Extended Delegated Statistics after the RIPE NCC implemented phase 1 of Numbered Work Item 10 (NWI-10): https://labs.ripe.net/Members/wilhelm/impact-of-nwi-10-on-country-codes-in-… -- Service Announcements --- Recent Invalid RPKI Certificate Published (7 January 2021): https://www.ripe.net/support/service-announcements/rpki-planned-downtime-3 RIPE Atlas Data Backend Partial Outage (4 January 2021): https://www.ripe.net/support/service-announcements/ripe-atlas-data-backend-… 3. What's Happening in Our Community? -- Our First Glance at the Uganda Internet Shutdown We’ve looked at Uganda recent Internet shutdown based on data available from our Routing Information Service (RIS) and RIPE Atlas: https://labs.ripe.net/Members/becha/our-first-glance-at-the-uganda-internet… 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Iceland, 10 February 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE NCC Open House: Internet in Turkey, 24 February 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE 82, 17-21 May 2021: https://ripe82.ripe.net/ -- ENOG 18, 7-8 June 2021: https://www.enog.org/enog-18/ Thank you for reading till the end. We’ll be back next month with more news! Best regards, Boris Boris Duval Communications Officer RIPE NCC

1 0

[news] 140th RIPE NCC Executive Board Meeting - Summary Notes
by Hans Petter Holen 24 Dec '20

24 Dec '20

Dear RIPE NCC members, The RIPE NCC Executive Board held its 140th Meeting via teleconference on 11 December 2020. The draft minutes of the meeting are now available: https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-140th-ex… The Executive Board publishes the minutes of its meetings so that the workings of the Board and the decisions it makes are transparent for the membership that it represents. The following is a summary of the main items from the meeting. Further details are available in the minutes. - The RIPE NCC Executive Board resolved to permanently moderate members-discuss emails that are not in accordance with the purpose of the mailing list and the principles of the RIPE Code of Conduct. All emails, moderated or otherwise, will be archived on the RIPE NCC website. - The following documents were approved: * RIPE NCC Activity Plan and Budget 2021 * Code of Conduct for Candidates for the Executive Board * Management Regulations of the RIPE NCC - The potential impact of Brexit on the RIPE NCC was discussed. The RIPE NCC is confident that this can easily be managed. - Charging Scheme options were discussed in light of falling membership growth. The board asked that the recommendations from the Charging Scheme Task Force (in 2012) be taken into account. - The RIPE NCC presented an update on its RPKI resilience work and explained the issue of an invalid RPKI certificate that was published on 9 December. - The RIPE NCC gave an update on the voting issue in the October General Meeting. The board also decided to more explicitly ask for additional topics to be discussed when the GM agenda was sent to members and at the end of the Chair's presentation. - The Board discussed the implementation of amendments to the Articles of Association (AoA) that were approved by the last GM (applying the RIPE Code of Conduct to RIPE NCC Executive Board elections). - The RIPE Chair Team mentioned that they were reviewing the policy appeals procedure after it was recently used for the first time. Kind regards Hans Petter Holen RIPE NCC Managing Director

1 0

[training] RIPE NCC Webinars January 2021
by training＠ripe.net 23 Dec '20

23 Dec '20

Dear RIPE NCC members, We invite you to learn online with us in the new year! You can attend our webinars which now include the online versions of our face-to-face courses. As always, our trainers will be available to guide you and answer your questions. Our webinar schedule for the month of January 2021 has been published. You can register for the sessions at: https://lirportal.ripe.net/training/courses To learn more about the topics of our webinars, please visit: https://www.ripe.net/support/training/webinars You can also learn online at your own pace, anywhere, anytime using the RIPE NCC Academy: https://academy.ripe.net A special thanks to everyone who participated in our webinars this past year. We greatly appreciate your interest in our sessions. If you have any questions or comments regarding our webinars, please don’t hesitate to contact us at learning(a)ripe.net. We hope to meet you online soon! Yours sincerely, RIPE NCC Learning and Development

1 0

[news] RIPE NCC Activity Plan and Budget 2021 Published
by Hans Petter Holen 22 Dec '20

22 Dec '20

Dear RIPE NCC members, The RIPE NCC Activity Plan and Budget 2021 is now available. This definitive document has been approved by the RIPE NCC Executive Board with input from our membership. It outlines the work we will undertake in the coming year and the associated costs for each activity. The document is available at: https://www.ripe.net/publications/docs/ripe-750/ Key points in this year's Activity Plan and Budget: - Our expenses will decrease by 3% - We will grow our FTE count from 165 to 170 (3%) - We now expect to end 2021 with 23,000 LIR accounts (down from 25,000 in the draft Activity Plan and Budget) - The membership fee remains at EUR 1,400 per LIR account - The cost per LIR is EUR 1,459 – down slightly from EUR 1,498 in the 2020 budget A section at the end of the document notes changes since the draft was published in September, which are relatively small. However, we have clarified that we plan to retire our RPKI Validator in 2021, in response to feedback on the draft Activity Plan and Budget. Kind regards Hans Petter Holen RIPE NCC Managing Director

1 0

[news] RIPE NCC Billing Procedure 2021 Published
by ripencc-management＠ripe.net 22 Dec '20

22 Dec '20

Dear RIPE NCC members, We are currently preparing our invoices for next year. These will be sent to all members in February 2021. If you want to see how your annual contribution will be calculated or find payment information, please refer to the RIPE NCC Billing Procedure 2021, which is now published. You can find this here: https://www.ripe.net/participate/member-support/payment/ripe-ncc-billing-pr… Kind regards Gwen van Berne Chief Financial Officer RIPE NCC

1 0