- ncc-announce - mailman.ripe.net

[service] Improving Security of the API Key Management in the, LIR Portal
by Theodoros Polychniatis 09 Apr '20

09 Apr '20

Dear colleagues, If you are users of the API Key Management section in the LIR Portal (https://lirportal.ripe.net/api/) or if you use the API to submit resource requests, access "IP Analyser", "My Resources" or manage your ROAs, then please continue reading. Otherwise, this message should not concern you. During a recent security review of the LIR Portal, we identified that the API Keys created in the LIR Portal are stored in plain text. This functionality was developed in this way so that users are able to retrieve the keys even after they have created them. However, this poses a risk from a security point of view, because these API Keys are used for authentication and authorisation purposes. These keys should not be stored in plain text. Because there is no indication that the existing API Keys were leaked, and because we do not want to create any operational problems to the API users, we decided not to drop the existing keys. Therefore, your scripts will continue to work and *no change is needed from you*. However, we made the following changes: 1. We hashed all the existing API key values and updated the way the LIR Portal authenticates the keys accordingly. 2. We changed the User Interface in the LIR Portal, so that when a user creates an API key, the value is displayed only once to the user, and the hashed value is stored in the database. 3. Up until now, the keys had to be passed to the request as a URL parameter. Now, the above mentioned APIs also accept the API Key as a request header value. We strongly recommend using the header to pass the API Key value, so that the key is not stored in any server logs. You can find more information in the API Key management section in the LIR Portal. After this change, neither you nor the RIPE NCC can recover the existing keys from the LIR Portal. You can always create new keys, configure them in your scripts, and drop the old ones. Based on our risk evaluation, we plan to act similarly for API Keys used in other services. Please let us know if you have any questions regarding this change. Best regards, Theodoros Polychniatis Assistant Manager Software Engineering Department RIPE NCC

1 0

[meetings] Register for RIPE 80 – The First Virtual RIPE Meeting
by RIPE NCC Event Team 09 Apr '20

09 Apr '20

Dear colleagues, For the first time, the RIPE Meeting will be 100% virtual, and you cannot miss it! You can now register for free at: https://ripe80.ripe.net/register/ RIPE 80 will take place from 12 - 14 May 2020 and will feature a shorter programme and a new schedule. More information about the programme will follow in the coming weeks. Learn more about the meeting at: https://ripe80.ripe.net/ For the latest updates, you can follow us on Twitter at @ripemeeting and by using the hashtag #RIPE80. Kind regards, RIPE Meetings Organisation Team

1 0

[GM] RIPE NCC General Meeting Important Dates
by Alun Davies 06 Apr '20

06 Apr '20

Dear colleagues, Following the earlier announcement from the RIPE NCC Executive Board, we would like to remind all our members that the existing schedule and all important dates for the RIPE NCC General Meeting May 2020 remain as originally announced. Elections to fill three seats on the RIPE NCC Executive Board will take place at this GM. Right now, the call for nominations is still open and all members have till 22 April to send in their nominations by completing our online AGM Nomination form: http://www.ripe.net/participate/forms/apply/agm-nomination/ <http://www.ripe.net/participate/forms/apply/agm-nomination/> In light of the COVID-19 situation, this year's May GM will be held at the RIPE NCC office in Amsterdam. Due to restrictions put in place by the Dutch government in response to the outbreak, and given the potential risk to the health and safety of our staff and members alike, it will be difficult to arrange for physical attendance of members at this meeting. We therefore strongly advise that members opt to attend the upcoming GM through electronic means at a remote location. Full remote participation will be available as usual in order to ensure that all our members will be able to follow presentations, join in the discussion and cast their votes by electronic means. All information about the GM, including registration details, is available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020 <https://www.ripe.net/participate/meetings/gm/meetings/may-2020> Kind Regards, General Meeting Organisation Team RIPE NCC RIPE NCC General Meeting May 2020 Important Dates: 26 Feb - Call for nominations to RIPE NCC Executive Board 26 Feb - Open registration for General Meeting 15 Apr - Publish RIPE NCC Annual Report and Financial Report 2019 22 Apr - Close nominations for Executive Board elections 29 Apr - Deadline for proxy vote nominations 29 Apr - Deadline for members to propose resolutions 29 Apr - Deadline to publish final GM agenda 13 May - Close registration for electronic voting 13 May - GM begins with main meeting 15 May - GM closes with announcement of voting results

1 0

[news] New AS Number Blocks Allocated to the RIPE NCC
by Nikolas Pediaditis 02 Apr '20

02 Apr '20

Dear colleagues, On 1 April 2020, the RIPE NCC received the following AS Number blocks from IANA: 210332-211355 211356-212379 212380-213403 You may want to update your records accordingly. All allocations of AS Numbers made by IANA to RIRs are listed here: https://www.iana.org/assignments/as-numbers/as-numbers.xhtml Kind regards, Nikolas Pediaditis Registration Services & Policy Development Manager RIPE NCC

1 0

[service] All Deleted RPKI ROAs Have Been Reinstated
by Nathalie Trenaman 02 Apr '20

02 Apr '20

Dear colleagues, We have now reinstated the deleted ROAs and everything is back to normal. If you created replacement ROAs in the meantime, you will not need to do anything - any changes will still be there. We have now implemented measures that will prevent this from happening again in the future. We will also share a full post-mortem with the RIPE Routing Working Group tomorrow: <routing-wg(a)ripe.net <mailto:routing-wg@ripe.net>>. Apologies again for the inconvenience. Kind regards Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

[service] Accidental Deletion of ROAs
by Nathalie Trenaman 02 Apr '20

02 Apr '20

Dear colleagues, Yesterday at 18:17 (UTC+2) we accidentally deleted 4,100 RPKI Route Origin Authorisations (ROAs). These ROAs were related both to members' and sponsored resources. This happened while we were performing maintenance on our internal software. We are currently investigating and will update you when we know more. Apologies for the inconvenience. Kind regards Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

[news] Payment Period Extended due to COVID-19
by simonjh＠ripe.net 02 Apr '20

02 Apr '20

Dear RIPE NCC member, In view of the disruption caused by the COVID-19 pandemic, we’ve decided to extend our payment period by three months. You now have until 1 July 2020 to pay your invoice. If you are able to pay your invoice easily within the original timeframe, we encourage you to do so. We’ve made this one-time decision to show solidarity with some of our members who have been deeply impacted by the crisis. We believe that it’s important to help and support each other during these troubled times and would like to thank all members who have already paid their invoice. Keep in mind that this extension only applies to existing members who have already received the 2020 invoice. For all other cases, the standard 30-day payment period remains in place (e.g. new LIR account). Stay safe and healthy! Kind regards, Simon-Jan Haytink Finance Manager RIPE NCC

1 0

[news] RIPE NCC Certified Professionals is Live
by exams＠ripe.net 01 Apr '20

01 Apr '20

Dear colleagues, When we announced the launch of RIPE NCC Certified Professionals at RIPE 79 in Rotterdam, we promised that all members would receive vouchers to take the exams and have the opportunity to get certified. In keeping with that promise, we are emailing three vouchers per LIR to all registered contacts. You should expect to receive your vouchers within the coming two weeks. You can read more about how to use your vouchers and schedule an exam at: https://www.ripe.net/support/certified-professionals/ <https://www.ripe.net/support/certified-professionals/> Through RIPE NCC Certified Professionals, we aim to validate your skills and expertise. If you pass the exam, your achievements can be shared through a verifiable digital badge. We have relied on the support and active participation of the community throughout the development process and we would like to thank everyone who filled in our surveys and answered our questions, contributed to question writing, and took part in the pilot testing. We hope to continue to build this programme together with you. Exams can now be scheduled for our very first badge - RIPE Database Associate! Work is ongoing (despite the quarantine) for our next badge, IPv6 Fundamentals – Analyst, and we hope to launch it around this July. We are keen to keep improving our exam content and processes. Please do write to us with your feedback. Stay safe! Best regards, Sandra Brás Learning and Development Assistant Manager RIPE NCC

1 0

[training] RIPE NCC Webinars April - June 2020
by Training Services 31 Mar '20

31 Mar '20

Dear RIPE NCC members, We are pleased to announce our upcoming webinars scheduled for April, May and June 2020. The RIPE NCC Webinars are live, free and take only one hour. You can interact with our trainers without leaving your desk. We focus on the topics and issues that are relevant to you. Our webinars are scheduled at 09:00-10:00 UTC --------------- April Webinars --------------- - Introduction to the RIPE Database Webinar (Tuesday, 21 April 2020) - RPKI Webinar (Thursday, 23 April 2020) - IPv6 in the RIPE Database Webinar (Wednesday, 29 April 2020) ------------- May Webinars ------------- - RIPE Database - Advanced Topics Webinar (Wednesday, 6 May 2020) - Internet Routing Registry Webinar (Thursday, 7 May 2020) - Webinar for New LIRs (Tuesday, 12 May 2020) - IPv6 Prefix Calculation Webinar (Thursday, 14 May 2020) - RPKI Webinar (Tuesday, 19 May 2020) - IPv6 in the RIPE Database Webinar (Tuesday, 26 May 2020) - IPv6 Addressing Plan Webinar (Wednesday, 27 May 2020) -------------- June Webinars -------------- - RIPE Atlas Usage Webinar (Wednesday, 3 June 2020) - RIPE Database - Advanced Topics Webinar (Wednesday, 10 June 2020) - Internet Routing Registry Webinar (Tuesday, 16 June 2020) - IPv6 Prefix Calculation Webinar (Thursday, 18 June 2020) - Introduction to the RIPE Database Webinar (Wednesday, 24 June 2020) - IPv6 Addressing Plan Webinar (Thursday, 25 June 2020) - Webinar for New LIRs (Tuesday, 30 June 2020) ----- You can register for the webinars at: https://www.ripe.net/support/training/webinars If you have any questions, please email <training(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Learning and Development

1 0

[news] RIPE NCC Member Update: March 2020/Services During COVID-19 Pandemic
by Boris Duval 23 Mar '20

23 Mar '20

Hello RIPE NCC member, This month, we have a lot of important information to share with you as the Coronavirus (COVID-19) outbreak severely disrupted our 2020 schedule. Due to the pandemic, we were forced to postpone and cancel many of our events and training courses. Please read this update carefully so you are fully informed about the current situation. ------------------------------------------------------------------- 1. RIPE NCC Services, Events and COVID-19 ------------------------------------------------------------------- -- Training Courses -- Meetings Postponed -- RIPE 80 Will Be a Virtual Meeting ------------------------------------------------------------------- 2. What We’re Doing for You ------------------------------------------------------------------- -- Your LIR Stats -- Hans Petter Holen Appointed as the RIPE NCC's Managing Director -- RIPE NCC General Meeting, 13-15 May 2020 -- The RIPE NCC Academy -- TRA Oman Host Capacity-building Workshop in Oman ------------------------------------------------------------------- 3. Your Technical Update ------------------------------------------------------------------- -- RIPEstat -- What’s the Deal with IPv6 Link-Local Addresses? ------------------------------------------------------------------- 4. What’s Happening in Our Community? ------------------------------------------------------------------- -- Hackathons in the Time of Corona -- Reporting back from 36c3: Resource Exhaustion -- Focus on: the Anti-Abuse Working Group ------------------------------------------------------------------- 1. RIPE NCC Services, Events and COVID-19 ------------------------------------------------------------------- The COVID-19 pandemic is a severe situation, and we will continue to carry out our services to ensure people stay connected at this worrying time. Our staff are now fully working from home with a very small number coming to the Amsterdam office for essential functions once a week. If you experience a delay in service from our end, we ask you to bear with us while we adapt to this new situation. As of now, all our services are operational, we will keep you informed if the situation changes via email and on our website at: https://www.ripe.net/support/service-announcements Also, if you need to send us documents related to an administrative request (e.g. transfer, merger, additional LIR account), please upload them digitally via the LIR Portal as we are excepting a one-week delay for all documents sent via post. -- Training Courses All face-to-face Training Courses and Workshops have been suspended until further notice. However, Webinars will continue as scheduled and we are planning to organise more remote Training Courses. See Training Courses schedule: https://lirportal.ripe.net/training See Webinars schedule: https://www.ripe.net/support/training/webinars Head of Learning and Development, Rumy Spratley-Kanis, shared more information on how we plan to deliver remote learning in the coming weeks in her RIPE Labs article: https://labs.ripe.net/Members/rumy_spratley_kanis/ripe-ncc-learning-develop… -- Meetings Postponed So far, the following meetings have been postponed due to COVID-19: • MENOG 20 • SEE 9 • RIPE NCC Day Tashkent • ENOG 17 We hope to announce new dates in the future. In the meantime, you can check the status of all our events at: https://www.ripe.net/participate/meetings/coronavirus-update -- RIPE 80 Will Be a Virtual Meeting The RIPE 80 Meeting that was scheduled to be held in Berlin from 11-15 May will be a virtual meeting with a reduced programme due to the situation with COVID-19. Anyone who has already paid for a ticket will be refunded and we will keep you informed about how and when the meeting will take place via email and the RIPE 80 website: https://ripe80.ripe.net ------------------------------------------------------------------- 2. What We’re Doing for You ------------------------------------------------------------------- -- Your LIR Stats LIR STATISTICS Number of LIRs: 25,365 (+62) LIRs with IPv6: 16,475 (+61) Policy transfers in February: 630,528 IPv4 addresses (+137,728) -- Hans Petter Holen Appointed as the RIPE NCC's Managing Director On 11 March 2020, after a thorough interview process, Hans Petter Holen became our new Managing Director. We are thrilled to have him on board and are looking forward to working together to shape the future of the Internet. Welcome Hans Petter! https://www.ripe.net/publications/news/announcements/hans-petter-holen-appo… -- RIPE NCC General Meeting, 13-15 May 2020 The General Meeting will be facilitated remotely and will take place as scheduled on 13 May and stay open until 15 May for the voting results announcement. You will soon receive more information on how to participate and vote remotely. Members will vote on next year’s Charging Scheme and elect three members of the RIPE NCC Executive Board among other updates. You can register at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/registration As of now, there is one confirmed candidate for the RIPE NCC Executive Board: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/confirmed-ca… There are three seats available, and you can nominate candidates at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/nominations-… -- The RIPE NCC Academy We're back up and running at the RIPE NCC Academy. Take a look at our improved platform at: https://academy.ripe.net -- TRA Oman Host Capacity-building Workshop in Oman From 2-4 March 2020, we joined forces with the Telecommunication Regulatory Authority (TRA) in Oman to host a three-day training workshop as part of our collaboration on capacity development. Read about the workshop at: https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc… ------------------------------------------------------------------- 3. Your Technical Update ------------------------------------------------------------------- -- RIPEstat New Transfer History Widgets for RIPE NCC and AFRINIC Resources The new transfer tab now combines transfer information from AFRINIC, APNIC and the RIPE NCC: https://stat.ripe.net/216.236.176.0#tabId=transfers Changes for Geo-IP Information Due to licensing changes, we disabled all Maxmind-related data calls and widgets until further notice. We are reviewing the provisioning of Maxmind data and will follow up soon. As an alternative, we provide geo-ip information based on RIR Stats: https://stat.ripe.net/docs/data_api#rir-geo (data call), https://stat.ripe.net/widget/rir-geo-by-ip#w.resource=2001%3A67c%3A2e8%3A%3… (widget) New RIPEstat UI Since the last update we’ve worked on new navigation, new and improved search controls, new widgets and an updated look and feel: https://beta-ui.stat.ripe.net -- What’s the Deal with IPv6 Link-Local Addresses? Our colleague, Philip Homburg, looked into how IPv6 link-local addresses can impact RIPE Atlas measurements: https://labs.ripe.net/Members/philip_homburg/whats-the-deal-with-ipv6-link-… ------------------------------------------------------------------- 4. What’s Happening in Our Community? ------------------------------------------------------------------- -- Hackathons in the Time of Corona Our hacker and colleague, Vesna Manojlovic, is inviting you to participate to an open-ended online hackathon analysing the health of the Internet during the COVID-19 crisis: https://labs.ripe.net/Members/becha/hackathons-in-the-time-of-corona -- Reporting back from 36c3: Resource Exhaustion Vesna also recently shared her highlights from the 2020 #36c3 event organised by the Chaos Communication Club: https://labs.ripe.net/Members/becha/reporting-back-from-36c3-resource-exhau… -- Focus on: the Anti-Abuse Working Group The Anti-Abuse Working Group is developing solutions to better tackle abuse within our service region. Their mission is three-fold: creating best practices for ISPs (e.g. ripe-409), providing advice and guidance to all stakeholders, and disseminating information on technical and non-technical methods of preventing or reducing network abuse. Interested? Get involved at: https://www.ripe.net/participate/ripe/wg/anti-abuse Thanks for reading and stay healthy! Boris Boris Duval Communications Officer RIPE NCC

1 0