- ncc-announce - mailman.ripe.net

[News] 2FA Mandatory on RIPE NCC Access accounts
by Felipe Victolla Silveira 26 Mar '24

26 Mar '24

Dear colleagues, This week, two-factor authentication (2FA) will become mandatory on RIPE NCC Access accounts. If you have not already done so, enable 2FA on your account. For accounts that do not have two-factor authentication, when you try to log in from Wednesday 27 March, you will be prompted to check your inbox and follow the instructions in the email sent to you by the RIPE NCC. Once you have enabled 2FA, you can log in as you usually would. We will continue to improve the security and usability of RIPE NCC Access accounts over the next few months. Next week, I will also publish a RIPE Labs article explaining our roadmap and main improvements planned in more detail. We welcome your feedback and suggestions on which features are the most important for you on the RIPE NCC Services Working Group (ncc-services-wg(a)ripe.net) mailing list. If you have any issues setting up 2FA on your account, please email ncc(a)ripe.net. Kind regards, Felipe Victolla Silveira Chief Technology Officer

1 0

[news] RIPE NCC Member Update: February 2024
by Kjerstin Burdiek 28 Feb '24

28 Feb '24

Dear RIPE NCC members, The February 2024 Member Update is now available on our website. You can access it at: https://www.ripe.net/publications/news/member-update-february-2024/ And the NCC Announce mailing list has now been removed from the LIR Portal. You can subscribe and unsubscribe from this list just as you would with any Mailman list. You can adjust your subscription settings at: https://lists.ripe.net/mailman/listinfo/ncc-announce/ Best regards, Kjerstin Burdiek Communications Officer RIPE NCC

1 0

[news] Invoice 2024 and Payment Extensions
by Simon-Jan Haytink 25 Jan '24

25 Jan '24

Dear RIPE NCC members, The RIPE NCC invoice for 2024 will be issued in the coming days. Invoices will be available in the LIR Portal and sent to all billing contacts (please ensure that your billing contact details are up to date). We ask all members to please follow the process as laid out in the RIPE NCC Billing Procedure 2024: https://www.ripe.net/membership/member-support/payment/ripe-ncc-billing-pro… Payment Extensions We have granted payment extensions to members in Ukraine for the past two years due to war taking place there and the difficulties some Ukrainian members have had in paying their invoices. For the 2024 invoicing period, we will apply the normal invoicing approach to all of our members including those in Ukraine. The majority of members in Ukraine have paid their invoices, so we expect that this will affect fewer than 100 members. We will email our Ukrainian members separately to explain this change. We are conscious that some members will still need payment extensions and we will provide these on a per-request basis to members in countries in our service region that are experiencing war in their country. This approach will help to ensure that members are not accumulating debts that might be difficult for them to pay in subsequent years. And it will allow the RIPE NCC to have a more sustainable income stream while accommodating those members who need an extension. To request an extension we ask that members fill out the form at: https://www.ripe.net/participate/forms/apply/payment-extension-form/ Please note that because our billing reminders are automated, we will continue to send billing reminders even when an extension has been granted. If a payment extension has been granted, you should ignore these reminders. Kind regards, Simon Jan Haytink Chief Financial Officer RIPE NCC

1 0

[news] RIPE NCC Member Update: January 2024
by Kjerstin Burdiek 25 Jan '24

25 Jan '24

Dear RIPE NCC members, The January 2024 Member Update is now available on our website. You can access it at: https://www.ripe.net/publications/news/member-update-january-2024/ As you will see, ripe.net has recently been redesigned and has a fresh new look. Our website is now more mobile- and tablet-friendly and also features other accessibility and performance improvements. We’ve also made News more prominent on the home page - we plan to use this more than email to update our members, so make sure to check in regularly and sign up for RSS feeds. After you finish the update, take a look around and let us know what you think! Best regards, Kjerstin Burdiek Communications Officer RIPE NCC

1 0

[meeting] Register Now for RIPE 88!
by RIPE Meeting 23 Jan '24

23 Jan '24

Dear colleagues, You can now register for the RIPE 88 Meeting at: https://ripe88.ripe.net/attend/register/ RIPE 88 will take place at Metropolo Hotel by Golden Tulip in Krakow, Poland from 20-24 May 2024. ------------- Ticket Options ------------- Week ticket: EUR 400 Day ticket: EUR 130 Student (week) ticket: EUR 50 There is an early bird rate available until 1 March 2024. You can find more information about ticket options at: https://ripe88.ripe.net/attend/register/ ------------ Call for Presentations ------------- The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of Feather sessions), workshops, tutorials and lightning talks at RIPE 88. Proposals must be submitted for full consideration no later than 11 March. More information at: https://ripe88.ripe.net/submit-topic/cfp/ ------------- Call for Sponsors ------------- Supporting a RIPE Meeting through sponsorship gives your organisation fantastic exposure in the global Internet community. Get in touch with the RIPE Meeting team if you are interested in sponsoring RIPE 88: https://ripe88.ripe.net/sponsors/become-a-sponsor/ ------------- RIPE Fellowship ------------- If you are in the RIPE NCC service region and need financial assistance to attend RIPE 88, please consider applying for a RIPE Fellowship. We will cover travel, accommodation and a full-week meeting ticket. Apply before 25 February at: https://www.ripe.net/participate/ripe/ripe-fellowship ------------- RACI ------------- The RIPE Academic Cooperation Initiative (RACI) will cover the cost of the meeting ticket, travel and accommodation for successful applicants to present their research at RIPE 88. Apply before 25 February at: https://www.ripe.net/raci/ ------------- Accommodation ------------- We have blocked rooms for RIPE 88 attendees at Metropolo Hotel, which are subject to availability. Reserve now to ensure accommodation at the meeting venue: https://ripe88.ripe.net/attend/accommodation/ ------------- On-site Childcare ------------- We're making it easier for parents to fully participate in the RIPE Meeting by offering professional, on-site childcare at the meeting venue for children aged 6 months to 10 years. Space is limited, so be sure to register before 5 May to confirm your child's place. For more information, visit: https://ripe88.ripe.net/attend/diversity/childcare/ ---------------- Important Dates and Deadlines ---------------- RACI: 25 February RIPE Fellowship: 25 February Accommodation: A block of rooms has been reserved for RIPE Meeting attendees until 3 May, based on first-come, first-served basis. RIPE 88 CfP: 11 March RIPE 88: 20-24 May On-site childcare: First come, first served – limited places available until 5 May. More information on RIPE 88 can be found at: https://ripe88.ripe.net/ Track the #RIPE88 hashtag on social media for the latest updates. See you in Krakow! Kind regards, RIPE 88 Meeting Organisation Team

1 0

[news] Decommissioning of the Recognised IPv4 Transfer Brokers List and IPv4 Transfer Listing Service Completed
by James Kennedy 18 Jan '24

18 Jan '24

Dear members, Following our announcement on 20 November 2023 [1], the IPv4 Transfer Listing Service has now been decommissioned and the Recognised IPv4 Transfer Brokers List has been removed from our website. This follows a decision taken by the Executive Board in October 2023 [2]. Regards, James Kennedy Chief Registry Officer RIPE NCC [1] 20 November 2023 announcement: https://www.ripe.net/ripe/mail/archives/ncc-announce/2023-November/001685.h… [2] 168th Executive Board Meeting Minutes: https://www.ripe.net/about-us/executive-board/minutes/2023/minutes-168th-ex…

1 0

[News] Security Breach: Investigation Update
by Hans Petter Holen 10 Jan '24

10 Jan '24

Dear members, We recently informed you about our investigation into the breach of a member’s RIPE NCC Access account. A more detailed post-mortem analysis, including root causes and mitigations, will be published once the incident has been closed. In the meantime, we would like to inform you about our actions so far and next steps: - We have worked with the affected member to restore services to them. - If we believe that an account is at risk, based on notification from our threat intelligence provider or other sources, we force a password reset and inform the account holders. We are currently looking into automating this process. On average, we reset around 10 passwords per week. - We are performing targeted research to identify leaked RIPE NCC Access accounts in public data breaches. As a precautionary measure, we have forced a password reset on 800 accounts identified as vulnerable and notified the account holders. - The plans for our engineering teams are being reviewed in light of this incident. We are evaluating suggestions for improvement received alongside our existing plans. Our roadmaps will be updated accordingly. - We have decided to make two-factor authentication mandatory for RIPE NCC Access accounts and will prioritise the implementation. More details will be shared on the RIPE NCC Services WG mailing list once the timeline is finalised. ------------------------------- Two-Factor Authentication ------------------------------- If you have not already done so, enable two-factor authentication on your RIPE NCC Access account. Using two-factor authentication across all of your accounts can reduce your exposure to attacks like these. The guide for setting up two-factor authentication on your Access account can be found at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… —-------------------------- Secure Your Account —-------------------------- Please follow our recommendations to help secure your RIPE NCC Access account: - Avoid reusing passwords for login credentials. - Use a password manager to automatically create random passwords and store them. - If you use a password management tool, we recommend that you enable data breach monitoring for your own credential or use https://haveibeenpwned.com/ or similar services. - Please review the accounts associated with your LIR, restrict access to necessary personnel only and remove former employee accounts. If you choose to create your own password: - Passwords are secret. Keep them so. - Use long passwords of at least 14 characters. - Do not reuse passwords. - Use a password manager to remember your password. - If a random password is impractical, use a passphrase instead. If you believe that your account might be vulnerable, please report this to security(a)ripe.net. Details about our technical emergency hotline are available at: https://www.ripe.net/support/contact/technical-emergency-hotline. Kind regards, Hans Petter Holen Managing Director and CEO, RIPE NCC

1 0

Security Breach: Please Enable Two-Factor Authentication
by Hans Petter Holen 04 Jan '24

04 Jan '24

Dear colleagues, In light of the recent incident where a RIPE NCC Access account was compromised, we urge you to review your own account security. ------------------------------- Two-Factor Authentication ------------------------------- If you have not already done so, enable two-factor authentication on your RIPE NCC Access account. Using two-factor authentication across all of your accounts can reduce your exposure to attacks like these. The guide for setting up two-factor authentication on your Access account can be found at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… ------------------------------- Password Recommendations ------------------------------- We also encourage account holders to change their Access account password and follow these recommendations: - Avoid reusing passwords for login credentials. - Use a password manager to automatically create random passwords and store them. - If you use a SaaS based password management tool, enable dark web monitoring for your own credentials. If you choose to create your own password: - Use at least 14 characters to create a password. - Using passphrases can be helpful such as a favourite quote, fictional character name or line of song to greatly increase the length of the password while also making it easier to remember. We are currently investigating the compromise of the RIPE NCC Access account and continue to work with the account holder in question. We would also like to share that we are routinely responding to notifications of possible public breaches containing RIPE NCC Access accounts and actively resetting account passwords while notifying the account holders. In line with the previous resolution by the Executive Board, we are reporting all cases of attempted fraud to the Dutch authorities: https://www.ripe.net/about-us/executive-board/minutes/2017/minutes-110th-ex… Rest assured that the RIPE NCC is committed to taking the necessary steps to ensure the security of our services. We are currently investigating how we can change our roadmaps to make two-step verification mandatory for all RIPE NCC Access accounts as soon as possible and, in the longer term, offer a wider variety of verification mechanisms. If you suspect that your account might be impacted, please report it to security(a)ripe.net. Kind regards, Hans Petter Holen Managing Director and CEO, RIPE NCC

1 0

[news] 172nd RIPE NCC Executive Board Meeting - Summary Notes
by Hans Petter Holen 29 Dec '23

29 Dec '23

Dear RIPE NCC members, The RIPE NCC Executive Board held its 172nd Meeting on 13-14 December 2023. The minutes are now available. Minutes of the 172nd Meeting: https://www.ripe.net/about-us/executive-board/minutes/2023/minutes-172nd-ex… The Executive Board publishes the minutes of its meetings so that the workings of the Board and the decisions it makes are transparent to the membership it represents. The following is a summary of the main items from the meeting. Further details are available in the minutes. ------------------------------- Main Items ------------------------------- - Hisham Ibrahim, Chief Community Officer, presented on the Community and Engagement activities undertaken in 2023. He asked the Board to reconsider adding a budget to supplement national engagement efforts based on feedback heard from members at the General Meeting and at RIPE 87. The Board agreed to continue supporting these efforts and the Activity Plan and Budget 2024 was amended accordingly following a Board resolution. - James Kennedy, Chief Registry Officer, reported on the Registry service levels in 2023 and the sanctions compliance efforts. A community consultation will be held in 2024 to establish a general consensus on the RIPE NCC’s role in relation to the IPv4 market. - There were discussions on the budget, presented by Simon-Jan Haytink, Chief Financial Officer, including high-level estimates for the years 2025-27. - A discussion on the country code status for Kosovo was continued, and the RIPE NCC recommended maintaining the status quo and to continue to follow the ISO 3166-1 list for officially assigned country codes.The ISO 3166-1 Maintenance Agency only assigns codes after the UN recognition. Any interested party can engage with their national diplomatic services in order to establish a formal status for Kosovo in the UN. - The Board selected three new committee members for the selection committee of the RIPE NCC Community Projects Fund - Lidia Stępińska-Ustasiak, Sami Salih and Nuno Garcia, and thanked the outgoing members for volunteering their time. - Eleonora Petridou, Chief Information Security Officer, shared the new Risk Appetite Statements based on the redesigned Risk Management Framework. Rather than having a single risk appetite that would apply to the entire RIPE NCC, a more fine-grained solution with risk appetites applied for different areas such as financial, legal and organisational risk is proposed. - For Technology, the 2023 update and 2024 objectives were shared. This includes having a solid cloud strategy (offer on-premise and cloud solutions), modernising the Hadoop cluster by building a tiered storage solution, ensuring uptime of critical services, replacing SSO of the LIR Portal (KeyCloak), keeping costs within budget and increasing employee engagement. Some of the other topics under discussion included: - The HR status and benchmarking report for 2023 and plans for 2024 - A consultation with the Works Council (Ondernemingsraad) of the RIPE NCC - A review of the General Meeting November 2023 - An update from the RIPE Chair and a discussion on RIPE Meetings - Support for the Rob Blokzijl Foundation - The latest developments in AFRINIC - The joint board meeting between APNIC and the RIPE NCC ------------------------------- Resolutions Adopted ------------------------------- - The RIPE NCC Executive Board approves the minutes of EB#168, EB#169, EB#170 and EB#171. - The RIPE NCC Executive Board appoints Lidia Stępińska-Ustasiak, Sami Salih and Nuno Garcia to the available seats on the Community Projects Fund Selection Committee to serve a minimum term of one year and a maximum of three years. - The Board agrees to donate 50 kEUR to the Rob Blokzijl Foundation for the foundation to support its mission. - The RIPE NCC Executive Board approves the risk appetite statements as presented during EB#172. - The RIPE NCC Executive Board approves the publication of the RIPE NCC Activity Plan and Budget 2024, with the addition of 200 kEUR budget in External Engagement and Community. Kind regards, Hans Petter Holen Managing Director and Chief Executive Officer RIPE NCC

1 0

[news] RIPE NCC Activity Plan and Budget 2024 Published
by Hans Petter Holen 28 Dec '23

28 Dec '23

Dear RIPE NCC members, The RIPE NCC Activity Plan and Budget 2024 is now available. This document has been approved by the RIPE NCC Executive Board with input from our membership. It outlines the work we will undertake in the coming year and the associated costs for each activity. The document is available at: https://www.ripe.net/publications/docs/ripe-814/ The top five areas for cost savings compared to the 2023 budget are: - 1.9 M EUR (36%) Consultancy - 0.8 M EUR (18%) Information Technology - 0.2 M EUR (6%) Outreach & Public Relations - 0.3 M EUR (20%) Contributions - 0.2 M EUR (21%) Travel Key points in the 2024 Activity Plan and Budget: - 1.8M EUR decrease compared to the 2023 Budget - We expect to start 2024 with 21,500 LIR accounts - The Membership fee remains unchanged in 2024 at EUR 1,550 - Cost per LIR expected to be EUR 1,777 (1% increase) A section at the end of the document notes changes since the draft was published in October. During its December meeting, the Executive Board decided to allocate an additional 200 kEUR to fund national outreach efforts after hearing feedback from members during the RIPE Meeting and at the November 2023 General Meeting on the negative impact removing this funding could have on the community. All budget figures have been updated accordingly. Other changes include minor editorial changes, minor rounding changes and additional information on the following topics: - Decommissioning of the IPv4 Transfer Listing Service - Planned consultation on retiring the Secondary DNS service to LIRs - RIPEstat UI - Planned consultation on establishing a Mastodon instance - Clarified our share of the NRO ICANN contribution for IANA number functions Kind regards, Hans Petter Holen Managing Director and Chief Executive Officer RIPE NCC

1 0