Dear colleagues, The RIPE NCC is continuing to improve and enhance the Resource Certification (RPKI) service that was launched in 2011 in order to make our registry more robust and BGP routing more secure. As announced at RIPE 64, the main focus of our activities has been on security, resilience and operator autonomy. Most of this work has been at the back end, so users will not have noticed any visible changes in the system for quite some time. Today, I am proud to announce a major improvement to the service that can be experienced by all members: the new Resource Certification Management Interface. The standard for usability was set by the RIPE NCC RPKI Validator toolset, and the bar has been raised by this new LIR Portal interface to manage Route Origin Authorisations (ROAs). It sets a new standard in the services we offer to our members and the community, with an extreme focus on quality and user friendliness. The main driver for this has been the community wish for a high quality RPKI dataset, so operators can base reliable routing decisions on it. In order to achieve this, we have added some remarkable features: - There is a product tour to guide new users through the basic concepts of RPKI and BGP Origin Validation - The system can suggest ROAs to users, helping them to authorise legitimate BGP announcements - We offer a fine-grained, highly configurable alerting system, notifying users of BGP hijacks and configuration errors If you are a RIPE NCC member, please try out the new Resource Certification (RPKI) system and authorise all legitimate BGP announcements with your address space by creating ROAs for them. It is available at: https://certification.ripe.net (requires LIR Portal login) To use BGP Origin Validation in your routing workflow, please use the RIPE NCC RPKI Validator toolset. It is compatible with all Cisco and Juniper platforms that offer support for BGP Origin Validation. Learn more at: https://ripe.net/certification/validation Kind regards, Alex Band Product Manager RIPE NCC