- ripe-list - mailman.ripe.net

RIPE NCC Trust Portal Launched
by Eleonora Petridou 08 May '25

08 May '25

Dear colleagues, We have launched a new Trust Portal to provide greater transparency into our operations and to help members and stakeholders better understand how we manage our security, compliance, and governance: https://trust.ripe.net/ The portal provides a comprehensive overview of how we protect the confidentiality, integrity, and availability of our services. It includes key policies and processes covering information security, data protection, vulnerability management, and incident response. It also highlights our compliance with frameworks like SOC 2 for RPKI services, our progress toward ISO 27001 certification, and adherence to GDPR and other relevant EU regulations. For law enforcement and other competent authorities, the Trust Portal also provides guidance on how to request information from the RIPE NCC, and links to other useful supporting information. We invite you to explore the Trust Portal, and welcome any feedback as we continue improving our transparency. Email security(a)ripe.net if you would like to know more. Kind regards, Eleonora Petridou Chief Information Security Officer RIPE NCC

1 0

Welcome Vasja Križmančič to the RIPE NomCom 2025
by RIPE NomCom Chair 06 May '25

06 May '25

Dear RIPE community, The RIPE NomCom has just passed the following resolution unanimously: Considering that Randy Bush has resigned from the committee and that Vasja Križmančič is the first person on the reserve list, the committee resolves to add Vasja Križmančič as a voting member to the committee effective immediately. We thank Randy for his contributions. Best, Jan Žorž Chair RIPE NomCom 2025

1 0

The RIPE Chair Team Reports - May 2025
by Mirjam Kuehne 06 May '25

06 May '25

Dear colleagues, With less than a week to go until RIPE 90 kicks off in Lisbon, here are some highlights and topics you can expect to be discussed at the meeting. https://labs.ripe.net/author/mirjam_kuhne/the-ripe-chair-team-reports-may-2… Kind regards, Mirjam Kühne RIPE Chair

1 0

RIPE 90 Programme Committee Elections
by Brian Nisbet 06 May '25

06 May '25

Colleagues, The RIPE Programme Committee is responsible for recruiting and selecting presentations for the RIPE Meeting Plenary sessions. As the term of two RIPE PC members end, we are looking for new members in Spring 2025 who will be elected by the RIPE community at RIPE 90. There are currently two seats up for election to the RIPE PC and nominations open today! Please send nominations, with a biography, statement of interest and photograph, to pc(a)ripe.net. RIPE Meeting Programme Committee: Appointment, Roles and Responsibilities - https://www.ripe.net/publications/docs/ripe-pc-appointment-roles-responsibi… - provides more information about the composition and roles of the RIPE PC. Nominations for the RIPE 90 PC elections can be sent in from Tuesday, 6 May, until Tuesday, 13 May, 15:30 (WEST/UTC+1). Please include a recent picture and short biography with your nomination. We will announce the PC elections at the RIPE meeting opening sessions, but interested parties can already nominate themselves. If you are nominating someone else, please ensure that the person concerned is willing to be nominated and is copied on emails sent to the PC. The PC will attempt to confirm that nomination with the nominee before proceeding. We will close candidate nominations on Tuesday, 13 May at 15:30 (WEST/UTC+1) and publish the biographies on the RIPE Meeting web site. The RIPE PC online voting system will be open from Tuesday, 13 May, 16:00 (WEST/UTC+1) until Thursday, 15 May, 17:00 (WEST/UTC+1), for community members to cast their votes. The total voting numbers may be public. The official announcement of the elected RIPE PC members will be on the morning of Friday, 16 May, during the closing plenary session. Important Dates and Deadlines Nominations Open: Tuesday, 6 May Nominations Close: Tuesday, 13 May, 15:30 (WEST/UTC+1) Voting Begins: Tuesday, 13 May, 16:00 (WEST/UTC+1) Voting Closes: Thursday, 15 May, 17:00 (WEST/UTC+1) Results Announced: Friday, 16 May, during the Closing Plenary session If you have any questions, please don't hesitate to email pc(a)ripe.net Regards, Brian On Behalf of the RIPE PC Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Join the RIPE NCC User Research Pool
by Fallon Albrecht 06 May '25

06 May '25

Dear colleagues, We are currently looking for community members and users who are willing to take part in user research. This research helps us understand how people use our platforms and where we can make improvements to make them more intuitive, accessible, and user-friendly. If you choose to participate, you might be invited to join short interviews, usability tests, or other research activities. Your input will help us improve how our platforms and tools work. You can sign up at: https://www.ripe.net/about-us/what-we-do/user-research/ Attending RIPE 90 in Lisbon? We’ll also be conducting live user research sessions during RIPE 90 in Lisbon. We invite you to test our new navigation prototype. We will also show you a quick demo of our OAuth 2.0 authorisation solution. If you’re attending, this is a great opportunity to provide your feedback in person and share your experience directly with our team. You can book your slot at: https://nccsurvey.ripe.net/m6Nk6P <https://nccsurvey.ripe.net/m6Nk6P> Thanks in advance for your time and feedback. Kind regards, Fallon Albrecht and Antonella De Bellis User Research team RIPE NCC

1 0

nomcom withdrawal
by Randy Bush 04 May '25

04 May '25

jan, tl;dr: i wish to withdraw from the nomcom -- as i decided to run for the eb long after the nomcom process started, the letter of 788 would let me stay on both. but that would not be the spirit of 788. withdrawing is just the right thing to do. my apologies for this taking so long. among other things, i was considering doing the reverse, withdrawing from the eb election as i consider the ripe chair to be a critical spof. but friends convinced me to trust the system, the nomcom will do the right thing without me. of course i would have withdrawn from nomcom if elected to the eb. an eb member really really should not wear two hats. analogously, if elected to the eb, i would withdraw from the coc team. apologies for chaos creation, and thanks for understanding. randy

2 1

Feedback on the Draft Governance Document for RIR Recognition and Derecognition
by Abdulrahman Almousa 29 Apr '25

29 Apr '25

Dears, After a review of the “Governance Document for the Recognition, Maintenance, and Derecognition of Regional Internet Registries” draft, I would like to submit the following feedback: *1. Insufficient Clarity Regarding Regional Continuity After Derecognition* *Observation:* The draft outlines the procedures for derecognizing an RIR but *does not provide clarity* on how continuity of Internet number resource management will be maintained in the affected region after derecognition. *Impact:* The absence of a predefined transitional or fallback mechanism poses operational risks for resource holders in the affected region and may jeopardize Internet infrastructure stability at a regional level. *Recommendation:* Including a clear provision specifying: - An obligation to guarantee service continuity for affected resource holders, - A framework for temporary stewardship or reassignment of responsibilities to an interim or existing RIR, - A stakeholder consultation process to guide regional transition planning. This addition would align with the draft's stated goal of safeguarding the reliability and neutrality of the Internet number registry system. *2. Concerns About the Requirement for Unanimous RIR Support for New RIR Recognition* *Observation:* Section 2.3(c) implies that *unanimous support* from all existing RIRs is necessary before forwarding a Candidate RIR proposal to ICANN for final approval. *Impact:* Requiring unanimous agreement effectively grants any single RIR the power to veto the recognition of a new RIR, regardless of demonstrated regional need or readiness. This could inhibit the natural evolution of the registry system, particularly in underserved or emerging regions that meet the technical and governance standards. *Recommendation:* Revising the requirement to allow for a *qualified majority* (e.g., three out of five RIRs) within the NRO Executive Council for forwarding a recognition proposal to ICANN. This change would uphold the principles of collaborative governance without unduly blocking legitimate initiatives. BR, Abdulrahman

1 0

Community Consensus on The Relationship between RIPE and the RIPE NCC
by Mirjam Kuehne 28 Apr '25

28 Apr '25

Dear colleagues, The Last Call for v2 of the draft document The Relationship between RIPE and the RIPE NCC [1] ended earlier this week. We received two small suggestions that helped to improve language and clarity [2]. I am therefore declaring consensus on this document and will ask the RIPE NCC to publish it as a RIPE document. Kind regards, Mirjam Kühne RIPE Chair [1] Draft: The Relationship between RIPE and the RIPE NCC v2 https://www.ripe.net/publications/docs/ripe-documents/other-documents/draft… [2] Changes since v2 of the document: - In section 3 we replaced "vis-a-vis" with "with respect to" - In section 4 we removed the word "big"

1 1

Join us for the RIPE NCC Open House: Updating ICP-2
by Ulka Athale 24 Apr '25

24 Apr '25

Dear colleagues, We invite you to join our online session, "RIPE NCC Open House: Updating ICP-2" with Hervé Clément, Andrei Robachevsky and Constanze Bürger, the NRO NC representatives from the RIPE NCC service region. This session will take place on Tuesday, 29 April at 11:00 CEST (09:00 UTC) Registration is open to all and free: https://www.ripe.net/meetings/open-house/updating-icp-2/ If you would like to add this event to your calendar, please use the link below: https://www.ripe.net/meetings/calendar/ripe-ncc-open-house-updating-icp-2/ The Number Resource Organization Number Council (NRO NC) recently published the draft "RIR Governance Document" intended to update ICP-2, the document that establishes the criteria to recognise Regional Internet Registries: https://www.nro.net/policy/internet-coordination-policy-2/rir-governance-do… There is a community consultation open until Tuesday, 27 May 2025, being held in parallel with an ICANN Public Comment process. Your feedback is also welcome on the RIPE Discussion list as part of the RIPE community consultation. We hope to see you at the Open House! Kind regards, Ulka Athale RIPE NCC www.ripe.net

1 0

RIPE support for CVE foundation
by Michael Richardson 23 Apr '25

23 Apr '25

from a private thread: }The CVE Foundation has been formed to fund the CVE effort, due to }"longstanding concerns among members of the CVE Board about the }sustainability and neutrality of a globally relied-upon resource being tied }to a single government sponsor.": } } https://www.thecvefoundation.org/ I had previous opioned that it was time for EC/EU (maybe NATO) to take on funding this, and to move/replicate the effort outside of MITRE. That was before I knew of the foundation. I think that MITRE has done the best job possible ... for a beltway entity... but that it hasn't been very helpful. 3h webinar required to learn what a CVE is before you can get allocations. yes, useful to the unwashed C* masses... I'm of the opinion that RIPE can and ought to take on a role here as representatives of the ISP operator community. Both in a leadership role and as a source of funding. The FAQ says to contact info(a)thecvefoundation.org, and this email is BCC'ed to them. (Many open source projects get dozens to hundreds of "potential" CVEs from fuzzers who need a CVE number assigned in order to claim a bounty. There is now a cottage industry of fuzzers. It's a perverse result of the bounty programs... creating a huge amount of work to review potential issues, which often are impossible to actually exploit... and never come with fixes) -- Michael Richardson <mcr+IETF(a)sandelman.ca> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide

5 5