Dear all, At its 188th RIPE NCC meeting on 4-5 September 2025, the RIPE NCC Executive Board approved amendments to the RPKI (RIPE NCC Certification Service, Publish-in-Parent, Repository) Terms and Conditions. These changes are in response to the EU regulation Digital Operational Resilience Act (DORA) which came into effect in January 2025. While the requirements apply to financial institutions, the RIPE NCC aims to facilitate the implementation of this regulation for those entities that are RIPE NCC members to a reasonable extent. The following changes includes: Adding details of how we manage planned maintenance, how incidents can be reported and security measures and audits in relation to RPKI (in article 6 of Publish in Parent Service, 4 of Certification Repository and 4.3-4.7 Certification Services) Adding subcontractor, service level and data protection information (in article 8.5-8.7 of Publish in Parent Service, 6.4-6.6 Certification Repository and 7.5-7.7. Certification Services) The updates to the Terms and Conditions also include the addition of three new RPKI object types (ASPA, BGPsec and RSC) which will be implemented at a later stage. The updated RPKI terms and conditions are available at: https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/legal/ripe... https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/legal/ripe... https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/legal/ripe... The RIPE NCC Executive Board Meeting minutes are available at: https://www.ripe.net/about-us/executive-board/minutes/2025/188th-executive-b... You can find more information about DORA and other relevant regulations in the RIPE NCC Trust Portal: https://trust.ripe.net/legal-compliance/ The amendment will come into effect on 13/11/2025. Kind regards, Karolina Bochenek RIPE NCC