- db-wg - mailman.ripe.net

[Fwd: [db-wg] RIPE51 DB-WG Draft Agenda V1]
by Wilfried Woeber, UniVie/ACOnet 11 Oct '05

11 Oct '05

Dear DB-WG folks, Chairs, Meeting! Here is the 2nd draft of an agenda for the DB-WG next week at RIPE51 in Amsterdam. For time slot allocation please refer to the most up-to-date meeting plan at http://www.ripe.net/ripe/meetings/ripe-51/meeting-plan.html Best regards, Wilfried. ________________________________________________________________________ A. Administrative Matters - scribe - list of participants - agenda - minutes - "remote participation" coordination (if needed) B. DB Update (N.N., RIPE NCC) [~15 min] C. Review of security mechanisms in the DB (Peter K., denic.de) [~15 min] . quality of CRYPT-PW, CRYPT-MD5, X.509 . level of vulnerabilty in current dataset D. State of whois services, developments? (WW144, N.N., RIPE NCC) [~15 min] E. IRIS pilot frontend to whois (N.N., RIPE NCC) [~10 min] F. Fact finding: RoutingReg facilities at RIRs (Gert D, SpaceNet) [~15 min] X. Impact of "PDP" on how the DB-WG operates (WW144) [~15 min] . ref: https://www.ripe.net/ripe/docs/ripe-350.html Y. Input from other WGs . DNS: secureDNS requirements for the DB Z. AOB

2 1

Draft Minutes for DB-WG RIPE 50
by Titley, Nigel 11 Oct '05

11 Oct '05

Gentlefolk, Apologies for the lateness of these minutes. My only excuse is that I wasn't there, but I must emphasise that the scribe did actually pass on the minutes straight after the meeting. On the positive side, the only action that came out of the meeting was on Wilfried, so you can all breathe easily (apart from Wilfried). Best regards Nigel -- Nigel Titley Peering Coordinator, FLAG Telecom +44 20 8564 5812 ********************************************************************** This e-mail message is confidential and is intended only for the use of the individual or entity named above and contains information which is or may be confidential, non-public or legally privileged. Any dissemination or distribution of this message other than to its intended recipient is strictly prohibited. You should not copy it or use it for any purpose nor disclose the contents to any other person. If you have received this message in error, please notify us by email to postmaster(a)flagtelecom.com immediately and delete the original message and all copies from all locations in your computer systems. This e-mail has been swept by Mailsweeper TM for viruses. However, FLAG Telecom cannot accept liability for any damage which you may sustain as a result of software viruses. ********************************************************************** This message has been scanned for viruses by MailControl - www.mailcontrol.com

1 0

RIPE51 DB-WG Draft Agenda V1
by Wilfried Woeber, UniVie/ACOnet 05 Oct '05

05 Oct '05

Dear DB-WG folks, Chairs, Meeting! Here is the 1st draft of an agenda for the DB-WG next week at RIPE51 in Amsterdam. For time slot allocation please refer to the most up-to-date meeting plan at http://www.ripe.net/ripe/meetings/ripe-51/meeting-plan.html Comments and additional topic proposals requested. Pesentations which might be of particular interest for those actively contributing ideas and expertise to DB-development: Tue. 18. Certificates and IP Addresses. Fri. 25. DNSSEC Deployment. and a presentation on (a) new whois interface(s) t.b.c. For a complete list of plenary presentations please have a look at http://www.ripe.net/ripe/meetings/ripe-51/presentations/plenary-monday.html Looking forward to meet many of you next week in Amsterdam, Wilfried. PS: kudos to everyone involved in making the "Summary of Changes in Recent RIPE Documents" at http://www.ripe.net/ripe/docs/updates.html available on the web. THANKS!! ________________________________________________________________________ A. Administrative Matters - scribe - list of participants - agenda - minutes - "remote participation" coordination (if needed) B. DB Update (N.N., RIPE NCC) [~15 min] C. Review of security mechanisms in the DB (Peter K., denic.de) [~15 min] . quality of CRYPT-PW, CRYPT-MD5, X.509 . level of vulnerabilty in current dataset D. state of whois services, developments? (WW144, N.N., RIPE NCC) [~15 min] X. Impact of "PDP" on how the DB-WG operates (WW144) [~15 min] . ref: https://www.ripe.net/ripe/docs/ripe-350.html Y. Input from other WGs . DNS: secureDNS requirements for the DB Z. AOB

1 0

RIPE NCC Service Interruption on 29 September
by Ruud de Kooter 04 Oct '05

04 Oct '05

Dear Colleagues, As we announced on 29 September, there was an unexpected disruption to our whois and web services between 05:10 and 06:00 UTC. Our investigations have shown that the problem was caused by an increasing traffic load and a growing number of peers on one of our routers. We made some configuration changes to improve load balancing between our border routers. This should prevent any similar problems from occurring in the future. We apologise for any disruption or delay this may have caused. If you have any further questions about this matter, please send an e-mail to <ops(a)ripe.net>. Regards Ruud de Kooter RIPE NCC

1 0

RIPE NCC Service Interruption
by RIPE NCC Operations 30 Sep '05

30 Sep '05

[apologies for duplicate mails] Dear Colleagues, >From 07:00 until 08:00 GMT, the RIPE NCC experienced an unexpected disruption to services. Although this may have caused delays to updates to the RIPE Whois Database, these updates have been processed normally. The disruption may have also affected some of these RIPE NCC services: - whois.ripe.net - www.ripe.net - lirportal.ripe.net - ns*.ripe.net - ftp.ripe.net - www.aso.icann.org - www.nro.net - k.root-servers.org (Global node at the AMS-IX) - AS112.ripe.net We apologise for any interruption or delay to services. If you have any questions or concerns regarding this issue, please contact <ops(a)ripe.net>. Regards, RIPE NCC Operations

3 2

whois.ripe.net
by Ulisses 29 Sep '05

29 Sep '05

Hello anybody knows if this is the right place to talk about about the whois.ripe.net server's service? I'm not sure if it is only about the whois package or also the service, if not what is the right place? Thanks in advance Ulisses Debian GNU/Linux: a dream come true ----------------------------------------------------------------------------- "Computers are useless. They can only give answers." Pablo Picasso "Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it." - Brian W. Kernighan

2 1

Prototype IRIS server deployed at the RIPE NCC
by Peter Banik 28 Sep '05

28 Sep '05

Dear Colleagues, As part of a project to implement the IRIS protocol (also known as CRISP), the RIPE NCC has set up a prototype IRIS server for public testing. We announced this project during the RIPE 49 Meeting in Manchester: http://www.ripe.net/ripe/meetings/ripe-49/presentations/ripe49-db-crisp-upd… We have set up the prototype server as a proxy in front of the RIPE Whois Database. It is based on the FlowerBed server implementation developed by VeriSign Labs: http://iris.verisignlabs.com/blojsom/blog/iris/flowerbed/ The server uses the AREG protocol, you can find more information about this at: http://www.ietf.org/internet-drafts/draft-ietf-crisp-iris-areg-12.txt We have developed a prototype Perl client that can be used to make queries to AREG servers. This is not a complete client implementation, but we have made it available as we feel it will be useful for those that want to test the service. A web interface for querying the prototype server is available at: http://www.ripe.net/cgi-bin/test-iris/areg-query.pl You can find more details about this project at: http://www.ripe.net/db/iris-pilot/ Regards, Peter Banik RIPE NCC

1 0

Updated syncupdates?
by Peter Schroeder 27 Sep '05

27 Sep '05

Hello, I am a consultant working to develop software that will aid in keeping entries in the RIPE database up-to-date. I've been working to get a local version of the RIPE database running for our testing purposes. We're using the syncupdates interface to make changes in the database but it seems out-of-date because it is using command line switches in dbupdate that are no longer valid. Is there a newer version than 1.0.1? Thanks in advance, Peter Schroeder

4 4

Proposed changes for object ordering
by hairy 19 Sep '05

19 Sep '05

Hi, when will these changes be implemented? Will we know when the change occurs?

2 1

DNSSEC deployment on the reverse tree.
by Henk Uijterwaal 12 Sep '05

12 Sep '05

Dear Colleagues, In June, Olaf Kolkman wrote: >The RIPE NCC has been involved with the development of the DNSSEC >protocol. Now that the protocol has become available, we plan to >implement DNSSEC on our domains in the reverse DNS tree. The >deployment of DNSSEC is the second and last phase of the Reverse DNS >restructuring project. [...] >We welcome your feedback on this poposal before 1 August 2005. Please >send your comments to the DNS Working Group Mailing List. The comment period was extended to 1 September and some comments were posted to the list. These have all been incorporated and the new documents are at: >You can find the proposed policy at: > ><http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html>http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html. > "DNSSEC Key Maintenance Procedure" > ><http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html>http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html > "Procedure for Requesting DNSSEC Delegations" > ><http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html>http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html I'm going to suggest to the chairs of the WG to do a last call on these documents and have them published as RIPE documents. Kind regards, Henk ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.amsterdamned.org/~henk P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ Look here junior, don't you be so happy. And for Heaven's sake, don't you be so sad. (Tom Verlaine)

1 0

RIPE Policy Development Process
by Paul Rendek 01 Sep '05

01 Sep '05

Dear Colleagues We are pleased to announce that Rob Blokzijl, RIPE Chair, has published a new RIPE Document, "Policy Development Process in RIPE", (ripe-350). This document formally describes the policy development process. The updated process is operational from today, 1 September 2005. A new RIPE web page describes all the active policy proposals and their status. Each proposal has a page showing its history, status and all supporting documentation. This page can be found at: http://www.ripe.net/ripe/policies/proposals/index.html A new mailing list <policy-announce(a)ripe.net> has been created for announcing policy proposals and tracking them through the policy development process. This is not a discussion list; discussions will continue to take place on relevant RIPE Working Group lists and at RIPE Meetings. You can subscribe to the policy-announce list at: http://www.ripe.net/mailman/listinfo/policy-announce List archives are available at: http://www.ripe.net/ripe/maillists/archives/policy-announce/ Kind regards Paul Rendek Head of Member Services and Communications RIPE NCC

1 0

call for items for the DB-WG meeting, RIPE51, Amsterdam
by Wilfried Woeber, UniVie/ACOnet 01 Sep '05

01 Sep '05

The next RIPE meeting ( http://www.ripe.net/ripe/meetings/ripe-51/ ) is coming closer, and I have already collected a couple of suggestions for the DB-WG Meeting [1]. So this is a call for suggestions of items for the draft agenda. As I am going to be off the net for the next 2 weeks, please cc: Nigel Titley in case you want to reply to me individually, or to the list. Thanks, and see you in Amsterdam! Wilfried. [1] . impact of the new PDP ("policy" development process) . secureDNS requirements for the DB . whois functionality/service - follow-up (tbc)

2 2

Database Loading Error
by Peter Schroeder 31 Aug '05

31 Aug '05

Hello, I have been trying to set up a local snapshot of the RIPE database. I have been receiving this error after several hours of loading data: query not defined for this type of attribute[74] died: +781 modules/ud/ud_core.c ./load_all.sh: line 1: 29427 Broken pipe cat ./load_all.sh: line 72: 29425 Broken pipe ${UNZIP1} ${object_file} 29426 Exit 141 | eval ${FILTER} 29428 Segmentation fault | $LOADER -L $1 -p ${PROPERTIES} -s ${SOURCE} I am using ripe.db.gz from a few days ago. Does anyone know why I would be getting this error? Pete

1 0

To post to this list
by contact＠internetprogress.org 12 Aug '05

12 Aug '05

To post to this list, my emailadress : contact(a)internetprogress.org Sincerely, Guy Lombart

1 0

Database updates not visible
by Shane Kerr 11 Aug '05

11 Aug '05

Dear Colleagues Our query servers are not synchronising with our update server. A large update is taking place. You may have received an acknowledgement to your update, but do not see your changes when you query the database. Do not worry, the changes have been made, and will be visible as soon as we can update our query servers. If you have not received an acknowledgement to your update, please be patient. The server will process your update as soon as possible. Apologies for any inconvience. -- Shane Kerr Software Engineering Department Manager RIPE NCC

1 1

Anything wrong with RIPE DB?
by Marcus.Ruchti＠colt.net 11 Aug '05

11 Aug '05

Hi all, Do you know if anything happened with the RIPE DB last evening or even this morning? Our RIPE robot, reading out AS-sets and route objects, deleted a lot of prefixes. Started just a few minutes ago again without any changes to the Robot we got many prefixes back. This was of course service affecting for single-homed PI customers :-( Now I wonder if RIPE is doing something with the DB. I've seen the output has been changed (reduced mainly) but this does not affect my script. So any hints from your side are appreciated. Thanks Marcus Ruchti COLT Telecom, Frankfurt ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security(a)colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

2 1

RIPE DB question
by Dmitry Kiselev 05 Aug '05

05 Aug '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! Can I delete aut-num object from RIPE DB if it registered by me (as LIR) for one of our customers and I have NO auth info refered by object's mnt-by field? In different way question may sound like: how can I return registered resources (PI/ASN) if my customer gone? What is BCP within LIRs for this case? Thanks for advices! P.S. If I choise wrong WG, don't hit me too much ;) :) - -- Dmitry Kiselev -----BEGIN PGP SIGNATURE----- iD8DBQFC8csaZaocAwQhSAQRAhg7AKChkv2sTl4qBoRcnFxAMqYGEQ5kCACbBacj KvojUT8PbYFXR/emNFga9EM= =IFJU -----END PGP SIGNATURE-----

8 13

mntner creation
by Ulf Kieber 01 Aug '05

01 Aug '05

Hi all, did I miss something or since when does the RIPE DB permit creation of mntner objects by direct mail. Several of our customers have started creating mntners ad libitum and the mntner creation feature on lirportal.ripe.net has become pretty superfluous. -- Ulf Kieber email: ukieber(a)cogentco.com Sr. Network Engineer voice: +49-69-299896-21 C.C.D. Cogent Communications Deutschland GmbH fax : +49-69-299896-40 Optical Internet www : www.cogentco.com Brilliantly Fast. Elegantly Simple. AIM : ulfkieber

2 1

Wierd output of whois/database
by Matthew Smith 25 Jul '05

25 Jul '05

Hi all, if this is the wrong list, then please point me in the right direction. I am first assuming that I have done something wrong. I should have a role 'AHM' with two person objects (MS33051-RIPE and DB). The whois output (below) also gives two further records at the end which I cannot fathom how or why they appear. Comments please Regards Matthew msmith:mlnet%whois -h whois.ripe.net -- -B AHM % This is the RIPE Whois query server #1. % The objects are in RPSL format. % % Note: the default output of the RIPE Whois server % is changed. Your tools may need to be adjusted. See % http://www.ripe.net/db/news/abuse-proposal-20050331.html % for more details. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Information related to 'AHM' role: Aexiomus Hostmaster address: Aexiomus Limited address: United Kingdom phone: +44-906-7530143 fax-no: +44-906-7530143 e-mail: hostmaster(a)aexiomus.net e-mail: hostmaster(a)aexiomus.net.uk admin-c: DB tech-c: DB tech-c: MS33051-RIPE nic-hdl: AHM mnt-by: AEXIOMUS-MNT mnt-by: MLNET-MNT notify: hostmaster(a)aexiomus.net.uk source: RIPE changed: hostmaster(a)aexiomus.net.uk 20050504 person: Denesh Bhabuta address: PO Box 2023 address: Wickford address: SS12 9RX address: United Kingdom phone: +44-906-7530143 e-mail: denesh(a)cyberstrider.net e-mail: denesh(a)aexiomus.net.uk e-mail: denesh(a)bhabuta.co.uk e-mail: denesh(a)dbcl.net nic-hdl: DB mnt-by: AEXIOMUS-MNT changed: hostmaster(a)cyberstrider.net 20000821 changed: hostmaster(a)cyberstrider.net 20020208 changed: denesh(a)aexiomus.net.uk 20020515 changed: denesh(a)aexiomus.net.uk 20030630 source: RIPE person: Matthew Smith address: ML Associates, 11 Grove Lane, Great Kimble address: Aylesbury, Bucks, HP17 9TR, UK phone: +44-20-7871-0604 e-mail: hostmaster(a)aexiomus.net e-mail: matthew(a)aexiomus.net e-mail: m(a)mlnet.co.uk e-mail: hostmaster(a)mlnet.net remarks: skype: monthemove nic-hdl: MS33051-RIPE mnt-by: AEXIOMUS-MNT mnt-by: MLNET-MNT source: RIPE changed: m(a)mlnet.net 20050429 changed: m(a)mlnet.net 20050526 % Information related to 'DB' person: SAIDUR AHM RAHMAN address: RAHMAN SAIDUR AHM address: VIA BARTOLOMEO CRISTOFORI 11 address: 00100 ROMA address: Italy phone: +39655302089 fax-no: +39655302089 nic-hdl: SAR32-RIPE changed: order.manager2(a)telecomitalia.it 20041022 source: RIPE % Information related to 'SAR33-RIPE' person: SAIDUR AHM RAHMAN address: RAHMAN SAIDUR AHM address: VIA BARTOLOMEO CRISTOFORI 11 address: 00100 ROMA address: Italy phone: +39655302089 fax-no: +39655302089 nic-hdl: SAR33-RIPE changed: order.manager2(a)telecomitalia.it 20041022 source: RIPE

3 3

Signature expiration check proposal
by Katie Petrusha 25 Jul '05

25 Jul '05

Dear Colleagues, This is a proposal about changes to how the whois database software checks PGP and X.509 signatures on incoming updates. Currently the software checks that the PGP signature is valid by using Gnu Privacy Guard (GnuPG). It verifies X.509 signatures with an OpenSSL (Secure Sockets Layer) tool. We propose to change the software, so that it also checks the signature creation date. If the signature is older than one week, it will be rejected and the update will fail. This is to prevent replay attacks on database objects. We became aware of this potential threat when we designed the DNSSEC provisioning system. -- Katie Petrusha RIPE NCC

2 1

Proposed changes for object ordering
by antointhe 20 Jul '05

20 Jul '05

An ordinary user writes: This is just great! No wonder they disposed of 'Mr Post Office' (hint). Look guys, I've got ppl scanning me all over and I can't even find out who it is. I have little time for the anticipated learning curve and I don't know if some fanatic wants to turn my machine into a bot or its just windows doing its thing. I have a feeling sensible folks like yourselves have anticipated situations like this and have tools around to help. The only query engine output is duplicated at my firewall. Is it possible that some of you have interests elsewhere? Not advisable in these days of insurgency... Best Regards antointhe

1 0

Announcement Routing Registry Training Courses
by RIPE NCC Training Services 19 Jul '05

19 Jul '05

Dear Colleagues The RIPE NCC Training Services Department invites you to register for one of our upcoming Routing Registry Training Courses: Date: Friday 19 August 2005 Time: 0900 - 1700 Location: Amsterdam, the Netherlands AND: Date: Friday 21 October 2005 Time: 0900 - 1700 Location: Sofia, Bulgaria AND: Date: Friday 28 October 2005 Time: 0900 - 1700 Location: Oslo, Norway AND: Date: Friday 4 November 2005 Time: 0900 - 1700 Location: Edinburgh, United Kingdom AND: Date: Friday 25 November 2005 Time: 0900 - 1700 Location: Munich, Germany The main objective of the "Routing Registry Training Course" is to familiarise the LIRs with the features of the Routing Registry, while introducing the relevant tools and services of the RIPE NCC. The course also offers practical exercises. OVERVIEW OF TOPICS COVERED IN THE COURSE: - Routing Registry as a part of the RIPE Whois Database and the Internet Routing Registry (IRR) - Specifying routing policies using (RPSL) Routing Policy Specification Language and the RtConfig tool - IRRToolSet - Routing Information Service (RIS) - Routing Registry Consistency Check Project Please note that this is an advanced course. It will: - NOT teach the basics of routing - NOT teach the basics of RIPE Database operations - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe how to operate a Local Internet Registry (LIR) The target audience of the course are technical staff of LIRs: e.g. network operators, engineers etc. This course is not intended for administrative or management staff (e.g. Hostmasters) . It is assumed that all attendees will be familiar with Border Gateway Protocol routing and with the RIPE Database (i.e. creating/modifying objects). This course is based on interactive exercises in a local network set-up. Please bring your laptops equipped with the following: - A working Ethernet card, - Three meters of Ethernet cable, - A secure connection client, - A web browser. Please be prepared to share your laptop (or at least allow another attendee to "look over your shoulder") if necessary. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/rr/ How to register: --------------------- You can register up to two people from your LIR for each course. (If there are places left nearer the time of the course, you can register more people). To register for this course, you can either use the LIR Portal at: https://lirportal.ripe.net/lirportal/training/course-list.html Or the online registration form on our website: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions, send an e-mail to <training(a)ripe.net>. Kind regards Rumy Kanis Training Services Manager RIPE NCC

1 0

New Attribute in DOMAIN Object
by Olaf M. Kolkman 18 Jul '05

18 Jul '05

Dear Colleagues, You may have seen our recently announced plans to deploy DNSSEC on the reverse tree. You can read more about this at: http://www.ripe.net/ripe/maillists/archives/db-wg/2005/msg00156.html This plan contains a proposal for the new "ds-rdata:" attribute. This attribute is used to perform the public key exchange that is needed to obtain a secured delegation. It is used in addition to the delegation information stored in the "nserver:" attribute. You can find more details in the Draft Registry Procedure at: http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html Kind regards, -- Olaf ---------------------------------| Olaf M. Kolkman ---------------------------------| RIPE NCC

1 0

Changes for abuse
by dfoley 15 Jul '05

15 Jul '05

This document is very confusing. The section : "(3) Adding 'abuse output' Option " describes the changes to the result returned for "$ whois 10.0.0.10". However the result displayed is actually the result before the change. This is followed by a description of the result of "$ whois -b 10.0.0.10". The result includes "e-mail:" attributes but no "abuse-mailbox:" attribute. So which request do I use to obtain the "abuse-mailbox:" attibute? . In your examples it is only returned with the "$ whois -L 10.0.0.10". And yet I am supposed to use the "$ whois -b 10.0.0.10" to get the abuse contacts. Should I expect to ignore the attributes and treat any email address returned with the "whois -b" request as an abuse contact? I have tried using the "whois -b" and I have yet to get a result without ERROR appearing.

2 1

Status of 'org' attribute
by MarcoH 13 Jul '05

13 Jul '05

[appologies for cross-posting this] Hi all, Maybe I missed out on something, but accoording to various templates in the ripe-databese, the org-attribute is optional. Apparently the hostmaster mailrobot things otherwise and refuses requests with an error because of the org-attribute not being present. I just ran into it on a ASN request, but I recall having problems before with this. Can anybody tell me who is right, the database template or the robot ? In fact, the database reference (http://www.ripe.net/ripe/docs/databaseref-manual.html#1.2.3) doesn't list it all. Grtx, MarcoH

2 2