April 2020 - ncc-announce - mailman.ripe.net

[news] RIPE NCC Member Update: April 2020
by Boris Duval 22 Apr '20

22 Apr '20

Hello RIPE NCC member, While we are now working remotely, the Internet is still keeping us very busy and with RIPE 80 around the corner, we have a lot of updates to share with you. Happy reading! ----------------------------------------------------------------------------------------------------------------- 1. What We’re Doing for You ----------------------------------------------------------------------------------------------------------------- -- Your LIR Stats -- RIPE NCC General Meeting, 13-15 May 2020 -- RIPE NCC Executive Board Minutes -- Sanctions and the RIPE NCC -- Payment Period Extended due to COVID-19 -- RIPE NCC Certified Professionals is live! -- Learn Online -- Focus on: Membership Mailing Lists ----------------------------------------------------------------------------------------------------------------- 2. Your Technical Update ----------------------------------------------------------------------------------------------------------------- -- New AS Number Blocks Allocated to the RIPE NCC -- Improving Security of the API Key Management in the LIR Portal -- RIPEstat Updates ----------------------------------------------------------------------------------------------------------------- 3. What’s Happening in Our Community? ----------------------------------------------------------------------------------------------------------------- -- Southeast Europe Country Report -- COVID-19 and the Internet -- The RIPE NCC's Use of Zoom for Meetings -- Do We Need a New IP? ----------------------------------------------------------------------------------------------------------------- 4. Join Us for These Meetings and Events ----------------------------------------------------------------------------------------------------------------- -- RIPE 80, 12-14 May 2020 -- RIPE 82 will take place in Berlin -- Virtual Member Lunches ----------------------------------------------------------------------------------------------------------------- 1. What We’re Doing for You ----------------------------------------------------------------------------------------------------------------- -- Your LIR Stats LIR STATISTICS Number of LIRs: 25,358 (-7) LIRs with IPv6: 16,565 (+90) Policy transfers in March: 683,776 IPv4 addresses (+53,248) -- RIPE NCC General Meeting, 13-15 May 2020 The General Meeting will take place from 13-15 May 2020 and full remote participation is available. You can vote remotely on resolutions and to elect three RIPE NCC Executive Board candidates. The deadline to nominate candidates is today, 22 April at 23:59 UTC. A nominee needs expressions of support from five members to become a confirmed candidate for the Executive Board: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/call-for-nom… The supporting documents for the General Meeting have been published, including the 2019 Annual Report and Financial Report and the 2021 Charging Scheme: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/supporting-d… -- RIPE NCC Executive Board Minutes The RIPE NCC Executive Board held its 131st, 132nd and 133rd Meetings via teleconference on 18 March, 26 March and 8 April 2020. The draft minutes of these meetings are available at: https://www.ripe.net/about-us/executive-board/minutes/2020 -- Sanctions and the RIPE NCC Last week we announced that we had frozen the LIR accounts of three members in Iran in Syria because they were on the EU sanctions list. In the meantime, we are urgently seeking a permanent exemption from relevant authorities for the services we provide. You can read more at: https://www.ripe.net/ripe/mail/archives/ncc-announce/2020-April/001413.html -- Payment Period Extended due to COVID-19 In view of the disruption caused by the COVID-19 pandemic, we decided to extend our payment period by three months. You now have until 1 July 2020 to pay your invoice. If you are able to pay your invoice easily within the original timeframe, we encourage you to do so. More information is available at: https://www.ripe.net/publications/news/announcements/payment-period-extende… -- RIPE NCC Certified Professionals is live! We’ve recently launched our Certified Professional Programme and sent three exam vouchers to each LIR. You can use your vouchers to schedule the RIPE Database Associate exam and earn our first verifiable digital badge: https://www.ripe.net/support/certified-professionals -- Learn Online While we had to suspend training courses due to COVID-19, we’re working hard to ensure that you can continue to learn with us. Here’s how you can keep learning: Webinars: One-hour interactive sessions. Remote Learning Sessions: Two-hour long sessions adapted from our regular training courses. Online Courses: The RIPE NCC Academy offers three online courses that are free and open to all. Learn more at: https://www.ripe.net/support/training/learn-online -- Focus on: Membership Mailing Lists Did you know? There are three mailing lists that are especially valuable to RIPE NCC Members: members-discuss, ncc-announce and ncc-services-wg. All of them have different purposes and one of them is compulsory (ncc-announce). You can learn more on how to manage and make the most out of those mailing lists at: https://www.ripe.net/participate/member-support/membership-mailing-lists ----------------------------------------------------------------------------------------------------------------- 2. Your Technical Update ----------------------------------------------------------------------------------------------------------------- -- New AS Number Blocks Allocated to the RIPE NCC On 1 April 2020, the RIPE NCC received the following AS Number blocks from IANA: 210332-211355 211356-212379 212380-213403 You may want to update your records accordingly. All allocations of AS Numbers made by IANA to the RIRs are listed here: https://www.iana.org/assignments/as-numbers/as-numbers.xhtml -- Improving Security of the API Key Management in the LIR Portal We’ve recently improved the LIR Portal API Key Management security by hashing all the existing and newly-created API key values. If you are using our APIs, make sure to read this update: https://www.ripe.net/ripe/mail/archives/ncc-announce/2020-April/001411.html -- RIPEstat Updates Geo-IP Information: Maxmind is back on RIPEstat We’ve re-enabled all Maxmind-related data calls and widgets after solving bugs due to licensing changes. https://stat.ripe.net/docs/data_api#maxmind-geo-lite https://stat.ripe.net/docs/data_api#maxmind-geo-lite-announced-by-as Launch of the AIRRS AFINIC recently launched the Africa Internet Registry and Routing Statistics (AIRRS) portal. The portal was developed in collaboration with the RIPEstat team and retrieves information from many sources: https://afrinic.net/blog/515-airrs-launch ----------------------------------------------------------------------------------------------------------------- 3. What’s Happening in Our Community? ----------------------------------------------------------------------------------------------------------------- -- Southeast Europe Country Report Our latest country report is out, this time focusing on eight countries in Southeast Europe. We examine the region’s Internet development - including local markets and their growth potential, routing anomalies and access to the global Internet - using the RIPE NCC’s measurement tools. Our colleague, Suzanne Taylor, shares more in this RIPE Labs article: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripe-ncc-country-report… We’d also like to invite you to attend an online session in which we’ll go over the main highlights from the report and have an open discussion about relevant Internet governance issues in Southeast Europe, including IPv6 deployment, IXPs and cybersecurity. The session will take place on Tuesday, 28 April from 12:00-13:00 UTC. Please register here by Monday, 27 April at 12:00 UTC: www.ripe.net/s/see-discussion -- COVID-19 and the Internet As COVID-19 turned the world upside down, we’ve been analysing its impact on the Internet and sharing how we’ve been adapting to this new normal on RIPE Labs: https://labs.ripe.net/covid19 Here are some highlights: The Ghost Office: our Transition to Remote Work during COVID-19: https://labs.ripe.net/Members/saskia_oostdijck_van_gorp/the-ghost-office Network Delays in Times of Corona: https://labs.ripe.net/Members/romain_fontugne/network-delays-in-times-of-co… Hackathons in the Time of Corona: https://labs.ripe.net/Members/becha/hackathons-in-the-time-of-corona -- The RIPE NCC's Use of Zoom for Meetings In this article, the RIPE NCC’s Chief Information Officer, Kaveh Ranjbar, explains why we chose Zoom to host RIPE 80 and the RIPE NCC General Meeting and answers security concerns around the use of this platform: https://labs.ripe.net/Members/kranjbar/the-ripe-nccs-use-of-zoom-for-meetin… -- Do We Need a New IP? Marco Hogewoning shares his thoughts on Huawei's “New IP” proposal and explains why the evolution of the Internet should be left to the IETF: https://labs.ripe.net/Members/marco_hogewoning/do-we-need-a-new-ip ----------------------------------------------------------------------------------------------------------------- 4. Join Us for These Meetings and Events ----------------------------------------------------------------------------------------------------------------- -- RIPE 80, 12-14 May 2020 RIPE 80 will take place online from 12-14 May 2020 and you can register for free at: https://ripe80.ripe.net/attend/register/ Browse the meeting plan at: https://ripe80.ripe.net/programme/meeting-plan/ Do you want to sponsor the first virtual RIPE Meeting? We’ve put together a great online sponsorship package: https://ripe80.ripe.net/sponsors/become-a-sponsor/ Interested? You have until 30 April 2020 to apply to become a RIPE 80 sponsor. -- RIPE 82 will take place in Berlin As we had to move RIPE 80 online, we postponed our trip to the German capital until next year. RIPE 82 will officially take place in Berlin from 17-21 May 2021. Save the date! -- Virtual Member Lunches Bring your own lunch! Like regular Member Lunches, you will have the chance to chat with each other and RIPE NCC staff in a more informal setting: https://www.ripe.net/participate/member-support/member-lunches/virtual-memb… That’s it for April! We will be back next month with more news and we hope to see you all (virtually) in a couple of weeks at RIPE 80. In the meantime, stay safe and healthy. Best, Boris Boris Duval Communications Officer RIPE NCC

1 0

[training] Remote Learning Sessions April-June 2020
by Training Services 16 Apr '20

16 Apr '20

Dear colleagues We were forced to suspend all our face-to-face training courses a few weeks ago due to the safety restrictions related to COVID-19. In the meantime, our trainers have worked hard to adapt our training courses to create two-hour long Remote Learning Sessions, which will take place in addition to our regular webinars. We invite you to continue to learn with us online in the coming weeks. Remote Learning Sessions are available for the following topics: • LIR Session 1: The Ecosystem of the Internet • LIR Session 2: The Rules of Attraction • RIPE Database Session 1: Basics • RIPE Database Session 2: Applications • IPv6 Session 1: Introduction • IPv6 Session 2: IPv6 Host Configuration • Measurements & Tools Session 1: RIPEstat • Measurements & Tools Session 2: RIPE Atlas • IPv6 Security Session 1: Basic IPv6 Protocol • IPv6 Security Session 2: IPv6 Associated Protocols • IPv6 Security Session 3: Myths, Filtering and Tips • BGP Security Session 1: IRR and Filtering • BGP Security Session 2: RPKI You can find more information about the sessions at: https://www.ripe.net/support/training/learn-online Register for a Remote Learning Session at: https://lirportal.ripe.net/training/courses You can also learn online using the RIPE NCC Academy (https://academy.ripe.net) or join us for a webinar (https://www.ripe.net/webinars). We hope to meet you online soon! Yours sincerely, RIPE NCC Learning and Development

1 0

[GM] Supporting Documents for RIPE NCC General Meeting May 2020
by General Meeting Organisation Team 15 Apr '20

15 Apr '20

Dear RIPE NCC members, The supporting documents for the RIPE NCC General Meeting (GM) May 2020 are now finalised and published at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/supporting-d… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/supporting-d…> The documents include: - The RIPE NCC Annual Report 2019 - The RIPE NCC Financial Report 2019 - RIPE NCC Charging Scheme 2021 The draft agenda containing all the resolutions to be voted on is also available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/draft-agenda… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/draft-agenda…> An election will be held at this GM to fill three seats on the RIPE NCC Executive Board. There are currently three confirmed candidates. The deadline to nominate candidates is next Wednesday, 22 April 2020 at 23:59 UTC. All the details are available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/executive-bo… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/executive-bo…> As previously announced, we have made every effort to ensure that the upcoming GM will take place as scheduled despite issues around the COVID-19 outbreak. To this end, full remote participation will be available to all members, including webcast, live chat and electronic voting. In the unlikely event that developments around the outbreak prevent us from proceeding according to the existing agenda, we have a procedure in place that will allow members to vote to postpone the GM. Registration can be completed quickly and easily via the LIR Portal: https://www.ripe.net/s/gm-registration-may-2020 <https://www.ripe.net/s/gm-registration-may-2020> Kind regards, General Meeting Organisation Team RIPE NCC

1 0

[news] Sanctions and the RIPE NCC: Current Status and Executive Board Position
by Christian Kaufmann 14 Apr '20

14 Apr '20

Dear members, The Executive Board has been working with the RIPE NCC to find a solution regarding the applicability of EU sanctions to its members. As this has geopolitical implications for the RIPE NCC's wide and diverse service region, this is a matter we have been taking seriously for some time. As part of this, the RIPE NCC is in contact with the Dutch Government to seek a permanent exemption for its services from all current and future EU sanctions. The links to the minutes and the resolutions from the two recent board meetings where this was discussed were published today. I would now like to briefly outline the current situation and expand on the board's position. WHERE WE STAND CURRENTLY We were recently alerted to the fact that two RIPE NCC members in Iran and one in Syria are believed to be on the EU sanctions list. These members have now been notified that provision of services to them has been frozen and the RIPE NCC will initiate an audit of the relevant accounts, pending a response from the Dutch Government. This means that their resources will not be deregistered, but the RIPE NCC will also not process requests on their behalf. The intent here is to ensure the RIPE NCC is taking appropriate steps to comply with any relevant sanctions in accordance with its obligations under Dutch law. That being said, the board will defend its belief that the RIPE NCC's services should not be covered by sanctions. As the RIPE NCC's bank also needs to ensure its own compliance with sanctions, it has temporarily revoked the RIPE NCC's ability to receive direct payments from members in Syria and Iran. The RIPE NCC will contact these members directly to explain this in more detail. The recent decision to extend the payment period for membership fees in light of the COVID-19 pandemic eases some of the time pressure on members to pay for now, and we anticipate this issue will be resolved once we have clarity from the Dutch Government. THE BOARD'S POSITION I would now like to share the board's position more generally. A board resolution from 2014 states the following: "The Executive Board of the RIPE NCC believes that the means of communication should not be affected by political discussions or disputes. This includes the provision of correctly registered Internet numbering resources." This is probably the clearest statement of our position, which has not changed since then. The board wishes to caution against measures applied in pursuit of short-term public policy objectives that may undermine the wider Internet governance system, which is essential to the stability of the global Internet. This is a system which is fundamentally based on cooperation. We also believe that the ongoing COVID-19 pandemic has shown that the Internet is a critical tool for meeting the essential needs of humanity. We are committed to minimising the impact of any action that would limit people's ability to access this important global network. If you have questions for the Board, please contact us at <exec-board(a)ripe.net>. Regards Christian Kaufmann RIPE NCC Executive Board Chairman

1 0

[news] 131st, 132nd and 133rd RIPE NCC Executive Board Meetings - Summary Notes and Minutes
by RIPE NCC Management 14 Apr '20

14 Apr '20

Dear RIPE NCC members, The RIPE NCC Executive Board held its 131st, 132nd and 133rd Meetings via teleconference on 18 March, 26 March and 8 April 2020, respectively. The first of these meetings was held with the express purpose of discussing the operational impact of the COVID-19 outbreak on the RIPE NCC. The second, a regular scheduled meeting, involved discussion of several topics including the RIPE NCC's approach regarding sanctioned members. The third meeting was called in order to carry out further discussion on the sanctions issue. The draft minutes of these meetings are now available: https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-131st-ex… https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-132nd-ex… https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-133rd-ex… The Executive Board publishes the minutes of its meetings so that the workings of the Board and the decisions it makes are transparent for the membership that it represents. The following is a summary of the main items from each of the above meetings. Further details are available in the minutes. Meeting #131 - The RIPE NCC Executive Board resolved that the RIPE 80 Meeting, originally scheduled to be held in Berlin from 11-15 May 2020, will be a virtual meeting with a reduced programme due to the situation with COVID-19. - The Board also resolved that the upcoming May 2020 General Meeting will take place as scheduled and tasked the RIPE NCC to ensure that full remote participation will be available to all members who wish to attend. Meeting #132 - To accommodate members who reported difficulties in making payments due to COVID-19 related issues, the Executive Board unanimously adopted a resolution to extend the payment timeframe for 2020 invoices for existing members by three months. The payment due date will be set to 1 July 2020. - The Board resolved that the RIPE NCC shall explore all options for obtaining global exemptions for its operation from sanctions. The RIPE NCC will also be required to validate its interpretation of the status of IP address registration with relevant international authorities. - With regards to the preparation of supporting documents for the upcoming RIPE NCC General Meeting (GM), the RIPE NCC Executive Board: -- Approved the RIPE NCC Annual Report 2019 -- Approved that the RIPE NCC Financial Report 2019 be submitted to the GM for consideration -- Approved the Draft RIPE NCC Charging Scheme 2021, tasking RIPE NCC Management to prepare a document to be shared with members ahead of the GM - Fergal Cunningham, Acting Chief Communications Officer, provided the RIPE NCC Executive Board with an update on external and internal actions taken by the RIPE NCC to mitigate the effects of COVID-19. - Hans Petter Holen noted that having both the role of RIPE Chair and RIPE NCC Managing Director (as of 1 May 2020) will create a conflict. He confirmed that he will step down as RIPE Chair by 30 April 2020, but he is willing to serve as interim RIPE Chair until the working group chairs have appointed somebody according to the RIPE Nomination Committee process. Meeting #133 - Following a report from Felipe Victolla Silveira on the recent outages of the RPKI service, along with a presentation outlining a mitigation plan, the Executive Board tasked the RIPE NCC to provide regular updates on RPKI resiliency at each board meeting. - The Board resolved that it is committed to complying with applicable sanctions obligations and directed the RIPE NCC to execute the appropriate response and investigate any means, within the provision of the law, to support the continued stable operation of the Internet according to its mission. The Board reaffirmed its understanding that the registration and management of Internet number resources, including IP addresses, should be outside the scope of political disputes. Kind regards RIPE NCC Management Team Gwen van Berne, Kaveh Ranjbar and Felipe Victolla Silveira

1 0

[service] Improving Security of the API Key Management in the, LIR Portal
by Theodoros Polychniatis 09 Apr '20

09 Apr '20

Dear colleagues, If you are users of the API Key Management section in the LIR Portal (https://lirportal.ripe.net/api/) or if you use the API to submit resource requests, access "IP Analyser", "My Resources" or manage your ROAs, then please continue reading. Otherwise, this message should not concern you. During a recent security review of the LIR Portal, we identified that the API Keys created in the LIR Portal are stored in plain text. This functionality was developed in this way so that users are able to retrieve the keys even after they have created them. However, this poses a risk from a security point of view, because these API Keys are used for authentication and authorisation purposes. These keys should not be stored in plain text. Because there is no indication that the existing API Keys were leaked, and because we do not want to create any operational problems to the API users, we decided not to drop the existing keys. Therefore, your scripts will continue to work and *no change is needed from you*. However, we made the following changes: 1. We hashed all the existing API key values and updated the way the LIR Portal authenticates the keys accordingly. 2. We changed the User Interface in the LIR Portal, so that when a user creates an API key, the value is displayed only once to the user, and the hashed value is stored in the database. 3. Up until now, the keys had to be passed to the request as a URL parameter. Now, the above mentioned APIs also accept the API Key as a request header value. We strongly recommend using the header to pass the API Key value, so that the key is not stored in any server logs. You can find more information in the API Key management section in the LIR Portal. After this change, neither you nor the RIPE NCC can recover the existing keys from the LIR Portal. You can always create new keys, configure them in your scripts, and drop the old ones. Based on our risk evaluation, we plan to act similarly for API Keys used in other services. Please let us know if you have any questions regarding this change. Best regards, Theodoros Polychniatis Assistant Manager Software Engineering Department RIPE NCC

1 0

[meetings] Register for RIPE 80 – The First Virtual RIPE Meeting
by RIPE NCC Event Team 09 Apr '20

09 Apr '20

Dear colleagues, For the first time, the RIPE Meeting will be 100% virtual, and you cannot miss it! You can now register for free at: https://ripe80.ripe.net/register/ RIPE 80 will take place from 12 - 14 May 2020 and will feature a shorter programme and a new schedule. More information about the programme will follow in the coming weeks. Learn more about the meeting at: https://ripe80.ripe.net/ For the latest updates, you can follow us on Twitter at @ripemeeting and by using the hashtag #RIPE80. Kind regards, RIPE Meetings Organisation Team

1 0

[GM] RIPE NCC General Meeting Important Dates
by Alun Davies 06 Apr '20

06 Apr '20

Dear colleagues, Following the earlier announcement from the RIPE NCC Executive Board, we would like to remind all our members that the existing schedule and all important dates for the RIPE NCC General Meeting May 2020 remain as originally announced. Elections to fill three seats on the RIPE NCC Executive Board will take place at this GM. Right now, the call for nominations is still open and all members have till 22 April to send in their nominations by completing our online AGM Nomination form: http://www.ripe.net/participate/forms/apply/agm-nomination/ <http://www.ripe.net/participate/forms/apply/agm-nomination/> In light of the COVID-19 situation, this year's May GM will be held at the RIPE NCC office in Amsterdam. Due to restrictions put in place by the Dutch government in response to the outbreak, and given the potential risk to the health and safety of our staff and members alike, it will be difficult to arrange for physical attendance of members at this meeting. We therefore strongly advise that members opt to attend the upcoming GM through electronic means at a remote location. Full remote participation will be available as usual in order to ensure that all our members will be able to follow presentations, join in the discussion and cast their votes by electronic means. All information about the GM, including registration details, is available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020 <https://www.ripe.net/participate/meetings/gm/meetings/may-2020> Kind Regards, General Meeting Organisation Team RIPE NCC RIPE NCC General Meeting May 2020 Important Dates: 26 Feb - Call for nominations to RIPE NCC Executive Board 26 Feb - Open registration for General Meeting 15 Apr - Publish RIPE NCC Annual Report and Financial Report 2019 22 Apr - Close nominations for Executive Board elections 29 Apr - Deadline for proxy vote nominations 29 Apr - Deadline for members to propose resolutions 29 Apr - Deadline to publish final GM agenda 13 May - Close registration for electronic voting 13 May - GM begins with main meeting 15 May - GM closes with announcement of voting results

1 0

[news] New AS Number Blocks Allocated to the RIPE NCC
by Nikolas Pediaditis 02 Apr '20

02 Apr '20

Dear colleagues, On 1 April 2020, the RIPE NCC received the following AS Number blocks from IANA: 210332-211355 211356-212379 212380-213403 You may want to update your records accordingly. All allocations of AS Numbers made by IANA to RIRs are listed here: https://www.iana.org/assignments/as-numbers/as-numbers.xhtml Kind regards, Nikolas Pediaditis Registration Services & Policy Development Manager RIPE NCC

1 0

[service] All Deleted RPKI ROAs Have Been Reinstated
by Nathalie Trenaman 02 Apr '20

02 Apr '20

Dear colleagues, We have now reinstated the deleted ROAs and everything is back to normal. If you created replacement ROAs in the meantime, you will not need to do anything - any changes will still be there. We have now implemented measures that will prevent this from happening again in the future. We will also share a full post-mortem with the RIPE Routing Working Group tomorrow: <routing-wg(a)ripe.net <mailto:routing-wg@ripe.net>>. Apologies again for the inconvenience. Kind regards Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0