February 2021 - ncc-announce - mailman.ripe.net

[news] RIPE NCC Member Update: February 2021
by Boris Duval 24 Feb '21

24 Feb '21

Hello RIPE NCC members, Here’s everything you need to know about our services and what’s happening in the RIPE community this month: 1. What We're Doing For You -- LIR Stats -- Attack on RIPE NCC Access - Please Enable Two-Factor Authentication -- Training Courses in March -- Join the RIPE NCC Community Projects Fund Selection Committee 2. Your Technical Update -- Update to the RIPE NCC Certification Practice Statement (CPS) for RPKI -- Tracking RPKI Repository Performance with a RIPE Atlas Measurement -- RIPE Atlas Big Data is Back -- RIPEstat -- RIS -- Service Announcements 3. What's Happening in Our Community? -- RIPE Chair Team Report - January 2021 -- Live Blogging from FOSDEM2021 -- Remote Chaos Experience 2020 -- Instant Messengers for Network Operator Groups -- Outcome of the AFRINIC Audit -- NRO Updates 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Malta -- RIPE NCC Open House: Hosted vs. Delegated RPKI -- RIPE NCC Open House: Internet in Liechtenstein -- RIPE 82 -- RIPE NCC General Meeting -- ENOG 18 1. What We're Doing For You -- LIR Stats Number of LIRs: 23,707 (+83) LIRs with IPv6: 16,129 (+85) IPv4 Addresses Transferred in January: 304,896 (-742,400) -- Attack on RIPE NCC Access - Please Enable Two-Factor Authentication RIPE NCC Access, our single sign-on (SSO) service was recently affected by what appears to be a deliberate ‘credential-stuffing’ attack, which caused some downtime. We mitigated the attack, and we are now taking steps to ensure that our services are better protected against such threats in the future. We would like to ask you to enable two-factor authentication on your RIPE NCC Access account if you have not already done so to ensure that your account is secure: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… If you notice any suspicious activity in your RIPE NCC Access account, please contact us at <security at ripe.net>. -- Training Courses in March Our webinars for the month of March are open for registrations: https://lirportal.ripe.net/training/courses Here's the schedule: RIPE Database Basics Tuesday, 2 March 2021 (09:00-11:00 UTC) Internet Routing Registry Monday, 8 March 2021 (09:00-10:00 UTC) BGP Security: RPKI Wednesday, 10 March 2021 (09:00-11:00 UTC) IPv6 Addressing Plan Thursday, 11 March 2021 (09:00-10:00 UTC) Basic IPv6 Protocol Security Tuesday, 16 March 2021 (09:00-11:00 UTC) BGP Security: IRR and Filtering Thursday, 25 March 2021 (09:00-11:00 UTC) IPv6 Prefix Calculation Tuesday, 30 March 2021 (08:00-09:00 UTC) IPv6 Host Configuration Wednesday, 31 March 2021 (08:00-10:00 UTC) For more information regarding our webinars please visit the following page: https://www.ripe.net/support/training/webinars Interested in something that you can't find on our upcoming course page? Let us know any topics you would like to see in future webinars: https://forms.gle/rhyExMhb7BTCCXyU8 -- Join the RIPE NCC Community Projects Fund Selection Committee There are two open slots on the selection committee. Do you have a keen eye for emerging talents and innovative ideas? Would you like to encourage the development of new projects that help the technical community? If this sounds like you, nominate yourself before 31 March 2021: https://www.ripe.net/participate/forms/apply/ripe-ncc-community-projects-fu… 2. Your Technical Update -- Update to the RIPE NCC Certification Practice Statement (CPS) for RPKI We have updated the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI). The CPS is an update to RIPE-549 and is published as RIPE-75: https://www.ripe.net/publications/docs/ripe-751/ <https://www.ripe.net/publications/docs/ripe-751/> -- Tracking RPKI Repository Performance with a RIPE Atlas Measurement Bundle In this article, Emile Aben and his co-authors show how they used their own measurements to track RPKI Repository Performance: https://labs.ripe.net/Members/emileaben/tracking-rpki-repository-performanc… -- RIPE Atlas Big Data is Back The start of 2021 saw RIPE Atlas users encountering delays in data retrieval and an overall drop in the responsiveness of the system. Now that things are back to normal, we thought we’d take a more detailed look at what happened and the steps we’re taking to prevent it from happening again: https://labs.ripe.net/Members/paul_de_weerd/ripe-atlas-big-data-is-back -- RIPEstat --- RIPEstat's Next UI We are working on RIPEstat’s next UI that will be launched as the official RIPEstat interface at RIPE 82. You take see our progress at : https://beta-ui.stat.ripe.net/launchpad --- RIPEstat RPKI-History Ready for Production After improving the processing pipeline, we removed the "beta" tag from RPKI-History data-call and widget. https://stat.ripe.net/docs/data_api#rpki-history https://stat.ripe.net/widget/rpki-by-as#w.resource=3333 https://stat.ripe.net/widget/rpki-by-country#w.resource=nl https://stat.ripe.net/widget/rpki-by-trust-anchor --- Change of Validator for RIPEstat RPKI-Validation Endpoint Due to the decommissioning of the RIPE NCC RPKI Validator, we are going to move to NLnet Labs Routinator as the backend for RPKI Validation: https://stat.ripe.net/docs/data_api#rpki-validation --- Cloud: Proof of Concept Backends We are currently testing how cloud services can help us to be more agile with provisioning more datasets and hope that users will soon benefit from it. -- RIS We are looking at expanding our multihop capacity by adding an extra route collector in Amsterdam. We are also trying to establish peerings with tier-1 networks that are not peering with RIS yet. -- Service Announcements --- Recent RIPE NCC Access Planned Downtime (2 February 2021): https://www.ripe.net/support/service-announcements/ripe-ncc-access-planned-… RIS-related Data Calls in RIPEstat (3 February 2021): https://www.ripe.net/support/service-announcements/ris-related-data-calls-i… Core Network Maintenance (4 February 2021): https://www.ripe.net/support/service-announcements/core-network-maintenance… Ticketing System Downtime (8 February 2021): https://www.ripe.net/support/service-announcements/ticketing-system-downtim… Whois TEST and RIPE NCC Academy Training Database Downtime (9 February 2021): https://www.ripe.net/support/service-announcements/whois-test-and-ripe-ncc-… Delay Publishing RPKI Object Updates (15 February 2021): https://www.ripe.net/support/service-announcements/delay-publishing-rpki-ob… 3. What's Happening in Our Community? -- RIPE Chair Team Report - January 2021 After a busy start to the year, here's an update from the RIPE Chair looking at the RIPE Chair team's activities so far in 2021 as well as a number of noteworthy community developments: https://labs.ripe.net/Members/mirjam_kuhne/ripe-chair-team-report-january-2… -- Live Blogging from FOSDEM2021 Vesna Manojlovic shares her impressions from FOSDEM, the largest European Free and Open Source Software developers conference: https://labs.ripe.net/Members/becha/live-blogging-from-fosdem2021 -- Remote Chaos Experience 2020 There is a substantial overlap between RIPE and CCC communities. In this post, Vesna Manojlovic highlights her favourite talks from Remote Chaos Experience 2020: https://labs.ripe.net/Members/becha/remote-chaos-experience -- Instant Messengers for Network Operator Groups Alex Semenyaka takes a look at why and how Network Operator Groups (NOGs) in the RIPE NCC service region are turning to Instant Messengers as their first choice for communication: https://labs.ripe.net/Members/alex_semenyaka/instant-messengers-for-network… -- Outcome of the AFRINIC Audit AFRINIC has completed a comprehensive audit of its WHOIS Database following the misappropriation of IPv4 resources that came to light in 2019. A full report on the outcomes of their audit is now available: https://labs.ripe.net/Members/alun_davies/outcome-of-the-afrinic-audit -- NRO Updates --- Call for Public Comments on the 2020 IANA Performance Matrix Summary Report The IANA RC is now launching a public comment period of 30 days, seeking comments and input from the community on the IANA numbering services performance and the 2020 IANA Performance Matrix Summary Report: https://www.nro.net/2020-RIR-IANA-summary-report The IANA RC encourages all members of the Internet number community to review the public IANA Performance Matrix Summary Report. Comments on the IANA service performance should be sent to <iana-performance [at] nro [dot] net>. The public comment period ends on Friday, 5 March 2021 at 23:59 UTC. 4. Join Us for These Virtual Events -- RIPE NCC Open House: Internet in Malta, Wednesday, 10 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE NCC Open House: Hosted vs. Delegated RPKI, Friday, 19 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-ho… -- RIPE NCC Open House: Internet in Liechtenstein, 24 March 2021: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… -- RIPE 82, 17-21 May 2021 The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, lightning talks and BoFs. You have until 19 March 2021 to submit your presentations proposals at: https://ripe82.ripe.net/submit-topic/cfp/ The meeting plan is available at: https://ripe82.ripe.net/programme/meeting-plan/ -- RIPE NCC General Meeting, 19-21 May 2021: https://www.ripe.net/participate/meetings/gm/next-general-meeting -- ENOG 18, 7-8 June 2021: https://www.enog.org/enog-18/ Thank you for reading till the end. We’ll be back next month with more news! Best regards, Boris Boris Duval Communications Officer RIPE NCC

1 0

Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by Ivo Dijkhuis 18 Feb '21

18 Feb '21

Dear colleagues, Last weekend, RIPE NCC Access, our single sign-on (SSO) service was affected by what appears to be a deliberate ‘credential-stuffing’ attack, which caused some downtime. We mitigated the attack, and we are now taking steps to ensure that our services are better protected against such threats in the future. Our preliminary investigations do not indicate that any SSO accounts have been compromised. If we do find that an account has been affected in the course of our investigations, we will contact the account holder individually to inform them. We would like to ask you to enable two-factor authentication on your RIPE NCC Access account if you have not already done so to ensure that your account is secure. In general, using two-factor authentication across all your accounts can help limit your exposure to such attacks. If you notice any suspicious activity in your RIPE NCC Access account, please contact us immediately at <security(a)ripe.net>. Best regards, Ivo Dijkhuis Senior Information Security Officer, RIPE NCC

1 0

[news] Update to the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI)
by Nathalie Trenaman 04 Feb '21

04 Feb '21

Dear colleagues, We are pleased to announce that we have updated the RIPE NCC Certification Practice Statement (CPS) for the Resource Public Key Infrastructure (RPKI). As a Certificate Authority in RPKI, we are required to publish a CPS. In this document, we describe: - How certificates are issued, managed, and revoked; - How we perform the key management; - The kind of certificates we issue. The CPS is an update to RIPE-549 and is published as RIPE-751: https://www.ripe.net/publications/docs/ripe-751/ <https://www.ripe.net/publications/docs/ripe-751/> The document follows the "Template for a CPS for the RPKI" as defined in RFC7382. Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0