- ncc-announce - mailman.ripe.net

[training] Remote Learning Sessions April-June 2020
by Training Services 16 Apr '20

16 Apr '20

Dear colleagues We were forced to suspend all our face-to-face training courses a few weeks ago due to the safety restrictions related to COVID-19. In the meantime, our trainers have worked hard to adapt our training courses to create two-hour long Remote Learning Sessions, which will take place in addition to our regular webinars. We invite you to continue to learn with us online in the coming weeks. Remote Learning Sessions are available for the following topics: • LIR Session 1: The Ecosystem of the Internet • LIR Session 2: The Rules of Attraction • RIPE Database Session 1: Basics • RIPE Database Session 2: Applications • IPv6 Session 1: Introduction • IPv6 Session 2: IPv6 Host Configuration • Measurements & Tools Session 1: RIPEstat • Measurements & Tools Session 2: RIPE Atlas • IPv6 Security Session 1: Basic IPv6 Protocol • IPv6 Security Session 2: IPv6 Associated Protocols • IPv6 Security Session 3: Myths, Filtering and Tips • BGP Security Session 1: IRR and Filtering • BGP Security Session 2: RPKI You can find more information about the sessions at: https://www.ripe.net/support/training/learn-online Register for a Remote Learning Session at: https://lirportal.ripe.net/training/courses You can also learn online using the RIPE NCC Academy (https://academy.ripe.net) or join us for a webinar (https://www.ripe.net/webinars). We hope to meet you online soon! Yours sincerely, RIPE NCC Learning and Development

1 0

[GM] Supporting Documents for RIPE NCC General Meeting May 2020
by General Meeting Organisation Team 15 Apr '20

15 Apr '20

Dear RIPE NCC members, The supporting documents for the RIPE NCC General Meeting (GM) May 2020 are now finalised and published at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/supporting-d… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/supporting-d…> The documents include: - The RIPE NCC Annual Report 2019 - The RIPE NCC Financial Report 2019 - RIPE NCC Charging Scheme 2021 The draft agenda containing all the resolutions to be voted on is also available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/draft-agenda… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/draft-agenda…> An election will be held at this GM to fill three seats on the RIPE NCC Executive Board. There are currently three confirmed candidates. The deadline to nominate candidates is next Wednesday, 22 April 2020 at 23:59 UTC. All the details are available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020/executive-bo… <https://www.ripe.net/participate/meetings/gm/meetings/may-2020/executive-bo…> As previously announced, we have made every effort to ensure that the upcoming GM will take place as scheduled despite issues around the COVID-19 outbreak. To this end, full remote participation will be available to all members, including webcast, live chat and electronic voting. In the unlikely event that developments around the outbreak prevent us from proceeding according to the existing agenda, we have a procedure in place that will allow members to vote to postpone the GM. Registration can be completed quickly and easily via the LIR Portal: https://www.ripe.net/s/gm-registration-may-2020 <https://www.ripe.net/s/gm-registration-may-2020> Kind regards, General Meeting Organisation Team RIPE NCC

1 0

[news] Sanctions and the RIPE NCC: Current Status and Executive Board Position
by Christian Kaufmann 14 Apr '20

14 Apr '20

Dear members, The Executive Board has been working with the RIPE NCC to find a solution regarding the applicability of EU sanctions to its members. As this has geopolitical implications for the RIPE NCC's wide and diverse service region, this is a matter we have been taking seriously for some time. As part of this, the RIPE NCC is in contact with the Dutch Government to seek a permanent exemption for its services from all current and future EU sanctions. The links to the minutes and the resolutions from the two recent board meetings where this was discussed were published today. I would now like to briefly outline the current situation and expand on the board's position. WHERE WE STAND CURRENTLY We were recently alerted to the fact that two RIPE NCC members in Iran and one in Syria are believed to be on the EU sanctions list. These members have now been notified that provision of services to them has been frozen and the RIPE NCC will initiate an audit of the relevant accounts, pending a response from the Dutch Government. This means that their resources will not be deregistered, but the RIPE NCC will also not process requests on their behalf. The intent here is to ensure the RIPE NCC is taking appropriate steps to comply with any relevant sanctions in accordance with its obligations under Dutch law. That being said, the board will defend its belief that the RIPE NCC's services should not be covered by sanctions. As the RIPE NCC's bank also needs to ensure its own compliance with sanctions, it has temporarily revoked the RIPE NCC's ability to receive direct payments from members in Syria and Iran. The RIPE NCC will contact these members directly to explain this in more detail. The recent decision to extend the payment period for membership fees in light of the COVID-19 pandemic eases some of the time pressure on members to pay for now, and we anticipate this issue will be resolved once we have clarity from the Dutch Government. THE BOARD'S POSITION I would now like to share the board's position more generally. A board resolution from 2014 states the following: "The Executive Board of the RIPE NCC believes that the means of communication should not be affected by political discussions or disputes. This includes the provision of correctly registered Internet numbering resources." This is probably the clearest statement of our position, which has not changed since then. The board wishes to caution against measures applied in pursuit of short-term public policy objectives that may undermine the wider Internet governance system, which is essential to the stability of the global Internet. This is a system which is fundamentally based on cooperation. We also believe that the ongoing COVID-19 pandemic has shown that the Internet is a critical tool for meeting the essential needs of humanity. We are committed to minimising the impact of any action that would limit people's ability to access this important global network. If you have questions for the Board, please contact us at <exec-board(a)ripe.net>. Regards Christian Kaufmann RIPE NCC Executive Board Chairman

1 0

[news] 131st, 132nd and 133rd RIPE NCC Executive Board Meetings - Summary Notes and Minutes
by RIPE NCC Management 14 Apr '20

14 Apr '20

Dear RIPE NCC members, The RIPE NCC Executive Board held its 131st, 132nd and 133rd Meetings via teleconference on 18 March, 26 March and 8 April 2020, respectively. The first of these meetings was held with the express purpose of discussing the operational impact of the COVID-19 outbreak on the RIPE NCC. The second, a regular scheduled meeting, involved discussion of several topics including the RIPE NCC's approach regarding sanctioned members. The third meeting was called in order to carry out further discussion on the sanctions issue. The draft minutes of these meetings are now available: https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-131st-ex… https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-132nd-ex… https://www.ripe.net/about-us/executive-board/minutes/2020/minutes-133rd-ex… The Executive Board publishes the minutes of its meetings so that the workings of the Board and the decisions it makes are transparent for the membership that it represents. The following is a summary of the main items from each of the above meetings. Further details are available in the minutes. Meeting #131 - The RIPE NCC Executive Board resolved that the RIPE 80 Meeting, originally scheduled to be held in Berlin from 11-15 May 2020, will be a virtual meeting with a reduced programme due to the situation with COVID-19. - The Board also resolved that the upcoming May 2020 General Meeting will take place as scheduled and tasked the RIPE NCC to ensure that full remote participation will be available to all members who wish to attend. Meeting #132 - To accommodate members who reported difficulties in making payments due to COVID-19 related issues, the Executive Board unanimously adopted a resolution to extend the payment timeframe for 2020 invoices for existing members by three months. The payment due date will be set to 1 July 2020. - The Board resolved that the RIPE NCC shall explore all options for obtaining global exemptions for its operation from sanctions. The RIPE NCC will also be required to validate its interpretation of the status of IP address registration with relevant international authorities. - With regards to the preparation of supporting documents for the upcoming RIPE NCC General Meeting (GM), the RIPE NCC Executive Board: -- Approved the RIPE NCC Annual Report 2019 -- Approved that the RIPE NCC Financial Report 2019 be submitted to the GM for consideration -- Approved the Draft RIPE NCC Charging Scheme 2021, tasking RIPE NCC Management to prepare a document to be shared with members ahead of the GM - Fergal Cunningham, Acting Chief Communications Officer, provided the RIPE NCC Executive Board with an update on external and internal actions taken by the RIPE NCC to mitigate the effects of COVID-19. - Hans Petter Holen noted that having both the role of RIPE Chair and RIPE NCC Managing Director (as of 1 May 2020) will create a conflict. He confirmed that he will step down as RIPE Chair by 30 April 2020, but he is willing to serve as interim RIPE Chair until the working group chairs have appointed somebody according to the RIPE Nomination Committee process. Meeting #133 - Following a report from Felipe Victolla Silveira on the recent outages of the RPKI service, along with a presentation outlining a mitigation plan, the Executive Board tasked the RIPE NCC to provide regular updates on RPKI resiliency at each board meeting. - The Board resolved that it is committed to complying with applicable sanctions obligations and directed the RIPE NCC to execute the appropriate response and investigate any means, within the provision of the law, to support the continued stable operation of the Internet according to its mission. The Board reaffirmed its understanding that the registration and management of Internet number resources, including IP addresses, should be outside the scope of political disputes. Kind regards RIPE NCC Management Team Gwen van Berne, Kaveh Ranjbar and Felipe Victolla Silveira

1 0

[service] Improving Security of the API Key Management in the, LIR Portal
by Theodoros Polychniatis 09 Apr '20

09 Apr '20

Dear colleagues, If you are users of the API Key Management section in the LIR Portal (https://lirportal.ripe.net/api/) or if you use the API to submit resource requests, access "IP Analyser", "My Resources" or manage your ROAs, then please continue reading. Otherwise, this message should not concern you. During a recent security review of the LIR Portal, we identified that the API Keys created in the LIR Portal are stored in plain text. This functionality was developed in this way so that users are able to retrieve the keys even after they have created them. However, this poses a risk from a security point of view, because these API Keys are used for authentication and authorisation purposes. These keys should not be stored in plain text. Because there is no indication that the existing API Keys were leaked, and because we do not want to create any operational problems to the API users, we decided not to drop the existing keys. Therefore, your scripts will continue to work and *no change is needed from you*. However, we made the following changes: 1. We hashed all the existing API key values and updated the way the LIR Portal authenticates the keys accordingly. 2. We changed the User Interface in the LIR Portal, so that when a user creates an API key, the value is displayed only once to the user, and the hashed value is stored in the database. 3. Up until now, the keys had to be passed to the request as a URL parameter. Now, the above mentioned APIs also accept the API Key as a request header value. We strongly recommend using the header to pass the API Key value, so that the key is not stored in any server logs. You can find more information in the API Key management section in the LIR Portal. After this change, neither you nor the RIPE NCC can recover the existing keys from the LIR Portal. You can always create new keys, configure them in your scripts, and drop the old ones. Based on our risk evaluation, we plan to act similarly for API Keys used in other services. Please let us know if you have any questions regarding this change. Best regards, Theodoros Polychniatis Assistant Manager Software Engineering Department RIPE NCC

1 0

[meetings] Register for RIPE 80 – The First Virtual RIPE Meeting
by RIPE NCC Event Team 09 Apr '20

09 Apr '20

Dear colleagues, For the first time, the RIPE Meeting will be 100% virtual, and you cannot miss it! You can now register for free at: https://ripe80.ripe.net/register/ RIPE 80 will take place from 12 - 14 May 2020 and will feature a shorter programme and a new schedule. More information about the programme will follow in the coming weeks. Learn more about the meeting at: https://ripe80.ripe.net/ For the latest updates, you can follow us on Twitter at @ripemeeting and by using the hashtag #RIPE80. Kind regards, RIPE Meetings Organisation Team

1 0

[GM] RIPE NCC General Meeting Important Dates
by Alun Davies 06 Apr '20

06 Apr '20

Dear colleagues, Following the earlier announcement from the RIPE NCC Executive Board, we would like to remind all our members that the existing schedule and all important dates for the RIPE NCC General Meeting May 2020 remain as originally announced. Elections to fill three seats on the RIPE NCC Executive Board will take place at this GM. Right now, the call for nominations is still open and all members have till 22 April to send in their nominations by completing our online AGM Nomination form: http://www.ripe.net/participate/forms/apply/agm-nomination/ <http://www.ripe.net/participate/forms/apply/agm-nomination/> In light of the COVID-19 situation, this year's May GM will be held at the RIPE NCC office in Amsterdam. Due to restrictions put in place by the Dutch government in response to the outbreak, and given the potential risk to the health and safety of our staff and members alike, it will be difficult to arrange for physical attendance of members at this meeting. We therefore strongly advise that members opt to attend the upcoming GM through electronic means at a remote location. Full remote participation will be available as usual in order to ensure that all our members will be able to follow presentations, join in the discussion and cast their votes by electronic means. All information about the GM, including registration details, is available at: https://www.ripe.net/participate/meetings/gm/meetings/may-2020 <https://www.ripe.net/participate/meetings/gm/meetings/may-2020> Kind Regards, General Meeting Organisation Team RIPE NCC RIPE NCC General Meeting May 2020 Important Dates: 26 Feb - Call for nominations to RIPE NCC Executive Board 26 Feb - Open registration for General Meeting 15 Apr - Publish RIPE NCC Annual Report and Financial Report 2019 22 Apr - Close nominations for Executive Board elections 29 Apr - Deadline for proxy vote nominations 29 Apr - Deadline for members to propose resolutions 29 Apr - Deadline to publish final GM agenda 13 May - Close registration for electronic voting 13 May - GM begins with main meeting 15 May - GM closes with announcement of voting results

1 0

[news] New AS Number Blocks Allocated to the RIPE NCC
by Nikolas Pediaditis 02 Apr '20

02 Apr '20

Dear colleagues, On 1 April 2020, the RIPE NCC received the following AS Number blocks from IANA: 210332-211355 211356-212379 212380-213403 You may want to update your records accordingly. All allocations of AS Numbers made by IANA to RIRs are listed here: https://www.iana.org/assignments/as-numbers/as-numbers.xhtml Kind regards, Nikolas Pediaditis Registration Services & Policy Development Manager RIPE NCC

1 0

[service] All Deleted RPKI ROAs Have Been Reinstated
by Nathalie Trenaman 02 Apr '20

02 Apr '20

Dear colleagues, We have now reinstated the deleted ROAs and everything is back to normal. If you created replacement ROAs in the meantime, you will not need to do anything - any changes will still be there. We have now implemented measures that will prevent this from happening again in the future. We will also share a full post-mortem with the RIPE Routing Working Group tomorrow: <routing-wg(a)ripe.net <mailto:routing-wg@ripe.net>>. Apologies again for the inconvenience. Kind regards Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

[service] Accidental Deletion of ROAs
by Nathalie Trenaman 02 Apr '20

02 Apr '20

Dear colleagues, Yesterday at 18:17 (UTC+2) we accidentally deleted 4,100 RPKI Route Origin Authorisations (ROAs). These ROAs were related both to members' and sponsored resources. This happened while we were performing maintenance on our internal software. We are currently investigating and will update you when we know more. Apologies for the inconvenience. Kind regards Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0