Dear all,
During its 191st board meeting, held on 26-27 March 2026, the RIPE NCC Executive Board approved amendments to the RIPE NCC Certification Service and RIPE NCC Publish-in-Parent Terms and Conditions.
These changes are in compliance with the RIPE Policy “Revocation of Persistently Non-functional Delegated RPKI CAs” (ripe-847, hereafter “the Policy”), accepted on 15 October 2025 by the Routing Working Group. The Policy grants the RIPE NCC a mandate to revoke resource certificates associated with longtime non-functional CAs and, in doing so, reduce the workload for the parties relying on these certificates.
The changes include the amendment of Article 5.3 of the RIPE NCC Certification Service Terms and Conditions, describing the termination of the Certification Service by the RIPE NCC, followed by a revocation of the Delegated CA Certificate(s) in the event that the RIPE NCC is unable to verify the existence of a valid Manifest or CRL for any of these CAs for a continuous period exceeding 90 days. We have also added definitions of “Manifest” and “CRL” to Article 1 of the RIPE NCC Certification Services Terms and Conditions.
In addition to the amendments to the RIPE NCC Certification Service Terms and Conditions, we added a new Article 4.8 to the RIPE NCC Publish in Parent and Repository Terms and Conditions. This clarifies that, in the event of termination of the Certification Service by the Certificate Holder, the use of Publish in Parent Service shall be terminated by the RIPE NCC.
Furthermore, we have added Article 3.11 to the RIPE NCC Certification Service Terms and Conditions and 5.3 of RIPE NCC Publish in Parent and Repository Terms and Conditions, addressing the removal of RPKI-signed objects created and published by the Certificate Holder whose access to the Certification service and Publish-in-Parent service has been terminated. This approach is consistent with the intent of the Policy, as these objects lack a valid certificate and therefore cannot be validated; consequently, their continued existence in the system is no longer justified.
We also added Article 4.7 to the RIPE NCC Publish in Parent Terms and Conditions, specifying that the Certificate Holder can terminate the use of the service at any time.
Lastly, we corrected the wording in Article 2.1 of the RIPE NCC Certification Services Terms and Conditions to reflect a slight change in the text used in the LIR Portal for acceptance of the Terms and Conditions. We also corrected several minor spelling errors in the document.
The updated terms and conditions are available at:
The RIPE NCC Executive Board Meeting minutes are available at: https://www.ripe.net/about-us/executive-board/minutes/executive-board-minutes-2026/191st-executive-board-meeting-minutes/
The amendments will come into effect on 08/06/2026.
Kind regards,
Karolina Bochenek
RIPE NCC