Initial Certification Policy in the RIPE NCC Service Region
Abstract
The following guidelines apply only to certification of Internet number resources held by RIPE NCC members in good standing.
Contents
1.0 Certification of Internet Number Resources
2.0 References
3.0 Attribution
1.0 Certification of Internet Number Resources
The RIPE NCC will issue certificates for Internet number resources upon request to the registered holder of those resources.
Initially, the following Internet number resources distributed by the RIPE NCC will be eligible for certification:
- IPv4 resources with the status "ALLOCATED PA" and "ALLOCATED UNSPECIFIED"
- IPv6 resources with the status "ALLOCATED-BY-RIR"
The RIPE NCC will issue certificates upon request for RIPE NCC supplied IP Resources to the LIR that is the registered holder of those resources.
The certificate will be issued via a secure channel.
Certificates will be issued with a validity period of up to 18 months or as otherwise stated in the RIPE NCC Certificate Practice Statement [1].
In the event of revocation due to security breach or similar, new certificates will be issued with a validity period equal to the remaining validity of the revoked certificate.
Certificates will at all times reflect the registration status of the resource.
2.0 References
[1] RIPE NCC RPKI (Resource Public Key Infrastructure) Certification Practice Statement, www.ripe.net/certification/cps.html
3.0 Attribution
This document is compiled from policies developed by the RIPE community.
The following people actively contributed by making proposals through the RIPE Policy Development Process:
Nigel Titley