RIPE NCC Quarterly Sanctions Transparency Report (Q1 2024)

Introduction

This quarterly report provides data on how RIPE NCC members, End Users and legacy resource holders are affected by sanctions, while respecting their confidentiality and privacy.

As an organisation based in the Netherlands, the RIPE NCC must comply with EU sanctions. If we believe that a member or other resource holder is subject to EU sanctions that are applicable to our services, we freeze the registration (not the use) of their resources in the RIPE Database. This means that sanctioned entities cannot acquire further resources or transfer existing ones. However, we do not deregister their resources or terminate their Standard Service Agreement (SSA) if they are RIPE NCC members.

If a member or End User does not cooperate with our checks, we treat them as though they are sanctioned. This is because we have no way to establish otherwise. We have decided to include these members and End Users in this report for transparency.

Sanctions Data

The tables below show any changes since the previous quarter, as well as the total number of resource holders and resources affected. This includes the date of action and what action was taken. The table also shows our relation to a sanctioned entity – whether they are a RIPE NCC member, End User or legacy resource holder. We also specify the country in which the resource holder is legally registered.

Summary of Changes

Since our last report, one member and one End User had their non-cooperative status withdrawn and two members and one End User were marked as non-cooperative.

Changes Since Last Quarter

*The End User was assigned another ASN after the non-cooperation status was withdrawn.

** The member increased their IPv6 allocation from a /32 to a /29 after the non-cooperation status was withdrawn.

Status on 5 January 2024

Cases Under Investigation

Alongside the number of resource holders confirmed to be subject to EU sanctions that are applicable to our services, there is a much larger number of potential matches under investigation. These statistics show the wider impact that sanctions are having on the Internet as well as the work needed to contact potential matches and request supporting documentation.

Most of these cases turn out to be false positives. However, because there is no grace period allowed for sanctions compliance, potential matches must be treated as though they are sanctioned until our staff can confirm otherwise. This means that we will not process any requests for new resources or to transfer existing ones until a potential sanctions case has been cleared.

Since early 2021, updates to the EU sanctions list have resulted in a total of 1,266 potential cases requiring investigation.

Cases Under Investigation: Status of Cases

* "Confirmed false positive" means that the EU sanction alert from the screening software was not related to the entity that is a member or End user. “Not applicable” are cases where the EU sanction alert is confirmed to be related to the member or End User, but the particular EU sanction regulation is not applicable to the RIPE NCC. “Exempt” is for cases where the EU sanction alert is confirmed to be related to the member or End User, but the EU sanction regulation has been exempted for Internet resources.

Cases Requiring Investigation: Type of Resource Holder

Note: We also check against the Office of Foreign Asset Control (OFAC) sanctions list, which is maintained by the United States Government. While we are under no obligation to comply with US sanctions, they are a factor for banking institutions in the Netherlands.