O que mudou
Não é possível determinar o que mudou na política ripencc/2019-03, pois a cronologia verificada não contém propostas, versões, datas, alterações textuais ou atos decisórios.
RIPE NCC · Monitoramento de RIR
Comece aqui pelo registro de cada proposta: o que mudou, por que isso foi relevante, quem defendeu cada posição, como as posições evoluíram, o que foi decidido e onde ainda há lacunas nas evidências.
Fatos com fonte
Quem realmente moldou o debate?
Análise BTW
Não é possível determinar o que mudou na política ripencc/2019-03, pois a cronologia verificada não contém propostas, versões, datas, alterações textuais ou atos decisórios.
Não é possível identificar o conteúdo ou o eixo substantivo do debate. O conjunto verificado contém zero mensagens, zero participantes e nenhuma linha temporal de posição, de modo que não sustenta inferências sobre interesses, incentivos, controvérsias ou convergência.
Não há base verificada para distinguir discussão comunitária de decisão formal. Nenhuma discussão foi capturada e não foram fornecidos decisão final, decisor, data, regra processual, fundamentação ou status do resultado.
As participações dos maiores emissores, o HHI, o número efetivo de participantes e os núcleos de 50% e 80% são todos zero porque o conjunto registra zero mensagens e zero participantes. Esses valores não demonstram distribuição ampla nem concentração baixa; apenas indicam ausência de atividade observada no recorte verificado.
Nenhum ponto de estrangulamento decisório ou participativo pode ser identificado. Sem mensagens, participantes, atores formais, cronologia ou ato decisório, não é possível atribuir controle de agenda, domínio argumentativo, poder de veto ou autoridade final a qualquer ator ou etapa processual.
Resource coverage and investigation boundary · Version 2 expressly includes unassigned IP address space and Autonomous System Numbers and limits investigation to suspected hijackers subject to RIPE policies. Version 1 instead expressly makes both parties' location irrelevant. This compares proposed coverage and does not establish present jurisdiction or an adopted enforcement rule.
The location of the resource holder or hijacker in such cases is irrelevant. A hijack constitutes a policy violation even if both parties are located outside of the RIPE NCC service region. The announcement of unallocated address space to third parties is also considered a policy violation and is evaluated according to the same parameters.Fatos com fonte ↗
A hijack of numbering resources or the announcement of unallocated or unassigned IP addressing space or Autonomous System Numbers to third parties are also considered a policy violation. Only reports in which the suspected hijacker is subject to RIPE policies can be investigated.Fatos com fonte ↗
More explicit exclusions for accidental events · Version 2 develops the distinction between accidental and deliberate conduct: clearly accidental cases are dismissed, BGP leaks are outside scope, and proven third-party manipulation of the alleged hijacker's infrastructure is not treated as intentional. Similar-looking prefixes and parallel legitimate announcements are not sufficient by themselves to prove intent. Version 1 gives general assessment factors without these express safeguards.
A distinction can be made between accidental or deliberate hijacks from available routing datasets, looking at parameters such as duration, recurrence, possible goals, and the size of hijacked blocks.Fatos com fonte ↗
BGP leaks are outside the scope of this policy. Any case strictly related to BGP leaks should be dismissed.Fatos com fonte ↗
Directly affected claimants and six-month evidence limit · Version 2 permits reports only from directly affected networks: legitimate resource holders or networks that received the hijacked route or AS path. It excludes reports by unaffected parties and evidence older than six months at submission. Version 1 relies on external reports without stating these limits; both versions exclude pre-implementation events.
It must therefore rely on external parties, both to report hijacks and determine whether they are deliberate.Fatos com fonte ↗
A report is not admissible if the person reporting it was not affected in any way by the hijack. Evidence older than six months, counted from the time a report is submitted, cannot be considered or included in any expert report.Fatos com fonte ↗
Earlier notice and treatment of connected networks · Version 2 makes reported routes or ASNs public to reduce duplicate reports and notifies identified parties early so they can respond and mitigate harm. It also provides for informational notice to direct upstream or transit providers and investigation of related organisations. Such notice is not a formal warning; experts are separately prohibited from adding accused parties to the case. Version 1 mainly provides notice when the judgement report is sent to the suspected hijacker.
A report containing an expert judgement on the case will be sent to the suspected hijacker.Fatos com fonte ↗
Information regarding the hijacked routes/ASNs reported will be made publicly available to limit the risk of duplicate reports being submitted. The involved parties will be notified as soon as they are identified. This will allow them to provide any relevant information and mitigate the hijack, avoiding further damages and possibly false claims.Fatos com fonte ↗
Longer initial assessment with an express dismissal consequence · Version 2 extends the expert judgement deadline from four to six weeks after receipt of the report and expressly requires dismissal if it is missed. The retained Version 1 states the four-week deadline without that dismissal rule.
Experts from this pool will provide a judgement regarding each reported case, no later than four weeks from the moment the report was received.Fatos com fonte ↗
Experts from this pool will provide a judgement regarding each reported case, no later than six weeks from the moment the report was received. If this judgement report is not completed within six weeks, the case will be dismissed.Fatos com fonte ↗
Defined expert qualifications and eligibility · Version 2 adds an open biennial selection process, suggested BGP experience, support from three networks in three economies under different LIR sponsorships, and a four-consecutive-year service limit followed by a two-year break. Proposal authors and active RIPE working-group chairs cannot serve as experts. Version 1 only requires the RIPE NCC to define a worldwide expert pool.
The RIPE NCC will define a pool of worldwide experts who can assess whether reported BGP hijacks constitute policy violations.Fatos com fonte ↗
To join the pool of experts, a candidate will need a statement support from three different networks (ASes) from three different economies within the RIPE NCC service region, which are within different LIR sponsorships. The authors of this proposal and active RIPE WG Chairs are not eligible to become experts.Fatos com fonte ↗
Multi-expert panels and case-integrity safeguards · Version 2 requires at least three experts per case and phase, with any larger panel having an odd number and the same size used across cases. It adds random assignment, confidential panel identities, impartiality declarations, appeal confidentiality, continuity and replacement rules, legal insurance and a minimum available pool twice the per-case minimum. These replace Version 1's largely unspecified expert arrangement.
The RIPE NCC will define a pool of worldwide experts who can assess whether reported BGP hijacks constitute policy violations.Fatos com fonte ↗
The minimum number of experts per case and phase will be three. If a larger number is necessary, it must be odd, and the community will be informed of the reasons for the change. The experts for each case/phase will be chosen at random, to ensure a balanced sharing of cases.Fatos com fonte ↗
Unanimity and procedural independence · Version 2 adds a sufficiency check before assignment, a response opportunity for the suspected hijacker and a joint expert report. An intentional-hijack finding requires unanimity. RIR staff cannot sit on the panel, and neither the RIPE NCC nor claimants may appeal the experts' decisions. These safeguards are not specified in Version 1's short lines-of-action provision.
Experts from this pool will provide a judgement regarding each reported case, no later than four weeks from the moment the report was received.Fatos com fonte ↗
For an event to be identified as an intentional hijack, there must be unanimity between all experts on the case. Experts cannot add accused parties to a case.Fatos com fonte ↗
A separate unanimous panel for appeals · Version 2 replaces review by an alternative expert with a different panel of at least three experts. All reviewing experts must agree to maintain an intentional-hijack finding; otherwise the case is dismissed. The maximum two-week appeal-filing and four-week review periods remain, with finality after review.
If an appeal is filed, an alternative expert will review this for a maximum of four weeks. The results of this review are final and cannot be further appealed.Fatos com fonte ↗
If an appeal is filed, an alternative set of experts (a minimum of three) will review the report for a maximum of four weeks. In order to maintain a ruling of “intentional hijack”, all experts involved in the review need to agree that this has occurred.Fatos com fonte ↗
Ratification moves from the board to the experts · Version 2 replaces RIPE NCC Executive Board ratification with unanimous ratification by all experts involved, after a two-week public consultation. Without unanimity the report is archived, and experts may decline ratification on the basis of undisclosed information or consultation input. Ratification still waits for an appeal to finish.
Once the report has been published, any policy violation will be ratified by the RIPE NCC Executive Board. Otherwise, the complaint/report will be archived.Fatos com fonte ↗
Once the report has been published, any policy violation will need to be ratified by all experts involved in the case, following a two-week public consultation on the report. If ratification is not declared unanimously, the report will be archived.Fatos com fonte ↗
Transition arrangements and existing bogons · Version 2 adds six months of warning-only treatment for non-malicious announcements of unassigned resources and excludes bogons already present when implementation begins. Version 1 states only that eligible hijacks must occur after implementation. These are proposed transition protections, not evidence that an implementation date was reached.
Only hijacking events that occur after this policy has been implemented are eligible to be considered.Fatos com fonte ↗
As soon as the policy implementation is completed, a transition period of six months will be established. This will allow organisations that announce unassigned address space or Autonomous System Numbers (due to operational errors or other non-malicious reasons) to receive only a warning.Fatos com fonte ↗
Protection of legacy and uninvolved PI resource holders · Version 2 expressly preserves legacy registration, while allowing possible restrictions on other RIPE NCC services in the repeated-violation circumstances described later. Uninvolved PI holders are protected from deregistration and may change sponsoring LIRs; sponsorship alone does not make the LIR responsible for a customer's hijack. Version 1 has no comparable resource-holder safeguards.
There must be consequences for hijacking for members or individuals/organisations that have a service agreement (either directly or indirectly) with the RIPE NCC.Fatos com fonte ↗
Holders of Provider Independent resources that are sponsored by an LIR that is found have committed a deliberate hijack will not have their resources de-registered and will be able to find a new sponsoring LIR (provided they were not involved). In the same way, a sponsoring LIR is not responsible if its customer is found to have committed a hijack.Fatos com fonte ↗
Repeated violations rather than a single violation for closure · Version 2 expressly links possible closure procedures to regular and repeated hijacking and says a single policy violation is not a basis it endorses for initiating LIR closure. Version 1 discusses refusing or ending contractual relationships in its rationale without stating this repeated-conduct threshold. This does not make closure automatic.
However, the RIPE NCC needs to be able to choose not to enter into (or maintain) a contractual relationship with people/companies that are performing BGP hijacks.Fatos com fonte ↗
This policy does not endorse the initiation of an LIR closure procedure on the basis of a single policy violation.Fatos com fonte ↗
A cobertura da fonte está incompleta.
Parcial
Primeiro registro: 30 de jun. de 1992
Último registro: 11 de out. de 2026