Access to the RRI

Access

You may enter and change an RRI login for Live and Rush and the related password via the web application RAI (RegAcc Administration Interface).

RRI Login

Client authentication vis-à-vis the server is implemented by means of the user and the password (encrypted channel).

The value entered for "User" is the login in form of an existing DENIC handle of the RegAcc.

Password

You may use all visible Unicode characters (according to Unicode Version 3.1) as password.

The password is not transmitted to DENIC in plain text but as an MD5 hash. DENIC places at disposal a tool for creating the hash on the member website (Hash Generator). When you use a tool such as md5sum, keep in mind that the line break must not be taken into consideration for calculating the hash. (Example: "echo –n MyPW | md5sum" but not "echo MyPW | md5sum")

Notice   Choose a secure password.

 

IP Allowlisting

In addition to the user and password, the system checks whether the connection is being made via an authorized IP address. The IP address must be stored in the RAI beforehand.

  • A maximum of 20 different entries can be stored.

  • Address masks /32 to /24 are supported.

  • The same networks may be used for multiple RegAccs.

Figure 1:  Entry in the RAI

Hint   Please keep the following in mind when entering IP addresses in the RAI.

Assuming you want to enter a total of 5 IP addresses, it makes sense to enter all 5 IP addresses for the RegAcc at once and then save the change.

What would happen if you only entered one IP address first?
IP allowlisting would be activated for this one IP address.
However, this would also immediately block your 4 other IP addresses for RRI.

Summary
  1. Remember that IP allowlisting is activated immediately as soon as you enter and save an address.
  2. Think about how many IP addresses you want to enter beforehand.
  3. Then enter all IP addresses at once and save your changes.

Additional tip
Of course, you can do the same if you want to deactivate IP allowlisting (only possible until February 3, 2026). Delete all IP addresses and then save your changes.

 

Caution!   IPv6 is not supported!

 

Caution!   IP Allowlisting will become mandatory for all members starting February 3, 2026! From that point on, you will need to enter IP addresses.

 

Notice   You can enter your IP addresses for your RegAccs in the RAI before February 3, 2026, to activate or try out IP Allowlisting.

 

Server Data

  • Live & Rush environment

    Host name: rri.denic.de

    Port for TCP: 51131

  • Test environment

    Host name: rri.test.denic.de

    Port for TCP: 51131

Particularities

  • Test environment

    • RGP lasts one day

    • AuthInfo2 password is "secret"

    • Domain with status "failed" is deleted after one day

    • RGP ends between 10am and 12pm

    • ACL is 100 requests / minute