[dns-wg] RIPE NCC DNSSEC Key Rollover

["Brett Carr" brettcarr@localhost]

[Apologies for Duplicates]


Dear Colleagues,

The RIPE NCC changes the Key Signing Keys (KSKs) for its signed zones twice
each year. We have today published new keys for all zones. Old keys will
continue to function until the second stage of the rollover on 3 July 2006.

We recommend that you reconfigure any resolvers to use the new keys before
then. You can download them from:
https://test-www.ripe.net/projects/disi//keys/ripe-ncc-dnssec-keys-new.txt

The DNSSEC Key Maintenance Procedure is available at:
https://test-www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html

If you have any questions about this, please send an e-mail to
ops@localhost.

Regards,


Brett Carr
RIPE NCC