dnssec on the reverse tree

[Brett Carr]

Dear Colleagues,

As part of the project to deploy DNSSEC in the RIPE NCC Service region, the
RIPE NCC has started signing three zones from the reverse tree.

The following zones are now signed:

ripe.net
ripencc.com
ripencc.net
ripencc.org
ripe-ncc.com
ripe-ncc.net
ripe-ncc.org
89.in-addr.arpa
90.in-addr.arpa
213.in-addr.arpa

If you want to configure your resolvers to verify these zones using DNSSEC,
*key signing keys* for these zones are available at:
https://www.ripe.net/projects/disi/keys/ripe-ncc-dnssec-keys.txt

For information about how to use the keys, and for further details about
DNSSEC deployment at the RIPE NCC, please see:
http://www.ripe.net/projects/disi/keys/

We will shortly start accepting secure delegations. There will be more
information about this soon.

Regards

Brett Carr
RIPE NCC