[dns-wg] RIPE NCC trust anchor file signature verification