Dear Colleagues,

The RIPE NCC changes the Key Signing Keys (KSKs) for its signed zones twice each year. We have today published new keys for all zones. Old keys will continue to function until the second stage of the rollover on 3 July 2006.

We recommend that you reconfigure any resolvers to use the new keys before then. You can download them from: https://test-www.ripe.net/projects/disi//keys/ripe-ncc-dnssec- keys-new.txt

The DNSSEC Key Maintenance Procedure is available at: https://test-www.ripe.net/rs/reverse/dnssec/key-maintenance-pr ocedure.html

If you have any questions about this, please send an e-mail to <ops@ripe.net>.>

And of course no matter how many times you read through an e-mail before you send it to make sure you don't make a mistake, well you.. make a mistake. Now with the correct url's Dear Colleagues, The RIPE NCC changes the Key Signing Keys (KSKs) for its signed zones twice each year. We have today published new keys for all zones. Old keys will continue to function until the second stage of the rollover on 3 July 2006. We recommend that you reconfigure any resolvers to use the new keys before then. You can download them from: https://www.ripe.net/projects/disi//keys/ripe-ncc-dnssec-keys-new.txt The DNSSEC Key Maintenance Procedure is available at: https://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html If you have any questions about this, please send an e-mail to <ops@ripe.net>. Regards, Brett Carr RIPE NCC