⁵At the RIPE NCC we are working on a dedicated signing server that has SSH based access control. Based on which key is used to login, a dedicated shell is opened; A zone maintenance shell allows signing of zones; A key maintenance shell for key maintenance. Only system administrators can access the key-material itself. A beta version of this tool is available on RIPE NCC’s website < http:www.ripe.net/disi/dnssec_maint_tool/>.