Root Files

Root Hints

Operators who manage a DNS recursive resolver typically need to configure a "root hints file". This file contains the names and IP addresses of the root zone, so the software can bootstrap the DNS resolution process. For many pieces of software, this list comes built into the software.

Root Zone File

The complete root zone is available for download at the following locations. Ordinarily there should be no need to download this file on a regular basis, as the contents of the file are served via the DNS system itself.

Root Trust Anchor

The Root Trust Anchor, or Key Signing Key, is used by DNSSEC-enabled software to verify the contents of the DNS root zone is valid. It additionally enables a single chain of trust to DNSSEC-enabled top-level domains and beyond.