New Root Zone trust anchor being distributed

3 February 2017

Following successful key ceremonies in October 2016 and February 2017, a new key signing key for the DNS root zone has been generated that is expected to be used later in 2017. Software implementing DNSSEC validation should obtain the revised root anchors https://www.iana.org/dnssec/files in our repository. This is an important step in the KSK Rollover project https://www.icann.org/resources/pages/ksk-rollover.