Root Zone KSK Rollover Scheduled for 11 October 2026
The DNS Root Zone Key Signing Key (KSK) will be replaced on 11 October 2026. Operators of DNSSEC-validating resolvers, especially those with manually configured trust anchors or older software, should confirm their systems trust the new KSK before the rollover.
https://www.icann.org/resources/press-material/release-2026-05-20-en