The DNS root zone began using a new Key Signing Key (KSK) on 11 October 2026. The new KSK, identified by key tag 38696, replaces the previous key for the DNS root zone. This change is part of the planned KSK rollover and ongoing maintenance of the DNSSEC trust anchor.
DNS Root Zone Begins Using New Key Signing Key
calendar_today
October 11, 2026
domain
internet-assigned-numbers-authority