Hi Andres, Some people in the DNS team at Cloudflare put this together, which may be of interest: https://dnstest.dev/ksk-2024/ The idea is to give people a simple way to see visually whether everything looks good or whether more investigation might be a good idea. Joe

On 23 Sep 2026, at 00:54, Andres Pavez <andres.pavez@iana.org> wrote:

Hi everyone, The next Root Zone Key Signing Key (KSK) rollover is scheduled for 11 October 2026. Operators of DNSSEC-validating resolvers should verify that KSK-2024 (Key Tag 38696) is present in their trust anchor configuration before the rollover.

Information and resources, including technical guidance, FAQs, and the rollover timeline, are available on the 2026 Root KSK Rollover page: https://www.icann.org/resources/pages/ksk-rollover-en

We encourage you to share questions, observations, or experiences before, during, and following the rollover on the KSK Rollover mailing list: https://lists.icann.org/postorius/lists/ksk-rollover.icann.org

Thank you for your continued participation and support in helping ensure a smooth rollover. Best regards, -- Andres Pavez Cryptographic Key Manager ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/dns-wg.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/