About

This page shows the live KSK rollover status for the root zone on a.root-servers.net. It checks which key tag is currently signing the root DNSKEY RRset:

• Key tag 19036 (KSK 2010) — original key, used before the first rollover in October 2018
• Key tag 20326 (KSK 2017) — current key, in use since the first root zone KSK rollover on October 11, 2018
• Key tag 38696 (KSK 2024) — next key, published January 11, 2025; scheduled to begin signing on October 11, 2026, with revocation of KSK 2017 on January 11, 2027

Idea by Jan-Piet Mens