Has the KSK rolled?

The root DNSKEY is currently signed by KSK 2017 (key tag 20326). The 2026 KSK rollover has not yet occurred. (cached)

The next KSK rollover is planned for October 11, 2026 (with revocation of the current key on January 11, 2027). Announcement

The last root KSK rollover took place on October 11, 2018 at 1600 UTC. More information