You are here: Home > Manage IPs and ASNs > DNS > DNSSEC > DNSSEC Keys


You’re viewing an archived page. It is no longer being updated.

Trust Anchors

Last Update: 14 November 2012

Important Note: You need to comply with the Acceptable Use Policy (AUP) which can be found at the top of the trust anchor files.

  • Trust Anchor format (PGP signature)
  • Delegation Signer (DS) format (PGP signature)



As explained in our DNSSEC Policy and Practice Statement, new keys will be added or removed according to the schedule below.


    • Mid November 2012: KSK roll-over
    • End November 2012: Finish KSK roll-over



    • Mid September 2011: Finish key roll-over.
    • 5 September 2011: KSK roll-over.
    • Mid May 2011: Finish key roll-over.
    • 11 April 2011: KSK roll-over.
    • 12 January 2010: Finish key rollover.
    • 28 October 2010: Initialise key rollover.