dnssec-tracker

dnshl.net

Key directory: /mnt/bind/keys/dnshl.net
Tracked since 2026-04-11T11:03:18Z, last observation 2026-04-13T17:20:44Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
13906 KSK 13 Kdnshl.net.+013+13906 2026-04-11T11:03:18Z
52823 KSK 13 Kdnshl.net.+013+52823 2026-04-11T11:03:18Z
5175 ZSK 13 Kdnshl.net.+013+05175 2026-04-11T11:03:18Z
42522 ZSK 13 Kdnshl.net.+013+42522 2026-04-11T11:03:18Z
62252 ZSK 13 Kdnshl.net.+013+62252 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-publication / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-04-13 17:21 UTC2026-04-112026-04-112026-04-122026-04-122026-04-122026-04-122026-04-132026-04-132026-04-13KSK · alg 13ZSK · alg 13tag 13906KSK tag 13906 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 17:21 UTCactiveDS observed at parent 2026-04-11 11:03 → 2026-04-13 17:21 UTCDStag 52823KSK tag 52823 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 17:21 UTCactiveDStag 5175ZSK tag 5175 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 17:21 UTCactivetag 42522ZSK tag 42522 alg 13 — published DNSKEY visible but not yet signing 2026-04-11 11:03 → 2026-04-13 17:21 UTCpublishedtag 62252ZSK tag 62252 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 17:21 UTCactivenowpre-publicationpublishedactiveto be deletedpast deletion date

Calendar view

← earlier 2026-12 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
November 2026
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
23242526272829
30123456
December 2026
MonTueWedThuFriSatSun
30123456
78910111213
14151617181920
21222324252627
28293031123
January 2027
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
25262728293031

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11T11:03:18+00:00 → 2026-04-13T00:40:23+00:0004-11 11:0304-11 15:4504-11 20:2704-12 01:0904-12 05:5104-12 10:3304-12 15:1604-12 19:5804-13 00:4011:03:18 [dns] dns_soa_appeared_at_zone: SOA observed at zone for dnshl.net (serial 2023071876) 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 13906) appeared at zone for dnshl.net 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 42522) appeared at zone for dnshl.net 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 5175) appeared at zone for dnshl.net 11:03:19 [dns] dns_ds_appeared_at_parent: DS (key tag 13906) appeared at parent for dnshl.net 11:03:19 [rndc] rndc_first_observation: dnshl.net: observed 0 key(s) via rndc613:03:17 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net 13:03:17 [dns] dns_rrsig_appeared_at_zone: RRSIG over DNSKEY (key tag 13906) appeared at zone for dnshl.net208:06:56 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net 08:06:56 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net200:40:23 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net 00:40:23 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net2dnsrndc

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:0411:03:18 [key] key_file_observed: new K*.key for dnshl.net KSK tag=52823 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=62252 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=812 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=10703 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=48972 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net KSK tag=15101 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net KSK tag=5666 11:03:18 [key] key_file_observed: new K*.key for dnshl.net KSK tag=13906 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=5175 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=4252210key

State transition timeline

No state transitions recorded in this window.

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-04-13T00:40:23Z dns 5175 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net
2026-04-13T00:40:23Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-12T08:06:56Z dns 5175 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net
2026-04-12T08:06:56Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-11T13:03:17Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-11T13:03:17Z dns 13906 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 13906) appeared at zone for dnshl.net
2026-04-11T11:03:19Z dns 13906 dns_ds_appeared_at_parent DS (key tag 13906) appeared at parent for dnshl.net
2026-04-11T11:03:19Z rndc rndc_first_observation dnshl.net: observed 0 key(s) via rndc
2026-04-11T11:03:18Z dns dns_soa_appeared_at_zone SOA observed at zone for dnshl.net (serial 2023071876)
2026-04-11T11:03:18Z dns 13906 dns_dnskey_appeared_at_zone DNSKEY (key tag 13906) appeared at zone for dnshl.net
2026-04-11T11:03:18Z dns 42522 dns_dnskey_appeared_at_zone DNSKEY (key tag 42522) appeared at zone for dnshl.net
2026-04-11T11:03:18Z dns 5175 dns_dnskey_appeared_at_zone DNSKEY (key tag 5175) appeared at zone for dnshl.net
2026-04-11T11:03:18Z key KSK 52823 key_file_observed new K*.key for dnshl.net KSK tag=52823
2026-04-11T11:03:18Z key ZSK 62252 key_file_observed new K*.key for dnshl.net ZSK tag=62252
2026-04-11T11:03:18Z key ZSK 812 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=812
2026-04-11T11:03:18Z key ZSK 10703 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=10703
2026-04-11T11:03:18Z key ZSK 48972 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=48972
2026-04-11T11:03:18Z key KSK 15101 key_file_observed new K*.key for hjkl.dnshl.net KSK tag=15101
2026-04-11T11:03:18Z key KSK 5666 key_file_observed new K*.key for hjkl.dnshl.net KSK tag=5666
2026-04-11T11:03:18Z key KSK 13906 key_file_observed new K*.key for dnshl.net KSK tag=13906
2026-04-11T11:03:18Z key ZSK 5175 key_file_observed new K*.key for dnshl.net ZSK tag=5175
2026-04-11T11:03:18Z key ZSK 42522 key_file_observed new K*.key for dnshl.net ZSK tag=42522