dnssec-tracker

dnshl.net

Key directory: /mnt/bind/keys/dnshl.net
Tracked since 2026-04-11T11:03:18Z, last observation 2026-04-15T09:22:37Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
13906 KSK 13 Kdnshl.net.+013+13906 2026-04-11T11:03:18Z
52823 KSK 13 Kdnshl.net.+013+52823 2026-04-11T11:03:18Z
5175 ZSK 13 Kdnshl.net.+013+05175 2026-04-11T11:03:18Z
42522 ZSK 13 Kdnshl.net.+013+42522 2026-04-11T11:03:18Z
62252 ZSK 13 Kdnshl.net.+013+62252 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-published / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-04-15 09:22 UTC2026-04-112026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-15KSK · alg 13ZSK · alg 13tag 13906KSK tag 13906 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 09:22 UTCactiveDS observed at parent 2026-04-11 11:03 → 2026-04-15 09:22 UTCDStag 52823KSK tag 52823 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 09:22 UTCactiveDStag 5175ZSK tag 5175 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 09:22 UTCactivetag 42522ZSK tag 42522 alg 13 — published DNSKEY visible but not yet signing 2026-04-11 11:03 → 2026-04-15 09:22 UTCpublishedtag 62252ZSK tag 62252 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 09:22 UTCactivenowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 2027-03 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
February 2027
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
March 2027
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
April 2027
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
262728293012

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11 11:03 → 2026-04-13 00:40 UTCrndcdns04-11 11:0304-11 15:4504-11 20:2704-12 01:0904-12 05:5104-12 10:3304-12 15:1604-12 19:5804-13 00:4011:03:19 [rndc] rndc_first_observation: dnshl.net: observed 0 key(s) via rndc511:03:18 [dns] dns_soa_appeared_at_zone: SOA observed at zone for dnshl.net (serial 2023071876) 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 13906) appeared at zone for dnshl.net 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 42522) appeared at zone for dnshl.net 11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 5175) appeared at zone for dnshl.net 11:03:19 [dns] dns_ds_appeared_at_parent: DS (key tag 13906) appeared at parent for dnshl.net213:03:17 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net 13:03:17 [dns] dns_rrsig_appeared_at_zone: RRSIG over DNSKEY (key tag 13906) appeared at zone for dnshl.net208:06:56 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net 08:06:56 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net200:40:23 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net 00:40:23 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11 11:03 → 2026-04-14 01:00 UTCkey2026-04-112026-04-112026-04-122026-04-122026-04-122026-04-132026-04-132026-04-132026-04-141011:03:18 [key] key_file_observed: new K*.key for dnshl.net KSK tag=52823 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=62252 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=812 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=10703 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net ZSK tag=48972 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net KSK tag=15101 11:03:18 [key] key_file_observed: new K*.key for hjkl.dnshl.net KSK tag=5666 11:03:18 [key] key_file_observed: new K*.key for dnshl.net KSK tag=13906 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=5175 11:03:18 [key] key_file_observed: new K*.key for dnshl.net ZSK tag=42522301:00:06 [key] key_timing_changed: dnshl.net ZSK tag=5175 Delete: 20260425000000 -> 20260502000000 01:00:06 [key] key_timing_changed: dnshl.net ZSK tag=5175 Inactive: 20260421000000 -> 20260428000000 01:00:06 [key] key_timing_changed: dnshl.net ZSK tag=42522 Activate: 20260421000000 -> 20260428000000

State transition timeline

No state transitions recorded in this window.

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-04-14T01:00:06Z key ZSK 5175 key_timing_changed dnshl.net ZSK tag=5175 Delete: 20260425000000 -> 20260502000000
2026-04-14T01:00:06Z key ZSK 5175 key_timing_changed dnshl.net ZSK tag=5175 Inactive: 20260421000000 -> 20260428000000
2026-04-14T01:00:06Z key ZSK 42522 key_timing_changed dnshl.net ZSK tag=42522 Activate: 20260421000000 -> 20260428000000
2026-04-13T00:40:23Z dns 5175 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net
2026-04-13T00:40:23Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-12T08:06:56Z dns 5175 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 5175) disappeared at zone for dnshl.net
2026-04-12T08:06:56Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-11T13:03:17Z dns 5175 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 5175) appeared at zone for dnshl.net
2026-04-11T13:03:17Z dns 13906 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 13906) appeared at zone for dnshl.net
2026-04-11T11:03:19Z dns 13906 dns_ds_appeared_at_parent DS (key tag 13906) appeared at parent for dnshl.net
2026-04-11T11:03:19Z rndc rndc_first_observation dnshl.net: observed 0 key(s) via rndc
2026-04-11T11:03:18Z dns dns_soa_appeared_at_zone SOA observed at zone for dnshl.net (serial 2023071876)
2026-04-11T11:03:18Z dns 13906 dns_dnskey_appeared_at_zone DNSKEY (key tag 13906) appeared at zone for dnshl.net
2026-04-11T11:03:18Z dns 42522 dns_dnskey_appeared_at_zone DNSKEY (key tag 42522) appeared at zone for dnshl.net
2026-04-11T11:03:18Z dns 5175 dns_dnskey_appeared_at_zone DNSKEY (key tag 5175) appeared at zone for dnshl.net
2026-04-11T11:03:18Z key KSK 52823 key_file_observed new K*.key for dnshl.net KSK tag=52823
2026-04-11T11:03:18Z key ZSK 62252 key_file_observed new K*.key for dnshl.net ZSK tag=62252
2026-04-11T11:03:18Z key ZSK 812 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=812
2026-04-11T11:03:18Z key ZSK 10703 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=10703
2026-04-11T11:03:18Z key ZSK 48972 key_file_observed new K*.key for hjkl.dnshl.net ZSK tag=48972
2026-04-11T11:03:18Z key KSK 15101 key_file_observed new K*.key for hjkl.dnshl.net KSK tag=15101
2026-04-11T11:03:18Z key KSK 5666 key_file_observed new K*.key for hjkl.dnshl.net KSK tag=5666
2026-04-11T11:03:18Z key KSK 13906 key_file_observed new K*.key for dnshl.net KSK tag=13906
2026-04-11T11:03:18Z key ZSK 5175 key_file_observed new K*.key for dnshl.net ZSK tag=5175
2026-04-11T11:03:18Z key ZSK 42522 key_file_observed new K*.key for dnshl.net ZSK tag=42522