dnssec-tracker

dnslab.us

Key directory: /mnt/bind/keys/dnslab.us
Tracked since 2026-04-11T11:03:18Z, last observation 2026-04-17T16:47:43Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
12022 KSK 14 Kdnslab.us.+014+12022 2026-04-11T11:03:18Z
57017 KSK 14 Kdnslab.us.+014+57017 2026-04-11T11:03:18Z
8119 ZSK 14 Kdnslab.us.+014+08119 2026-04-11T11:03:18Z
26424 ZSK 14 Kdnslab.us.+014+26424 2026-04-11T11:03:18Z
44535 ZSK 14 Kdnslab.us.+014+44535 2026-04-15T20:56:35Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-published / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-04-17 16:48 UTC2026-04-112026-04-122026-04-132026-04-132026-04-142026-04-152026-04-162026-04-162026-04-17KSK · alg 14ZSK · alg 14tag 12022KSK tag 12022 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-17 16:48 UTCactiveDS observed at parent 2026-04-11 11:03 → 2026-04-17 16:48 UTCDStag 57017KSK tag 57017 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-17 16:48 UTCremovedDStag 8119ZSK tag 8119 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 22:11 UTCactiveZSK tag 8119 alg 14 — inactive not signing, published for resolver caches, awaiting delete 2026-04-15 22:11 → 2026-04-17 16:48 UTCinactivetag 26424ZSK tag 26424 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-17 16:48 UTCremovedtag 44535ZSK tag 44535 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-15 20:56 → 2026-04-15 20:56 UTCZSK tag 44535 alg 14 — published DNSKEY visible but not yet signing 2026-04-15 20:56 → 2026-04-15 22:11 UTCZSK tag 44535 alg 14 — active signing DNSKEY / zone data 2026-04-15 22:11 → 2026-04-17 16:48 UTCactivenowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 2024-08 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
July 2024
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
August 2024
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
2627282930311
September 2024
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
23242526272829
30123456

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11 11:03 → 2026-04-17 13:47 UTCrndcdns2026-04-112026-04-122026-04-122026-04-132026-04-142026-04-152026-04-162026-04-162026-04-176564984

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11 11:03 → 2026-04-15 22:11 UTCstatekey2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-154264

State transition timeline

2026-04-15T20:56:35+00:00 → 2026-04-15T22:11:44+00:00ZSK 8119 · GoalStatehiddenhiddenZSK 8119 · ZRRSIGStateunretentiveZSK 44535 · DNSKEYStateomnipresentZSK 44535 · ZRRSIGStaterumouredhiddenrumouredomnipresentunretentiveN/A

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-04-17T13:47:22Z dns 44535 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 44535) disappeared at zone for dnslab.us
2026-04-17T13:47:22Z dns 44535 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 44535) appeared at zone for dnslab.us
2026-04-17T13:46:21Z dns 44535 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 44535) disappeared at zone for dnslab.us
2026-04-17T13:46:21Z dns 44535 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 44535) appeared at zone for dnslab.us
2026-04-15T22:13:04Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 zone_signing: no -> yes
2026-04-15T22:13:04Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 zone_rrsig: hidden -> rumoured
2026-04-15T22:13:04Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 dnskey: rumoured -> omnipresent
2026-04-15T22:13:04Z rndc ZSK 8119 rndc_state_changed dnslab.us ZSK tag=8119 zone_signing: yes -> no
2026-04-15T22:13:04Z rndc ZSK 8119 rndc_state_changed dnslab.us ZSK tag=8119 zone_rrsig: omnipresent -> unretentive
2026-04-15T22:12:06Z dns 8119 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 44535 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 44535) appeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 12022) appeared at zone for dnslab.us
2026-04-15T22:12:06Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-15T22:11:44Z state ZSK 44535 state_timing_changed dnslab.us ZSK tag=44535 ZRRSIGChange: 20260415205630 (Wed Apr 15 20:56:30 2026) -> 20260415221130 (Wed Apr 15 22:11:30 2026)
2026-04-15T22:11:44Z state ZSK 44535 state_timing_changed dnslab.us ZSK tag=44535 DNSKEYChange: 20260415205630 (Wed Apr 15 20:56:30 2026) -> 20260415221130 (Wed Apr 15 22:11:30 2026)
2026-04-15T22:11:44Z state ZSK 44535 state_changed dnslab.us ZSK tag=44535 ZRRSIGState: hidden -> rumoured
2026-04-15T22:11:44Z state ZSK 44535 state_changed dnslab.us ZSK tag=44535 DNSKEYState: rumoured -> omnipresent
2026-04-15T22:11:44Z state ZSK 8119 state_timing_changed dnslab.us ZSK tag=8119 ZRRSIGChange: 20260224231630 (Tue Feb 24 23:16:30 2026) -> 20260415221130 (Wed Apr 15 22:11:30 2026)
2026-04-15T22:11:44Z state ZSK 8119 state_changed dnslab.us ZSK tag=8119 ZRRSIGState: omnipresent -> unretentive
2026-04-15T20:57:22Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 zone_signing: (none) -> no
2026-04-15T20:57:22Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 published: (none) -> yes
2026-04-15T20:57:22Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 zone_rrsig: (none) -> hidden
2026-04-15T20:57:22Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 dnskey: (none) -> rumoured
2026-04-15T20:57:22Z rndc ZSK 44535 rndc_state_changed dnslab.us ZSK tag=44535 goal: (none) -> omnipresent
2026-04-15T20:57:22Z rndc ZSK 8119 rndc_state_changed dnslab.us ZSK tag=8119 goal: omnipresent -> hidden
2026-04-15T20:56:35Z state ZSK 44535 state_key_observed new K*.state for dnslab.us ZSK tag=44535
2026-04-15T20:56:35Z state ZSK 8119 state_changed dnslab.us ZSK tag=8119 GoalState: omnipresent -> hidden
2026-04-15T20:56:35Z key ZSK 44535 key_file_observed new K*.key for dnslab.us ZSK tag=44535
2026-04-15T20:56:34Z dns 8119 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 12022) disappeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 8119 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 12022) appeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-15T20:56:34Z dns 44535 dns_dnskey_appeared_at_zone DNSKEY (key tag 44535) appeared at zone for dnslab.us
2026-04-11T13:03:17Z dns 8119 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us
2026-04-11T13:03:17Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-11T13:03:17Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 12022) appeared at zone for dnslab.us
2026-04-11T13:03:17Z dns 12022 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-11T11:03:19Z dns 12022 dns_ds_appeared_at_parent DS (key tag 12022) appeared at parent for dnslab.us
2026-04-11T11:03:19Z rndc rndc_first_observation dnslab.us: observed 4 key(s) via rndc
2026-04-11T11:03:18Z dns 12022 dns_cdnskey_appeared_at_zone CDNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-11T11:03:18Z dns 12022 dns_cds_appeared_at_zone CDS (key tag 12022) appeared at zone for dnslab.us
2026-04-11T11:03:18Z dns dns_soa_appeared_at_zone SOA observed at zone for dnslab.us (serial 2018113535)
2026-04-11T11:03:18Z dns 12022 dns_dnskey_appeared_at_zone DNSKEY (key tag 12022) appeared at zone for dnslab.us
2026-04-11T11:03:18Z dns 8119 dns_dnskey_appeared_at_zone DNSKEY (key tag 8119) appeared at zone for dnslab.us
2026-04-11T11:03:18Z key ZSK 26424 key_file_observed new K*.key for dnslab.us ZSK tag=26424
2026-04-11T11:03:18Z key ZSK 8119 key_file_observed new K*.key for dnslab.us ZSK tag=8119
2026-04-11T11:03:18Z key KSK 12022 key_file_observed new K*.key for dnslab.us KSK tag=12022
2026-04-11T11:03:18Z key KSK 57017 key_file_observed new K*.key for dnslab.us KSK tag=57017
2026-04-11T11:03:18Z state KSK 12022 state_key_observed new K*.state for dnslab.us KSK tag=12022
2026-04-11T11:03:18Z state KSK 57017 state_key_observed new K*.state for dnslab.us KSK tag=57017
2026-04-11T11:03:18Z state ZSK 26424 state_key_observed new K*.state for dnslab.us ZSK tag=26424
2026-04-11T11:03:18Z state ZSK 8119 state_key_observed new K*.state for dnslab.us ZSK tag=8119