dnssec-tracker

groot53.com

Key directory: /mnt/bind/keys/groot53.com
Tracked since 2026-04-11T11:03:18Z, last observation 2026-05-26T22:06:54Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
15484 KSK 14 Kgroot53.com.+014+15484 2026-04-11T11:03:18Z
17863 KSK 14 Kgroot53.com.+014+17863 2026-04-11T11:03:18Z
45657 KSK 14 Kgroot53.com.+014+45657 2026-04-11T11:03:18Z
46848 KSK 14 Kgroot53.com.+014+46848 2026-04-11T11:03:18Z
8940 ZSK 14 Kgroot53.com.+014+08940 2026-05-16T00:30:34Z
19094 ZSK 14 Kgroot53.com.+014+19094 2026-04-11T11:03:18Z
21000 ZSK 14 Kgroot53.com.+014+21000 2026-04-11T11:03:18Z
40142 ZSK 14 Kgroot53.com.+014+40142 2026-04-16T00:30:27Z
43098 ZSK 14 Kgroot53.com.+014+43098 2026-04-11T11:03:18Z
43138 ZSK 14 Kgroot53.com.+014+43138 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-published / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-05-26 22:07 UTC2026-04-112026-04-172026-04-222026-04-282026-05-042026-05-092026-05-152026-05-212026-05-26KSK · alg 14ZSK · alg 14tag 15484KSK tag 15484 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCKSK tag 15484 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-05-26 22:07 UTCactiveDS overlap with another KSK 2026-04-11 11:03 → 2026-05-04 11:52 UTCDS observed at parent 2026-04-11 11:03 → 2026-05-26 22:07 UTCDStag 17863KSK tag 17863 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedDStag 45657KSK tag 45657 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedDStag 46848KSK tag 46848 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCKSK tag 46848 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedDS overlap with another KSK 2026-04-11 11:03 → 2026-05-04 11:52 UTCDStag 19094ZSK tag 19094 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedtag 21000ZSK tag 21000 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCZSK tag 21000 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-16 01:45 UTCactiveZSK tag 21000 alg 14 — inactive not signing, published for resolver caches, awaiting delete 2026-04-16 01:45 → 2026-04-26 02:50 UTCinactiveZSK tag 21000 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-26 02:50 → 2026-05-26 22:07 UTCremovedtag 43098ZSK tag 43098 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedtag 43138ZSK tag 43138 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-05-26 22:07 UTCremovedtag 40142ZSK tag 40142 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-16 00:30 → 2026-04-16 00:31 UTCZSK tag 40142 alg 14 — published DNSKEY visible but not yet signing 2026-04-16 00:31 → 2026-04-16 01:45 UTCZSK tag 40142 alg 14 — active signing DNSKEY / zone data 2026-04-16 01:45 → 2026-05-16 01:45 UTCactiveZSK tag 40142 alg 14 — inactive not signing, published for resolver caches, awaiting delete 2026-05-16 01:45 → 2026-05-26 02:50 UTCinactiveZSK tag 40142 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-05-26 02:50 → 2026-05-26 22:07 UTCtag 8940ZSK tag 8940 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-05-16 00:30 → 2026-05-16 00:30 UTCZSK tag 8940 alg 14 — published DNSKEY visible but not yet signing 2026-05-16 00:30 → 2026-05-16 01:45 UTCZSK tag 8940 alg 14 — active signing DNSKEY / zone data 2026-05-16 01:45 → 2026-05-26 22:07 UTCactivenowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 1966-04 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
March 1966
MonTueWedThuFriSatSun
28123456
78910111213
14151617181920
21222324252627
28293031123
April 1966
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
2526272829301
May 1966
MonTueWedThuFriSatSun
2526272829301
2345678
9101112131415
16171819202122
23242526272829
303112345

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11 11:03 → 2026-05-26 19:59 UTCrndcdns2026-04-112026-04-172026-04-222026-04-282026-05-042026-05-092026-05-152026-05-212026-05-268116116171428242171412248914124101412221017141242894

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11 11:03 → 2026-05-26 03:05 UTCstatekey2026-04-112026-04-172026-04-222026-04-282026-05-032026-05-092026-05-142026-05-202026-05-268231288888

State transition timeline

2026-04-14T13:27:48+00:00 → 2026-05-26T03:05:41+00:00ZSK 8940 · DNSKEYStateomnipresentomnipresentZSK 8940 · ZRRSIGStaterumouredrumouredomnipresentKSK 15484 · DSStateomnipresentomnipresentZSK 21000 · DNSKEYStateunretentivehiddenhiddenZSK 21000 · GoalStatehiddenhiddenZSK 21000 · ZRRSIGStateunretentiveunretentivehiddenhiddenZSK 40142 · DNSKEYStateomnipresentomnipresentunretentivehiddenZSK 40142 · GoalStatehiddenhiddenZSK 40142 · ZRRSIGStaterumouredrumouredomnipresentomnipresentunretentiveunretentivehiddenKSK 46848 · DNSKEYStateunretentivehiddenhiddenKSK 46848 · DSStateunretentiveunretentiveKSK 46848 · KRRSIGStateunretentivehiddenhiddenhiddenrumouredomnipresentunretentiveN/A

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-05-26T19:59:44Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-26T19:59:44Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-26T18:49:23Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-26T18:49:23Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-26T04:09:53Z rndc ZSK 43138 rndc_key_deleted groot53.com ZSK tag=43138 no longer reported by rndc dnssec -status (key deleted)
2026-05-26T03:09:41Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 dnskey: unretentive -> hidden
2026-05-26T03:05:41Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 DNSKEYChange: 20260526025027 (Tue May 26 02:50:27 2026) -> 20260526030527 (Tue May 26 03:05:27 2026)
2026-05-26T03:05:41Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 DNSKEYState: unretentive -> hidden
2026-05-26T02:54:38Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 published: yes -> no
2026-05-26T02:54:38Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_rrsig: unretentive -> hidden
2026-05-26T02:54:38Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 dnskey: omnipresent -> unretentive
2026-05-26T02:54:38Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 zone_rrsig: rumoured -> omnipresent
2026-05-26T02:51:24Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-26T02:51:24Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-05-26T02:51:24Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-26T02:51:24Z dns 40142 dns_dnskey_disappeared_at_zone DNSKEY (key tag 40142) disappeared at zone for groot53.com
2026-05-26T02:50:39Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 ZRRSIGChange: 20260516014527 (Sat May 16 01:45:27 2026) -> 20260526025027 (Tue May 26 02:50:27 2026)
2026-05-26T02:50:39Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 DNSKEYChange: 20260416014527 (Thu Apr 16 01:45:27 2026) -> 20260526025027 (Tue May 26 02:50:27 2026)
2026-05-26T02:50:39Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 ZRRSIGState: unretentive -> hidden
2026-05-26T02:50:39Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 DNSKEYState: omnipresent -> unretentive
2026-05-26T02:50:39Z state ZSK 8940 state_timing_changed groot53.com ZSK tag=8940 ZRRSIGChange: 20260516014527 (Sat May 16 01:45:27 2026) -> 20260526025027 (Tue May 26 02:50:27 2026)
2026-05-26T02:50:39Z state ZSK 8940 state_changed groot53.com ZSK tag=8940 ZRRSIGState: rumoured -> omnipresent
2026-05-25T02:28:33Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-25T02:28:33Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-05-25T02:28:33Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-22T22:52:04Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-22T22:52:04Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-21T02:24:29Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-21T02:24:29Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-20T18:35:09Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-20T18:35:09Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T15:51:04Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T15:51:04Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T14:58:46Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T14:58:46Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T12:03:25Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T12:03:25Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T10:37:20Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T10:37:20Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T07:10:40Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T07:10:40Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-19T04:29:17Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-19T04:29:17Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-18T03:30:15Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-18T03:30:15Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T23:46:41Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T23:46:41Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T23:13:51Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T23:13:51Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T22:53:18Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T22:53:18Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T22:11:15Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T22:11:15Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T20:32:47Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T20:32:47Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-17T19:29:07Z dns 8940 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8940) disappeared at zone for groot53.com
2026-05-17T19:29:07Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-16T01:46:50Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 zone_signing: no -> yes
2026-05-16T01:46:50Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 zone_rrsig: hidden -> rumoured
2026-05-16T01:46:50Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 dnskey: rumoured -> omnipresent
2026-05-16T01:46:50Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_signing: yes -> no
2026-05-16T01:46:50Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_rrsig: omnipresent -> unretentive
2026-05-16T01:45:46Z dns 40142 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 40142) disappeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-16T01:45:46Z dns 8940 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8940) appeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-05-16T01:45:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-16T01:45:44Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 ZRRSIGChange: 20260426025027 (Sun Apr 26 02:50:27 2026) -> 20260516014527 (Sat May 16 01:45:27 2026)
2026-05-16T01:45:44Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 ZRRSIGState: omnipresent -> unretentive
2026-05-16T01:45:44Z state ZSK 8940 state_timing_changed groot53.com ZSK tag=8940 ZRRSIGChange: 20260516003027 (Sat May 16 00:30:27 2026) -> 20260516014527 (Sat May 16 01:45:27 2026)
2026-05-16T01:45:44Z state ZSK 8940 state_timing_changed groot53.com ZSK tag=8940 DNSKEYChange: 20260516003027 (Sat May 16 00:30:27 2026) -> 20260516014527 (Sat May 16 01:45:27 2026)
2026-05-16T01:45:44Z state ZSK 8940 state_changed groot53.com ZSK tag=8940 ZRRSIGState: hidden -> rumoured
2026-05-16T01:45:44Z state ZSK 8940 state_changed groot53.com ZSK tag=8940 DNSKEYState: rumoured -> omnipresent
2026-05-16T00:31:33Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 zone_signing: (none) -> no
2026-05-16T00:31:33Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 published: (none) -> yes
2026-05-16T00:31:33Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 zone_rrsig: (none) -> hidden
2026-05-16T00:31:33Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 dnskey: (none) -> rumoured
2026-05-16T00:31:33Z rndc ZSK 8940 rndc_state_changed groot53.com ZSK tag=8940 goal: (none) -> omnipresent
2026-05-16T00:31:33Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 goal: omnipresent -> hidden
2026-05-16T00:30:47Z dns 40142 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 40142) disappeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-05-16T00:30:47Z dns 40142 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 40142) appeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-05-16T00:30:47Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com