Every observed key on a time axis, grouped by (role, algorithm),
subdivided into pre-publication / published / active / retired / removed
phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when
the chain of trust was complete. Simultaneous active phases across two
algorithms are highlighted to make algorithm rollovers pop at a glance.
Events observed via live DNS queries and reported by rndc dnssec -status.
File event timeline
Changes observed in the K*.state and K*.key files.
State transition timeline
Event log
Filters apply to every section on this page (timelines, calendar, and
the event table below). DNSKEY focus is a preset for
hide_types=rrsig,soa. role=ZSK additionally
drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.