From ray@isc.org Wed Feb 1 17:09:47 2017 MIME-Version: 1.0 X-Spam-Status: No, score=-4.3 required=5.0 tests=ALL_TRUSTED,BAYES_00, RP_MATCHES_RCVD autolearn=ham autolearn_force=no version=3.4.0 content-type: text/plain; charset="utf-8" Message-ID: <2118810d-934c-db09-c219-7e9eff3cfdd9@isc.org> Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) by bugs.isc.org (Postfix) with ESMTP id 3CF7A71B5A8 for ; Wed, 1 Feb 2017 17:09:47 +0000 (UTC) Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 66F823493CD for ; Wed, 1 Feb 2017 17:09:45 +0000 (UTC) Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 56FD0160042 for ; Wed, 1 Feb 2017 17:09:45 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 42CC0160070 for ; Wed, 1 Feb 2017 17:09:45 +0000 (UTC) Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uIaNA-BnrD24 for ; Wed, 1 Feb 2017 17:09:45 +0000 (UTC) Received: from rays-mbp.local (unknown [213.205.194.192]) by zmx1.isc.org (Postfix) with ESMTPSA id B7623160042 for ; Wed, 1 Feb 2017 17:09:44 +0000 (UTC) Delivered-To: bind9-bugs@bugs.isc.org Subject: Root key rollover - managed keys User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 Return-Path: X-Original-To: bind9-bugs@bugs.isc.org Date: Wed, 1 Feb 2017 17:09:42 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mx.pao1.isc.org To: bind9-bugs@isc.org Content-Transfer-Encoding: 7bit From: "Ray Bellis" X-RT-Original-Encoding: utf-8 X-RT-Interface: Email Content-Length: 848 The KSK should be formally available Friday 3rd February. Informally, it's: . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3 +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU= with DS Records: . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724 . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D I suggest we add this to the RC now, with the understanding that we verify this against the ICANN published DS on Friday, and pull it out again if ICANN suffer an error importing the new key into their HSMs tomorrow. Ray