As I shared in the last article about the generation of the new Internet root DNSSEC key, this week it was officially published:

. DS 38696 8 2 683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16

This is the third DNSSEC root key in history. Recall that the first was in 2010, and the second -which corresponded to the first rollover- was 2016.

As always, the official publication site is that of IANA Trust Anchors and Keys.

For the time being, there is no need for either operators or the public to do anything. It is expected that from now on all DNS software will start to incorporate this new key in their internal stores, and start to be installed with normal software updates. There is still time, the final rollover is planned for October 2026, more than two years from today. In any case, it is expected that a few months before the final rotation, tools will be available to verify that everything is OK.